last executing test programs: 56.57950049s ago: executing program 0 (id=223): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0x4b0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) write$tun(r1, &(0x7f0000000100)={@void, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @broadcast, @mcast1, @dev, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x3e) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r6, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 55.345453805s ago: executing program 0 (id=224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000340)=@raw=[@exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call, @exit], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x9, 0x8001, 0x101}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x1, 0x3, 0x9, 0xe}], 0x10, 0xa, @void, @value}, 0x90) mount$9p_fd(0x0, 0x0, 0x0, 0x804850, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r1, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000700)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x90e, &(0x7f00000007c0)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@init_itable}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000280)="$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") chdir(&(0x7f0000000000)='./file0\x00') r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$UFFDIO_CONTINUE(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x4}, &(0x7f0000000440), &(0x7f0000000380)) close_range(r5, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r8, &(0x7f0000000000)=@id, 0x10) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='percpu_free_percpu\x00', r0}, 0x10) 53.727279825s ago: executing program 0 (id=227): r0 = open(&(0x7f00000004c0)='./bus\x00', 0x400143042, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000ff00000000000c0016800800010006000000060015000a0000002a5d39bee129923530babf76fad07718ff28cb5e40aa21a1a5a2c670ee8ef2488b68189ac88ed699273c148149a84f9814df73ca606000c090a04084c6d5cc9a9616d3d9559287c85fc7ea6c6f450e8cb601844f541c826507c706"], 0x30}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000340)="87", 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x100, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000200)=0x5, 0x2) r5 = socket$key(0xf, 0x3, 0x2) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e30000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000fc0000000005000500000000000a00000000000000ff0a000000000000000000000000000100000000"], 0x80}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x4d) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$isdn(0x22, 0x3, 0x22) bind(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 52.292104143s ago: executing program 0 (id=229): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1008008, &(0x7f00000003c0)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000002740)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcZy9S+mYhXOqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgpYzOxbcUWRNi2KEmV9Pjb13Z15b/a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvHU6fSwWwEAPEiXx7526oz7PwA8Vq74/38AAAAAAAAAAAAAADjoUhTxZKSYv7yeJqr3HfVL7b6bt8aHR7avdiRVNQ9V5cuf+ukzZ8996YWh89281J79gPr322fjtbErFxsvz92YX5heXJyeaozPtifnpqZ3fYS91t9qsDoBjRuv35y6dm2xceb5s3fsvjXwfv8TxwcuDD178plu2fHhkZGxzSL13vK1e25Ix04zPA5HEScjxXPf/1lqRUQRez8X9Qc79lsdqToxWHVifHik6shMuzW7VO4c7Z6IIqLRU6nZPUfbj0XU+h5oH3bWjFgum182eLDs3th8a6F1dWa6MdpaWGovtedmR1OntWV/GlHE+RSxEhFr/Xcfri+KqEWK7x5bT1cj4lD3PHyxmhi8czuKfezjLpTtbPRFrBSPwJgdYP1RxKuR4ufvnIjJfJ2prjVfiHi1zB9GvFXmSxGp/GKci3hvm+8Rj6ZaFPEX5fhfWE9T1fWge1259PXGV2evzfWU7V5XPuL94a4rxUO6PxzZkg/GAb821aOIVnXFX0/3/psdAAAAAAAAAAAAAAAAAO63I1HEZyLFK//+x9W84qjmpR+7MPQHA7/aO2f86Q85Tln2+YhYLnY3J/dwnhg4mkZTeshziR9n9SjiT/L8v28/7MYAAAAAAAAAAAAAAAAAAAA81or4aaR48d0TaSV61xRvz15vXGldnemsCttd+7e7ZvrGxsZGI3WymXMi53LOlZyrOddyRpHr52zmnMi5nHMl52rOtZxxKNfP2cw5kXM550rO1ZxrOaOW6+ds5pzIuZxzJedqzrWccUDW7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DgpoohfRorvfHM9RYqIZsREdHK1/2G3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9acifhApGn/YvL2tFhGp+rfjRPnLuWgeLvOT0Rwq86VoXszZqrLW/PZDaD9705eK+Emk6K+/fXvA8/j3dd7d/hrEW9/afPfZWicPdXcOvN//xPFjF4ZGfuPpnV6n7RoweKk9e/NWY3x4ZGSsZ3Mtf/one7YN5M8t7k/XiYjFN958vTUzM71w7y/Kr8Aeqj9CL1LtcempF9WLqB2IZjycvvMYKO//70WK3333P7o3/M79vx6/0nl3+w4fv/jTzfv/i1sPtMv7f21rvXz/L+/p293/n+zZ9mL+3UhfLaK+dGO+73hEffGNN0+2b7SuT1+fnj136tSXh4a+fPZU3+GI+rX2zHTPq/tyugAAAAAAAAAAAAAAAAAenFTEVyJF6yfrqRERt6r5WgMXhp49+cyhOFTNt7pj3vZrY1cuNl6euzG/ML24OD3VGJ9tT85NTe/24+rVdK/x4ZF96cyHOrLP7T9Sf3lu/o2F9vU/Wtp2/9H6xauLSwutye13x5EoIpq9WwarBo8Pj1SNnmm3Zquqo9tOpv/o+lIR/xkpJs810ufztjz/f+sM/zvm/y9vPdA+zf//RM+28jNTKuIXkeJ3/vLp+HzVzqNx1znL5f42Ugye/1wuF4fLct02dJ4r0JkZWJb930jxj7+8s2x3PuSTm2VP7/rEPiLK8T8WKX7w59+L38zb7nz+w/bjf3TrgfZp/J/q2Xb0jucV7Lnr5PE/GSleevLt+K287YOe/9F99saJXPj28zn2afw/1bNtIH/ub9+frgMAAAAAAAAAADzS+lIRfxcpfjRSSy/kbbv5+39TWw+0T3//69M926buz3pFH/pizycVAAAAAA6IvlTETyPF9aW3b8+hvnP+d8/8z9/bnP85nLbsrf6c79eq5wbczz//6zWQP3di790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66lPVPP5p3ZcT301Urzy38/lcul4Wa67DvxA9Wv98tzsyYszM3OTraXW1Znpxth8a3K6rPtUpFj/m8/lukW1vnp3vfnOGu+ba7EvRIqRv++W7azF3l2b/KnNsqfLsp+IFP/1D3eW7a5j/anNsmfKsn8dKb7xz9uXPb5Z9mxZ9nuR4sffaHTLHi3Ldp+P+unNss9PzhX7MCoAAAAAAAAAAAAAAAAAAAA8bvpSEX8WKf7nxsrtufx5/f++nreVt77Vs97/Freqdf4HqvX/d3p9L+v/V88VWN7pUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OMpRRFvRor5y+tptb9831G/1J69eWt8eGT7akdSVfNQVb78qZ8+c/bcl14YOt/ND65/v30mXhu7crHx8tyN+YXpxcXpqcb4bHtybmp610fYa/2tBqsT0Ljx+s2pa9cWG2eeP1ttPpx33xp4v/+J4wMXhp49+Uy37PjwyMhYzyFqfff86XdJO2w/HEX8VaR47vs/Sz/qjyhi7+fiQ747++1I1YnBqhPjwyNVR2bardmlcudo90QUEY2eSs3uOXoAY7EnzYjlsvllgwfL7o3NtxZaV2emG6OthaX2UntudjR1Wlv2pxFFnE8RKxGx1n/34fqiiNcjxXePrad/6Y841D0PX7w89rVTZ3ZuR7GPfdyFsp2NvoiV4hEYswOsP4r4p0jx83dOxL/2R9Si8xNfiHi1zB9GvBWd8U7lF+NcxHvbfI94NNWiiP8rx//Cenqnv7wedK8rl77e+Orstbmest3ryiN/f3iQdr42feWBtmMH9Sjix9UVfz39m/+uAQAAAAAAAAAAAAAAAA6QIn49Urz47olUzQ/Oc4qfynuvznSm9XXn/nXnTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjUK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs5w7xiAAAAAAAAAAAAAAAAAABgHxTVPym+8831tNHfWV96Ijq5aj3Qj73/DwAA//8H5/Ye") rename(&(0x7f0000000e00)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) memfd_create(&(0x7f0000000280)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3\xceB\xfc\xd4c\x1a\x8d>Xt\xdd\xbb\x80!Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6\xde7\x17\x95$\xdd\x8ew\a\xe5\x1f\xe0:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\t\xdbb\x9d\x9dN\xa2\xee\xb8\xf6\xe2\xb4c\xc4\xb0\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\x94\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xe0\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\f=_\t\x18L&\xaf\xb4v\"ukO\xa6\xf3\xde\x96\x85\xc5\xdd\x12|C.\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY3\xeb\xf6\xa3\x95!:\xd1CF\xfd\xcdx\x86\xe3\x19\xb2u[2\xd6=\xd6\'\n\xc1\xdc\x7f\x8c\xdc\x02\xb7=\xc1\xf9\xb5\xa8\x88\a\xbbL\x87\xa5\xd8_\xae\xa4\r\xc9\b6)&\xe1\xea\xcdo\xa3\xcc\x9d`.\xdb\"Y\xd8\x86J#o\xcc\xff\xaaS\x03\xa8~\x99\xe5\n\x00\x00\x00\x00\x00\x00\x03\xcd\xab\x89h6FvS\xf9\x1a\xa0\xba\xed\xcc\x94\x91\xfez\x96MQ\x99{w\x82ge5\xa0K\xd8\xba\x87u\xe19\x8a{,\x06\x06\xcb\x17:~\xa0@\xefF?%\x99}\xda\xb6\x9ff\x96\x0e\x1b/\x12lUpW@\x90\"\x02L\"S\xeb\xd6\xb3\xf1\a\x8f\x93\xb5P\xd5\x892\xaa\xa4N\xf9\xf6C\xc4\n\xe3\xf9\xcb\xce\xe7\xdcS\xb0r\xf6M0\xe3y\xcdQ\xfc9C<\x06W\x8f\n\xa13L\xfb\xee?dN\"\xa8\xe6\x10L\xd9\xc6|\xear\r\xb7\xda`\xb8\xf2\b\xf6\xa76\xdb\xbe&\x16\x06\xc0\x97\xab\x98\xcdA\x1f&\x98\xb4.g\x05\xe2[\x97\xbb\xd7\xba\xcc\x9b3L5\x06\x95!\\\x81\x16\xdeY\xcb=\x8e\xe4\xd5\xc1\xbd!\x1dp]Q\x03\x1e0\xb0\x05\xe6Frv\xf5Lu\xdc7\xa13s\xd9j\xe2\x18\"6wCi\x1do/\x1b(\xeea(~\xb7\xf2\xd7\xdc\xea\x02f\x04\x14\x0e\xcc\x99\x9ff\xa0\xaa\xe2\x94\xfd\xfa\xfbW\xa8\xe0', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @typedef={0x1}]}}, &(0x7f0000000c00)=""/146, 0x3e, 0x92, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg(r1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x1, 0x76e, &(0x7f0000000800)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xec, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 49.425696488s ago: executing program 0 (id=234): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0x4b0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) write$tun(r1, &(0x7f0000000100)={@void, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @broadcast, @mcast1, @dev, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x3e) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r6, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 46.431399713s ago: executing program 0 (id=236): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff060108ac"], 0x5) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x6, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_emit_ethernet(0x1d6, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x1a0, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private2, @mcast1]}], "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"/328}}}}}}}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000300)={&(0x7f0000000040), 0x14, &(0x7f0000000180)={&(0x7f00000003c0)="6489e9fadfee9af8b278c7200f868a140db5b79bfd3a1dbb6d1f29527f6f239cdac080120dea277664185abade97a91d2b42e2187b3962efc84160ce682343d9f0fb891734eeae37ed71c3939a311ec2337b87", 0x53}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64], 0xfe, 0x4c9, &(0x7f0000001b80)="$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") 43.09629643s ago: executing program 2 (id=241): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r6, &(0x7f0000001440)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0053a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961250c00241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6c461e192c0a86310885aba7445c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612b7b4a272d1820bcd04bdb63b1e50921d38201005d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b879cec6ecda7f6dbc029abc77402350a6fdcb3ed66b34e218ab8c1b765c9a343933b0f944b7d9b2bde8583721cbe16c7da6f9e4824dfb95f3640839061406140cce0fdecdf4c9d168868cfb834a1ee328db036761d49529fc44af51ed9d301a26b01ddcbd1e06cc647affba57b85198b663054d60f49f4d9a13e85642255b3a445303fa339f728f07c8a6a7ff8d9412988b0407bdcc7fdb422b29e8a3909605d200702bebb0f0dc2bf6fdd8a400436dcdc0fcbb1bae069778675586b60a3a6216ca2d11154a853151a816239d0a492b1fafbb90fbdaa947325fab3b093a55f6cf820bd71e82ac721774fab8bf0b70aacf2c0af39ec446d37d474746f1b6091bcb5dd329236405c268626c52dd7ab93b16f39b7ce7217b12edf3479d34270699aa9dee038830657e4bbc9a9e6df0eda172c1b9c0553c715c588c52931f99bfc94cf18bf3274af340bfdbb480092b2a4779bb48b9bbfeee9214ca3d2bf9c8126643b3854827d39b8dafd707b18c1fad86f49c62bb920f6c13d3c51c2dae4996746e0ef7baba0fef836a359f29a9b4ef3db9607f66cda2c5c94988c8c787dec6b4b1b4b097c79630a430f6c9357c80ee5d874ece2775a7aac08c2247ab0b7478cfe323391c5cad8e046da7e2721ddc7620b0d85338ed98f7585c4393ff488369f08f0fba12cb0a4c0c7abb6c03cfdf6428a164540e65af30a1372600d15f45ce50adc0bb18c524ed4ef199875c364f999b7ea081c41e6404ac42d74fd4da5edd8a162104576248444a9520a693e6e56cabbab21a31c86c49919e278333019851ebc651238989baae628ac88d513178c6bf52df02ca60fdc17671f8494e7bed778687902732d0abc05658a1566246", 0x782, 0x2004c890, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r11, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 37.876039916s ago: executing program 2 (id=248): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x20000010304, @remote}, 0x2, {0x2, 0x0, @empty}}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002440)=[{&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/56, 0x38}], 0x4, &(0x7f0000002480)=""/113, 0x71}, 0x10020) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x80, @multicast2}, {0x6, @multicast}, 0x2, {0x2, 0x0, @loopback}, 'caif0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004b40), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r4, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x50002004}) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000200)=0x68) splice(r0, &(0x7f0000000000)=0x1, r1, &(0x7f0000000040)=0x3db, 0xffffffffffffffdd, 0x5) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002540)={0x6, 0x7, 0x9}, 0xc) vmsplice(r2, &(0x7f0000002640)=[{&(0x7f0000002580)="148999a69618fc6e3914f187644dabfb4e21c86af4e38bf107691713225cbd0df7fcf869bc44ab49f3", 0x29}, {&(0x7f00000025c0)="0b3bcf743dc3799b028483502706879d13644910adc5deb53966e991911a7b7752efdcacf35fe4dc28bdffaa95eebbe3f72001befbc5d9a2c661fc81f1711c658342f9c6c192dea29ce3ca31b0875ff9", 0x50}], 0x2, 0x2) r7 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(r6, &(0x7f0000002900)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="74010000410000082abd7000fbdbdf25010000001000e1800c00c50000010000000000004cdf84ff92b012fd65acb0e4e20e39424c67b0fe236f79acdf37e0a250d2141118d79ded52ff2e1a4ff97e1b7b7277663174b07d605b2f795c9bed88773080c572d74de6cc5123e2320b27bb3da8420865a8db17a43aad9bf370d6b194cf24cca9b86bab3d1445016c59b7730645848654bdc41ecd199a328b32eadc0de3d125f8a7ce4b4742e2cfacaead1b43572d5c196b42008ec463f548734fb82feb83dc4b8df784e9af7e4f8f890e72a253f20366c78015014e606ea0a91b7f859d4e9f1bf2d050358d8133b694bde8c57c927b005ac0be564e66cb286c8cbdcb4740ffa22744520f4fb0c970a152e948ed6b4fc0a812f3f8f8547c57c160399c18cc6fdcee01a055f752510fdbca0989f2a9b638da04ac04db985025cf417c26e09a2c6249b4d8d2f1509379b82dd9cfbad6c58b9bea0d54ad22ecabc2d259cb8a7371382b16c253b66c5c4959e618b73b02072beadc86b840017ea7d77424052404f7a9e052ff7c8dbb728113e06e3c7a986891ea489f4003f34024a45cde6110e13fde52c3a34aafc8dc550b2d30be91931c5907957f6fefbff8f56a943ddff1376c9c567be620f8ab3d9707e2d6e5b312e481448d3a83546d146b51c3667f836ee879482fc9cfe42e637624846ffa"], 0x174}, 0x1, 0x0, 0x0, 0x24044010}, 0x35a0717ed77fc2e5) ioctl$sock_inet_SIOCDELRT(r7, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4625, @local}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0xda}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000002680)={'ah\x00'}, &(0x7f0000002700)=0x1e) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000002740)=0xc, 0x4) setsockopt$MRT_PIM(r6, 0x0, 0xcf, &(0x7f0000002780)=0x2, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x20000010304}, 0x2, {0x2, 0x0, @loopback}}) setsockopt$inet_tcp_int(r8, 0x6, 0xd43dcd9dffc73ac8, &(0x7f0000000300)=0x1ff, 0x4) 34.799529366s ago: executing program 2 (id=253): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000a5db8bdd3bfd5ff4350000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) clock_adjtime(0xffffffd3, &(0x7f0000000340)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x10001, r5}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100018) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000001240)={@host}) 30.655377949s ago: executing program 2 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x6042001) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000180), 0x14) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 29.361728677s ago: executing program 2 (id=258): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="25003300d0000000080211000001080211000000"], 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r6, &(0x7f0000001440)="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", 0x782, 0x2004c890, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r11, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 27.432243579s ago: executing program 2 (id=262): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x18c, 0x148, 0xd0, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x2, 0x2]}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) creat(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c044) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x16, 0x200, &(0x7f0000004180)="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"}) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xf0}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00s\x00') unshare(0x40000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) 14.65893235s ago: executing program 1 (id=281): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000a5db8bdd3bfd5ff4350000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) clock_adjtime(0xffffffd3, &(0x7f0000000340)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x10001, r5}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100018) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000001240)={@host}) 12.288080322s ago: executing program 1 (id=283): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1008008, &(0x7f00000003c0)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000002740)="$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") rename(&(0x7f0000000e00)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) memfd_create(&(0x7f0000000280)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3\xceB\xfc\xd4c\x1a\x8d>Xt\xdd\xbb\x80!Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6\xde7\x17\x95$\xdd\x8ew\a\xe5\x1f\xe0:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\t\xdbb\x9d\x9dN\xa2\xee\xb8\xf6\xe2\xb4c\xc4\xb0\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\x94\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xe0\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\f=_\t\x18L&\xaf\xb4v\"ukO\xa6\xf3\xde\x96\x85\xc5\xdd\x12|C.\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY3\xeb\xf6\xa3\x95!:\xd1CF\xfd\xcdx\x86\xe3\x19\xb2u[2\xd6=\xd6\'\n\xc1\xdc\x7f\x8c\xdc\x02\xb7=\xc1\xf9\xb5\xa8\x88\a\xbbL\x87\xa5\xd8_\xae\xa4\r\xc9\b6)&\xe1\xea\xcdo\xa3\xcc\x9d`.\xdb\"Y\xd8\x86J#o\xcc\xff\xaaS\x03\xa8~\x99\xe5\n\x00\x00\x00\x00\x00\x00\x03\xcd\xab\x89h6FvS\xf9\x1a\xa0\xba\xed\xcc\x94\x91\xfez\x96MQ\x99{w\x82ge5\xa0K\xd8\xba\x87u\xe19\x8a{,\x06\x06\xcb\x17:~\xa0@\xefF?%\x99}\xda\xb6\x9ff\x96\x0e\x1b/\x12lUpW@\x90\"\x02L\"S\xeb\xd6\xb3\xf1\a\x8f\x93\xb5P\xd5\x892\xaa\xa4N\xf9\xf6C\xc4\n\xe3\xf9\xcb\xce\xe7\xdcS\xb0r\xf6M0\xe3y\xcdQ\xfc9C<\x06W\x8f\n\xa13L\xfb\xee?dN\"\xa8\xe6\x10L\xd9\xc6|\xear\r\xb7\xda`\xb8\xf2\b\xf6\xa76\xdb\xbe&\x16\x06\xc0\x97\xab\x98\xcdA\x1f&\x98\xb4.g\x05\xe2[\x97\xbb\xd7\xba\xcc\x9b3L5\x06\x95!\\\x81\x16\xdeY\xcb=\x8e\xe4\xd5\xc1\xbd!\x1dp]Q\x03\x1e0\xb0\x05\xe6Frv\xf5Lu\xdc7\xa13s\xd9j\xe2\x18\"6wCi\x1do/\x1b(\xeea(~\xb7\xf2\xd7\xdc\xea\x02f\x04\x14\x0e\xcc\x99\x9ff\xa0\xaa\xe2\x94\xfd\xfa\xfbW\xa8\xe0', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @typedef={0x1}]}}, &(0x7f0000000c00)=""/146, 0x3e, 0x92, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg(r2, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x1, 0x76e, &(0x7f0000000800)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xec, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 10.932617735s ago: executing program 1 (id=285): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0x4b0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x100000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r6, 0x0, 0x0, 0x0) finit_module(r1, 0x0, 0x0) 10.219402403s ago: executing program 3 (id=286): syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x20900) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0x0, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='ocfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fstat(r3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x10, 0xffffffffffffffff, 0xe5050000) r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x18, r4, 0x0, &(0x7f00000000c0)={0x0}) 9.38452779s ago: executing program 1 (id=287): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200c590, &(0x7f0000000000)={[{@dioread_nolock}, {@minixdf}, {@auto_da_alloc}, {@nouid32}, {@journal_ioprio}, {@quota}]}, 0x12, 0x4f2, &(0x7f0000000a40)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000002200)=':]%\x00', &(0x7f0000002240)='./file1\x00', 0xffffffffffffffff) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func, @map_fd]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9fef0076805268c98bd14f088a84721a012", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r7, 0x40044591, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0x68004006}) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ftruncate(r9, 0x330000) writev(0xffffffffffffffff, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r10, r10, 0x0, 0xe0000000) 9.206719753s ago: executing program 4 (id=288): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) fchmod(r1, 0x12) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)='c', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000000)='a', 0x1}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac", 0x73}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac0", 0x51}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10", 0x2d}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6", 0xc4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000001340)="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", 0xe97}, {0x0}], 0x3, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @noop, @end, @end, @end, @ssrr={0x89, 0xb, 0xa8, [@dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102]}]}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_retopts={{0x10}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x73, 0x1, 0x0, [{@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0xb7}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0xd0}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0xa7e4, 0x794, 0x5, 0x1802, r2, 0x2, '\x00', 0x0, r3, 0x4, 0x4, 0x1, 0x4, @void, @value, @void, @value}, 0xffffffffffffff69) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000480)='ext4_read_block_bitmap_load\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8.689963258s ago: executing program 3 (id=289): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r4, &(0x7f0000001440)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0053a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961250c00241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6c461e192c0a86310885aba7445c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612b7b4a272d1820bcd04bdb63b1e50921d38201005d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b879cec6ecda7f6dbc029abc77402350a6fdcb3ed66b34e218ab8c1b765c9a343933b0f944b7d9b2bde8583721cbe16c7da6f9e4824dfb95f3640839061406140cce0fdecdf4c9d168868cfb834a1ee328db036761d49529fc44af51ed9d301a26b01ddcbd1e06cc647affba57b85198b663054d60f49f4d9a13e85642255b3a445303fa339f728f07c8a6a7ff8d9412988b0407bdcc7fdb422b29e8a3909605d200702bebb0f0dc2bf6fdd8a400436dcdc0fcbb1bae069778675586b60a3a6216ca2d11154a853151a816239d0a492b1fafbb90fbdaa947325fab3b093a55f6cf820bd71e82ac721774fab8bf0b70aacf2c0af39ec446d37d474746f1b6091bcb5dd329236405c268626c52dd7ab93b16f39b7ce7217b12edf3479d34270699aa9dee038830657e4bbc9a9e6df0eda172c1b9c0553c715c588c52931f99bfc94cf18bf3274af340bfdbb480092b2a4779bb48b9bbfeee9214ca3d2bf9c8126643b3854827d39b8dafd707b18c1fad86f49c62bb920f6c13d3c51c2dae4996746e0ef7baba0fef836a359f29a9b4ef3db9607f66cda2c5c94988c8c787dec6b4b1b4b097c79630a430f6c9357c80ee5d874ece2775a7aac08c2247ab0b7478cfe323391c5cad8e046da7e2721ddc7620b0d85338ed98f7585c4393ff488369f08f0fba12cb0a4c0c7abb6c03cfdf6428a164540e65af30a1372600d15f45ce50adc0bb18c524ed4ef199875c364f999b7ea081c41e6404ac42d74fd4da5edd8a162104576248444a9520a693e6e56cabbab21a31c86c49919e278333019851ebc651238989baae628ac88d513178c6bf52df02ca60fdc17671f8494e7bed778687902732d0abc05658a1566246", 0x782, 0x2004c890, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 7.945534768s ago: executing program 4 (id=290): open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000340)=""/222, &(0x7f00000001c0)=0xde) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x40020000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="f500000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000600850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x420, 0x9, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x6, &(0x7f0000000000)=[{0x9, 0x10, 0x9, 0x1}, {0x0, 0x6, 0xde, 0x2}, {0x1, 0xa1, 0x1}, {0xb, 0x9b, 0xfc, 0x2}, {0x4, 0x8, 0x3, 0x7}, {0x769c, 0x5, 0x3, 0x16b}]}) 7.220858408s ago: executing program 1 (id=291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000a5db8bdd3bfd5ff4350000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) clock_adjtime(0xffffffd3, &(0x7f0000000340)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x10001, r5}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100018) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000001240)={@host}) 4.042335085s ago: executing program 4 (id=292): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xd8, 0x1f, 0x9, 0x5, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="dbdf24549b9c322862491241e0eaa92045d6cf719bd5a04c1fda7de0ca832b71ad8c8dcdb023091e", 0x28}, {&(0x7f00000001c0)="1a6bd1ea479467a799be3a5f698d49c4963c6cf9b96b7aec032686bcdd8fc9d9aa98e080c2fb4b9e7f86189a4a44822014472703787d7baa3dc5a2a0b5f43d56ab1fec68af250615ad68002f343637273afb7eba13d577f62731d7b36f1f1f3a172359ae5bab8f5e8e41ad91bc60b8174fc986102af7601a0bc60293ea5a11d39f8686534a7bc08ee5a597d6aaecc5838dce5d3351861f309d41d6ce2e5036100bc1cee262b1f1fdee68e18d9027c02aa2bb9b0ca357e705ebc11237ee2e0bbe6b22297a4558c03afa6d8626fc52eec91912dbdc69a3180772df5affc976eeb8", 0xe0}], 0x2, 0x0, 0x150}}], 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0xfd, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRES32=0x41424344, @ANYRES64, @ANYBLOB="b10000049078000302040000040203039c02040000080a000000810000000100771c97e7a5fa1fc9580d6f1560d068d255c8d35f607113e5c68a4bd59da4876449f7d2e84e1f3c5241927e31f166ac38c2e9048ef5b2c29b06dceb26940b6e2ad6c3facbebc338b34434aff012daf30f00b8fa6e3e68f77897ba4cfae93990b55f1d14c4163695c29e3524db6a85770701c0c41a1d69e0babab8bd74a180ab6de149603afce7c46d8b9c7118d04ff771a7160000000056ab2df9c8d6e773f38921647906d643b481feee022378bcc7b6ab5917"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa100, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0x214) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'wp512-generic\x00'}}) r6 = fsmount(r1, 0x0, 0x0) renameat2(r6, &(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000300)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x14000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f0000000040)={0xf}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 3.96199709s ago: executing program 3 (id=293): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @remote}, &(0x7f0000000300)=0xc) connect$packet(r0, &(0x7f0000000500)={0x11, 0x15, r3, 0x1, 0x2}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0, 0xffffff83}], 0x2}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_getoverrun(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r8}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 3.67030883s ago: executing program 3 (id=294): socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, 0x20}}], 0x48}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x400) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000001940)={[{@journal_dev={'journal_dev', 0x3d, 0x6bb}}, {@noload}, {@errors_remount}, {@data_journal}, {@jqfmt_vfsold, 0x0}, {@usrjquota}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xead7f4600000000}}, {@grpid}, {@noacl}, {@mblk_io_submit}, {@mblk_io_submit}], [], 0x2c}, 0x0, 0x504, &(0x7f0000000c00)="$eJzs3MtvVNUfAPDvnbaU/ni0P3zyUEbR2GiktDwXLoBowsbERGNwZ20LQQoYWhMgjRRjIHGh4S/wsTPxL3ClG6PGhcatxK0xIaYb0IW55s7cGaedmXZap62ln08ywzn3njPnnLn3MOcx0wDWrWL2lERsjoifI6K3HJ2doFj+5+7M1MgfM1MjSaTpy78npXR3ZqZGKkkr+Tblkf5CROG9JHbWF9s9cfnK2eHx8bGL+YGByUIeOjd8euz02PmhI0cO7O85fGjoYFvamdXpzo53LuzafuK1my+OnLz5xrefZ/VN8/O17SjrKz1vaLmEjrojxSjOfi9rPNl61deELTXhpDN7LqxeZWhZdtdml6ur1P97o6MUK+uNF95tmrF7hSoILJs0TdP6rlz9LJtOayVJOUOaXkuBe0ASq10DYHVUPujvzGQz1amR+nnwve32sSjNgLJ2380f5TOdpRlssa88N+papvLvj4iT039+lD2i4ToEAEB7fXks4sbx8rij8iifKcSDNem25ntDfRHx/4jYFhH35eOXByJKaR+KiIdr8mxuYRegOCdeP/75sScP1A5X2yYb/z2X723NHv9Va97Xkce2lNrflZw6Mz62L39P+qOrO4sP1r90dVntq+d/+rBZ+cWa8V/2yMqvjAXzevzWOWeBbnR4crhduyu3r5Xe2Kv17U+iM6mEIrZHxI4lvH72np15+rNdzc7Pan/Wzrr2f9D8xTuXUKE50k8inipf/+mY0/7I9/+S0v7kubcGJi5fefZM7f7k4OFDQwcHNsb42L6Byl1R77sfrr+UB+umEfNc/0rXWNaNtOz6/6/h/V/duezLQtX92onFl3H91o2mc5ql3v8bkldK4cr+7KXhycmLgxEbkun640P/5L003DMrfdb+/j2N+/+2iL8+zvPtjIjsJn4kIh6NiN153R+LiMcjYs887f/m+BNvNptCLtz+5ZW1f3RR179Z4Oj3EY1PdZz9+ou6gt8v1rW/K5pd/wOlUH9+ZHR4cuNC7ZqvprWBf/0GAgAAwBqwu7ROmxT25gtNm6NQ2Ls3YlN1BWVi8plTF94+P1pez+2LrkJlpau3Zj10MF8bzuJZrqGaeHZ+f2ndOE3TtCeLZ/P38S2r23RY9zY16f+ZX+t/0gLcaxa1j9bsF23AmjS3/99qOWf7v5ABrKw2fI8GWKP0f1i/Wu7/y/UrOGDVNOr/VyPurkJVgBXWqP+/Wnfk6IrUBVhZ5v+wfi29//syAKx1Pv9hXWrpR/JLCGw7MU+apHN5Cm0eKMT8fwWgL6JypDKmmf8FfylEtKeGHW1tac+sa1pomGZjNMhe2dppuawoLJimcxF/iGEFAq9vrR4p/BfqUwl0R8QCd2/1ZrtaCVxZ7oqV7oZPV+9/JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPb4OwAA///LX8/3") syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109028c0003010000000904000000010100000a24010000000201020b240700000000323416810924030000000000000a240500fce0182c143b09040100000102000009040101010102000007240109030100082402010004a158090501090004013f0007250102ff3f00090402e7ca6510500f3d0101020000"], &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x81, 0x40, 0x4, 0x20, 0x81}, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="050f15000110100a061bd890ad3a6ba8de1c81010000000f2182c2f9f7af43320100000000"], 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x415}}, {0x9d, &(0x7f0000000300)=ANY=[@ANYBLOB="9d0379594b8573ba1de807f914061bb486a9eeb5549fd83515f82e0ca4117d5ecd579cf2a3eafef7377079eb0ecbf1b89b7a7dd3f19e9d890fe3648f133d8272af8bcd0802d8594252b1872d5a6286907b9542e69738c76ff4da43850d9423d6322609bc995eb8b7b088fd0910d90259ac61a382107a555f6cbedf657fae87a95e5a3336f40b91e28bfeca08fe7e43e2139e2a1b34eefdf6f454730039"]}, {0x3d, &(0x7f0000000680)=@string={0x3d, 0x3, "a162a8057c983cc4c9206ba7e83958361307aac221a037db83269f2d9458f0e1fc84a4f2230f3e9d90a6275173d68b06f6dc97ca15d80e9efad8aa"}}]}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05040500d3fc09000000478803", 0xd, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000700)={@remote, @empty, @val={@val, {0x88ca}}, {@x25={0x805, {0x0, 0x0, 0x0, "a67fb3ede2addfa3f1"}}}}, &(0x7f0000000100)={0x0, 0x0, [0x2b2]}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) 3.582737576s ago: executing program 1 (id=295): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5ef, &(0x7f0000000600)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @any, 0x2}, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000'], 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e0009"], 0x24}}, 0x0) setreuid(0xee01, 0xffffffffffffffff) getresuid(0x0, &(0x7f0000000000), 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f}, &(0x7f00000003c0)) sendfile(r6, r6, &(0x7f0000000080), 0xe0000000) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x9d}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080), 0x10) 2.885676554s ago: executing program 4 (id=297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@private0}, {@in=@multicast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4309(morus640-generic)\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x5, @local, 0x3}, {0xa, 0x4e1d, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0x20, 0x5, 0x0, 0x8, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7, 0x2, 0x1, 0x0, 0x274, 0x3ff}, 0x20) sendto$inet6(r1, &(0x7f0000000500)="7804ca2b7bdef249166a19961bb0c3c49194a0b2ef46c3aeee3d32ae100460cc9b6f692604205b9459b6cdf23b9546369ec3721efc90a891a1a71d4f497bd109a995ff093dc78cd9aae8c2ca0d7f35210d323e95ebf1ab6f5b8697d9d5730bbad7956de87a55326a4b296001c05c23b87d35914fe461b6bf4ff4b5876d6bf0126dacdd510ab0fc023eaa3d2352edf56ded5601b77eaa8b8b9a5a99b03bf36c35b620076f8ff29093e2c34ed3e53f3100db943ba254f1aeb8c107595c2eec7324231248", 0xc3, 0xa0f15a6d21a68a81, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @local, 0x7f}, 0x1c) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x75, 0x9, 0x8, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, 0x10, 0x700, 0x0, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001800128008000100736974000c0002800800010036573c2b0d08a576682069acc16a361900000000000000a092b10be76312021bc16dc44666498f0c9bed44c7da", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001100)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000fc0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640), 0xc, &(0x7f0000000a80)={&(0x7f0000000c40)=@report={0x1c0, 0x20, 0x100, 0x70bd25, 0x25dfdbfe, {0x32, {@in6=@private2, @in6=@mcast1, 0x4e23, 0xfff, 0x4e23, 0x9, 0x2, 0xa0, 0xf3a65d63b62acefc, 0x6, r6, r7}}, [@tfcpad={0x8, 0x16, 0x1}, @encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e22, @in=@remote}}, @migrate={0x134, 0x11, [{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in=@remote, 0xff, 0x4, 0x0, 0x2, 0xa, 0xa}, {@in=@remote, @in=@multicast2, @in=@multicast2, @in6=@loopback, 0x3c, 0x0, 0x0, 0x34fc, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x2b, 0x0, 0x0, 0x3500, 0x2, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x3506, 0x1e, 0xa}]}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @local}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8091}, 0x20) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@rand_addr=0x64010102, 0x4e23, 0x4, 0x4e23, 0x5, 0xa, 0x80, 0x0, 0x89, r2, r7}, {0x100000000, 0x2, 0x2, 0x4fe96750, 0x0, 0x3, 0x4}, {0x80000000, 0xfff, 0x7, 0x1000}, 0x9, 0x6e6bb1, 0x2, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d3}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x8, 0x9, 0x4bc, 0x800}}, 0xe8) gettid() syz_emit_ethernet(0x256, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x220, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000fc0000001995319c00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) 2.660071699s ago: executing program 4 (id=298): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='dvmrp0\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000380)=ANY=[@ANYBLOB='-0'], 0x9) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, 0x4f}) dup(r0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1.419923904s ago: executing program 4 (id=299): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff060108ac"], 0x5) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x6, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_emit_ethernet(0x1d6, &(0x7f0000000900)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c5819c", 0x1a0, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5ad10a", 0x0, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private2, @mcast1]}], "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"/328}}}}}}}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000300)={&(0x7f0000000040), 0x14, &(0x7f0000000180)={&(0x7f00000003c0)="6489e9fadfee9af8b278c7200f868a140db5b79bfd3a1dbb6d1f29527f6f239cdac080120dea277664185abade97a91d2b42e2187b3962efc84160ce682343d9f0fb891734eeae37ed71c3939a311ec2337b87", 0x53}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64], 0xfe, 0x4c9, &(0x7f0000001b80)="$eJzs20tsVOUbx/HfM2c6TIf+/5aLBQyBGo1WEOgFC6QmhouNJly0UI3ESyqdYqUX0ilKCUjdqTsXLF26deHKuDUkLo0LgzEsTJCNm9ko7jDvmXOboZcZ285Q+v0QOJd5zvC+7zNn3uedzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhHXj7c2WWNbgUAAKink6cHOnuY/wEAWFPOsP4HAABYS0yefpNpz4WinfCPS7LHRycuXR481j/3Zc0mU0qeH+/+Zru6e/a/0HvgYLhd+Prltk2nTp853H50cvziVL5QyA+3D06Mnpsczlf9DEu9vtIufwDaxy9cGh4ZKbR37+0pe/hy691169ta+3rfOZoJYweP9fefTsSkm/7z//6A+Sr8jDw9J9OH331jJyWltPSxWOS1s9Ka/U7s8jsxeKzf78jY6NDEtHvQUkFUqnxMMuEY1SEXS5KSXLssszxrtiZ5+l6mI/uKdkqSF47Dbv+D4ara0whpt3SV1KFVkLOH2Dp5ek+mm/ta9Vowrn7+M9LVRjcOKy4d3P+TVrTX/fcDdz+5t83jb7S/OjEymYi1VHBHrfb5oZ4e8vemrDyd8u/4og1oZ6ObgzprlqdxmTJffuTXFfLr0sf6DuzYeShZYWxZ5Hlc7F5Jf1U5JzcFpYOl3J/l7xeqkzVPf8h079esf9wRzgHS7P2FLvy9Ls3DSjNPYzL9c61oVrEu9RLr+8hqn/tXtv3N2aOTF2emRs9/MD3n47ns4fcL01ND5+Z+uLR29ZJnFlvHVkrVtiTLWWnF99nHxei6YA3wv9JR3Jqvr8avhY6KbSj5+qlmv+pVbA11lGuTmac7Mo28u7U0zyhX89isBS7//TIVij9ZmOkg/+nSUSL/L8bjl7XybcTP7f9Ln2uFtcS2s5vnO19++ZPz1+Y15N+1yeX/LZmO/L01+EyjlH9Pz7QkY11cm0xv39gexKUyLi4ddqf0jCOjY/lOF3tfpo0/hrHyY3NB7KY4tsvFFmT6/GZ57PogdnMc2+1ib8l0+5e5Yx+PY3tc7IzL1+32MDbnYncEsW1x7N5zk2PD845nwOW/W6Y3r79iYZ/nzX/i/p+t2EYeyPnC+8t1/7cmzs0GeT0b5D9dlv9yLu4LmWb+3B722x/78GW1wf83zr+rlb+9UR4bvmg3xrFd1Xar0Vz+N8h096VbUZ+DvgWHcYaS+X8iXb6NxrVB+d+QONcatCtT41isRYWZKxeGxsbyU+ywww470U6j35lQD27+H3Czeq9nYR0TzP9BnRxXTPc+ief/voptJJrbXSFWv/l/Y+JcX1C1NKWl7PT4xaYtUrYwc2XP6PjQ+fz5/ETP/t7O7kP7O3sONmXC4i7eq3rsHgUu/7tluvbDz9E6prz+m7v+z1VsIytX/32qBfK/Kdmnsrqm6qFYk1z+W2TqvXMrWm8uVP+H6/+Op2aDbek4uv8aVP9vTpxrDdrVUutgAAAAAAAAAAAAAAAAAMAqkjNPT8t0eeB5C39DVM33/4YrtpHl//5X6YfJi3z/qy1xbrhOv2uoaaABAAAAAAAAAADqJCVPX8n0rIp23Z1okU4kt3ik/RsAAP//0V1JdA==") 377.075135ms ago: executing program 3 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x67, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}, 0x0, 0x0, 0x10, 0x0, "14287372edf9871223e920885212e1bdeb7e35e62ce6dba165155a7497871559e5387da52b0d43ef246033187312400834d18e1d66403ee7af8903caf03a8638bd8e6c8151dbbd6379ff37babe20e694"}, 0xd8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [{}], 0xa, "2ddf4cadd96be505574cfa86e5ebb9cebf7781aff3684eb378cc285623d70f6cb3195fd66a4feeb3cded023dadf36137089d4eaa55ab4ed5bb4b88c8cc09a4e5b6"}, 0x4d) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/12, 0xc) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}) sendmmsg(r7, &(0x7f000000ef40)=[{{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000004440)="e5", 0x1}, {&(0x7f0000004540)="abed623aff4cdc84b825ef6c1e545f8ba69f060b03425563b3377e51efa5651b3bc63deeaf5fbf5a7946e17c95bedf7a33c346497bce58724c3a5693195d48ca60545700a99c849b5092c61f58705bdc9f7852947d0caf74dbd8eda77fc2e53c4ebc37d70d65a39e4c7409a260b31c97d5537fd52bfe02d0b9d568285ad457bcea126359f911d210f337bb167774a7ac9686342f3e28c4eedb767465d54ff39b4cd8110843eff7de8a741a04fd67e38f2c608420a140c25628651c00a8af8931543a93", 0xc3}], 0x2}}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004f00)}, {&(0x7f0000004e40)="2424dcb9613574348e07bd", 0xb}, {&(0x7f0000004f40)="8d1089073ce327f1168bc00a9bdefefc6567e4252707605351973eecb3508fb6bf586876f34bf37563180e8221e0885fc9285d6df18513e8cf925b760e795d3b062f87e157", 0x45}], 0x3}}, {{0x0, 0x0, &(0x7f0000007680)=[{&(0x7f00000063c0)="0a1fcb5ce35492f5f805e1bd266101ca08bc61249c4599f88f0d51e74fdf9ab2a1b389bfbfa418", 0x27}, {&(0x7f0000006400)="b9055c0ba3a8d83168403aff16df1928802105e20c598a8fc72347350d79d626e9b6df2443813a4024c9bc4d14fa730aa35b7615f630665b9773e166fe9a09e0a35063fa75b984bb6e9eb8852ecf56186a64295e710b745f58623e2d4f2cd2da3bd98ecc844a3baaf22db74e33afe8e1d2d5042e3863ed322f5a5f692f5777872051708e84659eec687773e00d1768a6ab3b1258415bd0bc4f0f41d57b5d84f032ade4ca824536a9ff23d13cdc9118e95c3fdf2e956e41c0373744c0d0a8dbb76f9dbfe8dc6dc2106d097eeee0447c390bd0bc083a1c3f585b", 0xd9}, {&(0x7f0000007500)=',', 0x1}, {&(0x7f00000075c0)="8c038a", 0x3}], 0x4}}, {{0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f00000077c0)="92ba", 0x2}, {&(0x7f0000007900)="a415203b646a4ee922035672674a6af09e3c3aa4ccda78ec850f465203ce98b2bbda65f7b6931010e59cd690dcfd1763b290cd7c00cefcd65738ccea80719320b8aada09f1f95f00085a13752df01cec9d8132fd67c6fda11c9e7cb83f7595f530d05a5a79abac7d10498e3d845449ffda624eb4a8fae1abc145fba825c99f7e9cf464c01a12d223d20dc17b6a5cc7df6c28791a63fc745a8e2eb9608f02a1", 0x9f}, {&(0x7f00000079c0)="5566ae2060d557fbd918b4ecbadd1960fa7e5813a8b42a76e02b357f1828e79e223f61979cc555521c2267f355d95f55094877efb33c", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000009440)=[{&(0x7f0000008e80)="09747ea911fa0951db694808328d193354419e45c2b37637833f2b921e7dc4b75c14d27bbe1b04c5b82c463724214dfaa9194e7efc2c1427c1279d01a1bebf01511b2099d1afabcf3c255c7d6958e7e7ac87bb3172dfedd1675569107eee274000fc12b570e1756d1ea6f5c9f27fc3aa628530c32c12b1f3760cd712", 0x7c}, {&(0x7f0000008f80)="b011ed362ae4747498109037454e6930f19d1f6263237aa687173371a40d083b11fa", 0x22}, {&(0x7f0000008fc0)="075d9b4a4c28", 0x6}, {&(0x7f0000009180)="835d178facdce6acac59eef8a98a3d2ed245912b25a3560a9b31f1ae77b7decc08641bde17699a10a3b665a0dc4bf3a21f91066ae2718e4000042acb6af3e520091bfb06f01342", 0x47}], 0x4}}], 0x5, 0x8800) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000080)=0x8000000000000001, 0x12) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 0s ago: executing program 3 (id=301): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r4, &(0x7f0000001440)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0053a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961250c00241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6c461e192c0a86310885aba7445c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612b7b4a272d1820bcd04bdb63b1e50921d38201005d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b879cec6ecda7f6dbc029abc77402350a6fdcb3ed66b34e218ab8c1b765c9a343933b0f944b7d9b2bde8583721cbe16c7da6f9e4824dfb95f3640839061406140cce0fdecdf4c9d168868cfb834a1ee328db036761d49529fc44af51ed9d301a26b01ddcbd1e06cc647affba57b85198b663054d60f49f4d9a13e85642255b3a445303fa339f728f07c8a6a7ff8d9412988b0407bdcc7fdb422b29e8a3909605d200702bebb0f0dc2bf6fdd8a400436dcdc0fcbb1bae069778675586b60a3a6216ca2d11154a853151a816239d0a492b1fafbb90fbdaa947325fab3b093a55f6cf820bd71e82ac721774fab8bf0b70aacf2c0af39ec446d37d474746f1b6091bcb5dd329236405c268626c52dd7ab93b16f39b7ce7217b12edf3479d34270699aa9dee038830657e4bbc9a9e6df0eda172c1b9c0553c715c588c52931f99bfc94cf18bf3274af340bfdbb480092b2a4779bb48b9bbfeee9214ca3d2bf9c8126643b3854827d39b8dafd707b18c1fad86f49c62bb920f6c13d3c51c2dae4996746e0ef7baba0fef836a359f29a9b4ef3db9607f66cda2c5c94988c8c787dec6b4b1b4b097c79630a430f6c9357c80ee5d874ece2775a7aac08c2247ab0b7478cfe323391c5cad8e046da7e2721ddc7620b0d85338ed98f7585c4393ff488369f08f0fba12cb0a4c0c7abb6c03cfdf6428a164540e65af30a1372600d15f45ce50adc0bb18c524ed4ef199875c364f999b7ea081c41e6404ac42d74fd4da5edd8a162104576248444a9520a693e6e56cabbab21a31c86c49919e278333019851ebc651238989baae628ac88d513178c6bf52df02ca60fdc17671f8494e7bed778687902732d0abc05658a1566246", 0x782, 0x2004c890, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): [ 142.310753][ T4198] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 142.339380][ T4198] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 142.385093][ T4198] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.91: Failed to acquire dquot type 0 [ 142.452544][ T4198] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 142.468357][ T4198] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 142.501395][ T4198] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.91: Failed to acquire dquot type 0 [ 142.528985][ T4208] loop3: detected capacity change from 0 to 512 [ 142.548596][ T4208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.598603][ T4208] EXT4-fs (loop3): 1 truncate cleaned up [ 142.604330][ T4208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 142.874618][ T3689] tipc: Node number set to 4272742777 [ 143.901729][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 144.013716][ T3649] EXT4-fs (loop4): unmounting filesystem. [ 144.820157][ T4229] random: crng reseeded on system resumption [ 145.497894][ T4234] loop3: detected capacity change from 0 to 4096 [ 145.580152][ T4234] NILFS (loop3): invalid segment: Checksum error in segment payload [ 145.596001][ T4234] NILFS (loop3): trying rollback from an earlier position [ 145.705022][ T4234] NILFS (loop3): recovery complete [ 145.750705][ T4240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.841254][ T4239] loop0: detected capacity change from 0 to 4096 [ 145.938789][ T4239] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.024182][ T56] device hsr_slave_0 left promiscuous mode [ 146.067625][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 146.108909][ T56] device hsr_slave_1 left promiscuous mode [ 146.118038][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.158032][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.253970][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.306514][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.357488][ T56] device bridge_slave_1 left promiscuous mode [ 146.399942][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.445213][ T56] device bridge_slave_0 left promiscuous mode [ 146.478556][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.668748][ T56] device veth1_macvtap left promiscuous mode [ 146.675154][ T56] device veth0_macvtap left promiscuous mode [ 146.718387][ T56] device veth1_vlan left promiscuous mode [ 146.758781][ T56] device veth0_vlan left promiscuous mode [ 146.799286][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 147.601601][ T3652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.631217][ T3652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.641240][ T3652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.650519][ T3653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.659932][ T3653] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.670190][ T3652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.045345][ T3642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.102046][ T3642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.125760][ T3642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.161634][ T3642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.177681][ T3642] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.195096][ T3642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.311044][ T56] team0 (unregistering): Port device team_slave_1 removed [ 149.464152][ T56] team0 (unregistering): Port device team_slave_0 removed [ 149.553474][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.626007][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.064745][ T56] bond0 (unregistering): Released all slaves [ 150.780316][ T4296] syz.4.108 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 151.661290][ T4015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.679710][ T4015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.544343][ T4015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.577838][ T4015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.646214][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 153.093918][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.195647][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.218558][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.239243][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.247352][ T4271] device bridge_slave_0 entered promiscuous mode [ 153.284968][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.319570][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.326737][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.337237][ T4271] device bridge_slave_1 entered promiscuous mode [ 153.358580][ T4015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.390617][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.432425][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.447690][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.517274][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.530013][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.548117][ T4015] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.616743][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.626735][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.636786][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.644007][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.656266][ T4271] team0: Port device team_slave_0 added [ 153.721070][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.733553][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.785977][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.817769][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.826085][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.959559][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.001628][ T4271] team0: Port device team_slave_1 added [ 154.172147][ T4343] capability: warning: `syz.3.113' uses deprecated v2 capabilities in a way that may be insecure [ 154.273436][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.309748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.327900][ T4344] loop4: detected capacity change from 0 to 2048 [ 154.557520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.630001][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.693174][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.752736][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.772795][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.964063][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.987586][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.014614][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.068696][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.112405][ T4015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.140670][ T4015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.184337][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.191690][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.203266][ T4356] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 155.225175][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.247307][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.255837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.274308][ T4355] netlink: 116 bytes leftover after parsing attributes in process `syz.0.117'. [ 155.288421][ T4355] device bridge_slave_1 left promiscuous mode [ 155.301948][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.336839][ T4355] device bridge_slave_0 left promiscuous mode [ 155.343612][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.529346][ T4271] device hsr_slave_0 entered promiscuous mode [ 155.551782][ T4271] device hsr_slave_1 entered promiscuous mode [ 155.570619][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.588587][ T4271] Cannot create hsr debugfs directory [ 155.826670][ T4015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.849441][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.856950][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.960051][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.975387][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.012042][ T4015] device veth0_vlan entered promiscuous mode [ 156.024457][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.034439][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.043436][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.058837][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.092712][ T4015] device veth1_vlan entered promiscuous mode [ 156.208639][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.216987][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.233577][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.245555][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.263536][ T4015] device veth0_macvtap entered promiscuous mode [ 156.307537][ T4015] device veth1_macvtap entered promiscuous mode [ 156.353115][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.364833][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.380278][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.393223][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.406790][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.421368][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.435144][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.452855][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.466935][ T4015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.487818][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.496514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.510797][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.525042][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.617118][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.635421][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.646499][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.664204][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.674554][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.692706][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.707098][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.720064][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.732603][ T4015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.746393][ T4015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.756111][ T4015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.774895][ T4015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.798251][ T4015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.818806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.835358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.031882][ T11] device hsr_slave_0 left promiscuous mode [ 157.065999][ T11] device hsr_slave_1 left promiscuous mode [ 157.085501][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.094029][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.110257][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.117829][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.133482][ T11] device bridge_slave_1 left promiscuous mode [ 157.142816][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.157287][ T11] device bridge_slave_0 left promiscuous mode [ 157.167419][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.215845][ T11] device veth1_macvtap left promiscuous mode [ 157.226599][ T11] device veth0_macvtap left promiscuous mode [ 157.235731][ T11] device veth1_vlan left promiscuous mode [ 157.247552][ T11] device veth0_vlan left promiscuous mode [ 157.814754][ T11] team0 (unregistering): Port device team_slave_1 removed [ 157.861828][ T11] team0 (unregistering): Port device team_slave_0 removed [ 157.900954][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.942465][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.370750][ T11] bond0 (unregistering): Released all slaves [ 158.507105][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.517689][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.529267][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.544647][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.580121][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.607231][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.624862][ T3736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.628029][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.642079][ T3736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.681207][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.063530][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.080291][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.096874][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.852020][ T4419] loop1: detected capacity change from 0 to 1024 [ 161.041611][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 161.041631][ T26] audit: type=1804 audit(1726370892.617:70): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.53" name="/newroot/0/file0/bus" dev="loop1" ino=26 res=1 errno=0 [ 161.075740][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.267331][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.280130][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.289440][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.296578][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.305230][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.314882][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.369022][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.376265][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.412516][ T4426] loop0: detected capacity change from 0 to 256 [ 161.420927][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.433137][ T4426] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.485117][ T4422] loop3: detected capacity change from 0 to 1024 [ 161.505167][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.522062][ T4426] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 161.533719][ T4422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.575708][ T4426] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.580074][ T4422] EXT4-fs: quotafile must be on filesystem root [ 161.598390][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.621918][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.633344][ T4429] loop1: detected capacity change from 0 to 512 [ 161.646421][ T4429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.670731][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.684392][ T4429] EXT4-fs (loop1): 1 truncate cleaned up [ 161.698530][ T4429] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 161.861172][ T26] audit: type=1800 audit(1726370893.457:71): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.121" name="bus" dev="loop0" ino=1048615 res=0 errno=0 [ 162.404619][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.438690][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.494103][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.570394][ T4015] EXT4-fs (loop1): unmounting filesystem. [ 163.622431][ T4441] loop3: detected capacity change from 0 to 4096 [ 163.683023][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.701166][ T4441] NILFS (loop3): invalid segment: Checksum error in segment payload [ 163.710812][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.730651][ T4441] NILFS (loop3): trying rollback from an earlier position [ 163.906136][ T4441] NILFS (loop3): recovery complete [ 164.927557][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.947743][ T4444] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.056736][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.079802][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.104700][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.198758][ T4451] loop0: detected capacity change from 0 to 256 [ 165.390812][ T4449] loop1: detected capacity change from 0 to 2048 [ 168.918739][ T4459] ptrace attach of "./syz-executor exec"[3649] was attempted by "./syz-executor exec"[4459] [ 169.021915][ T4449] loop1: p1 < > p4 [ 169.119466][ T4449] loop1: p4 size 8388608 extends beyond EOD, truncated [ 169.286882][ T4465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 169.345398][ T4015] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 169.348603][ T4467] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.437836][ T4467] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.438089][ T4467] Buffer I/O error on dev loop1p4, logical block 1, async page read [ 169.619701][ T4462] udevd[4462]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 169.632630][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 169.710934][ T4478] loop3: detected capacity change from 0 to 512 [ 169.754607][ T4471] loop1: detected capacity change from 0 to 4096 [ 169.868648][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.868850][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.871676][ T4471] NILFS (loop1): invalid segment: Checksum error in segment payload [ 169.871735][ T4471] NILFS (loop1): trying rollback from an earlier position [ 171.268069][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.279938][ T4471] NILFS (loop1): recovery complete [ 171.297373][ T4485] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.348526][ T4475] udevd[4475]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 171.391487][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 171.408314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.409051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.471444][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.472253][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.473143][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.473729][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.491749][ T4271] device veth0_vlan entered promiscuous mode [ 171.517667][ T4271] device veth1_vlan entered promiscuous mode [ 171.575402][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.576156][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.576809][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.577488][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.605086][ T4271] device veth0_macvtap entered promiscuous mode [ 171.612375][ T4271] device veth1_macvtap entered promiscuous mode [ 171.644904][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.644929][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.644942][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.644958][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.644970][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.644985][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.644999][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.645014][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.646558][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.646686][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.647418][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.648066][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.650334][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.778777][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.778805][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.778817][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.778833][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.778845][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.778859][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.778873][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.778888][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.780313][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.801847][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.802675][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.819937][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.162480][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.171985][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.182290][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.297103][ T4495] loop0: detected capacity change from 0 to 128 [ 172.309272][ T4495] EXT4-fs: Ignoring removed orlov option [ 172.381294][ T4497] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 172.400008][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 172.500289][ T4495] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 175.951658][ T4516] loop0: detected capacity change from 0 to 256 [ 176.106012][ T4516] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.518761][ T4516] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 177.074738][ T4516] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 177.110847][ T3965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.140771][ T3965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.150343][ T26] audit: type=1800 audit(1726370908.747:72): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.137" name="bus" dev="loop0" ino=1048618 res=0 errno=0 [ 177.249144][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.261500][ T3868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.335520][ T3868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.378434][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.055598][ T4531] loop4: detected capacity change from 0 to 256 [ 178.085110][ T4531] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.086691][ T4530] loop2: detected capacity change from 0 to 512 [ 178.138793][ T4531] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 178.346366][ T4531] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 178.405196][ T4530] EXT4-fs error (device loop2): __ext4_iget:5055: inode #14: block 1886221359: comm syz.2.102: invalid block [ 178.468570][ T4530] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.102: couldn't read orphan inode 14 (err -117) [ 178.512034][ T26] audit: type=1800 audit(1726370910.107:73): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.152" name="bus" dev="loop4" ino=1048622 res=0 errno=0 [ 178.544568][ T4530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.565122][ T4530] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 178.712330][ T3689] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 179.323639][ T4539] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 179.388643][ T4539] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 179.434751][ T3689] usb 1-1: Using ep0 maxpacket: 16 [ 179.457676][ T4539] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.102: Failed to acquire dquot type 0 [ 179.466999][ T4540] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 179.523992][ T4540] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 179.563752][ T4540] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.102: Failed to acquire dquot type 0 [ 179.580994][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.599205][ T3689] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.638331][ T3689] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.647454][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.695663][ T3689] usb 1-1: config 0 descriptor?? [ 180.207935][ T3689] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 180.239035][ T3642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.249019][ T3642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.257723][ T3642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.288645][ T3642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.299646][ T3642] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 180.307216][ T3642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.370471][ T3689] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 180.386304][ T3689] microsoft 0003:045E:07DA.0001: no inputs found [ 180.409125][ T3689] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 180.454371][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.464914][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.502845][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 180.823528][ T4554] loop3: detected capacity change from 0 to 512 [ 180.831968][ T4554] EXT4-fs (loop3): unable to read superblock [ 180.869213][ T4552] loop2: detected capacity change from 0 to 512 [ 180.882939][ T3689] usb 1-1: USB disconnect, device number 2 [ 180.905887][ T4552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.948858][ T4555] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 181.030122][ T4552] EXT4-fs (loop2): 1 truncate cleaned up [ 181.049267][ T4552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 181.134054][ T4555] loop3: detected capacity change from 0 to 512 [ 181.147680][ T4555] EXT4-fs: Ignoring removed bh option [ 181.154603][ T4555] ext4: Unknown parameter 'fowner<00000000000000000000' [ 181.202569][ T4462] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.286350][ T4558] loop4: detected capacity change from 0 to 736 [ 182.319046][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 182.502492][ T4563] process 'syz.0.148' launched './file0' with NULL argv: empty string added [ 182.531055][ T3735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.837915][ T3735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.889906][ T26] audit: type=1326 audit(1726370914.489:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb577def9 code=0x0 [ 183.085988][ T3735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.178098][ T4579] loop0: detected capacity change from 0 to 512 [ 183.189791][ T4579] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.197972][ T3735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.199578][ T4579] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 183.220125][ T4579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 183.228571][ T4579] System zones: 0-2, 18-18, 34-34 [ 183.239521][ T4579] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 183.270965][ T4546] chnl_net:caif_netlink_parms(): no params data found [ 183.289935][ T4579] EXT4-fs (loop0): 1 truncate cleaned up [ 183.298500][ T4579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.451907][ T4572] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #12: block 13: comm syz.0.153: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 183.514774][ T4583] loop4: detected capacity change from 0 to 4096 [ 183.537122][ T4583] NILFS (loop4): invalid segment: Checksum error in segment payload [ 183.573890][ T4583] NILFS (loop4): trying rollback from an earlier position [ 183.651515][ T4583] NILFS (loop4): recovery complete [ 183.825157][ T4590] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.002772][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.017238][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.049049][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 184.124412][ T4546] device bridge_slave_0 entered promiscuous mode [ 184.256228][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.323329][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.332358][ T4546] device bridge_slave_1 entered promiscuous mode [ 184.582348][ T4546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.726096][ T4604] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 185.615839][ T4546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.643873][ T4618] netlink: 384 bytes leftover after parsing attributes in process `syz.2.160'. [ 186.702524][ T4618] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 186.924480][ T4546] team0: Port device team_slave_0 added [ 187.662476][ T4624] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 187.726079][ T4625] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 187.726272][ T4624] syz.0.161 (4624) used greatest stack depth: 18232 bytes left [ 187.873501][ T4546] team0: Port device team_slave_1 added [ 188.007944][ T4632] loop0: detected capacity change from 0 to 128 [ 188.328248][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.348109][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.443490][ T4546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.591609][ T3643] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 188.616078][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.623233][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.623256][ T3643] FAT-fs (loop0): Filesystem has been set read-only [ 188.623301][ T4546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.749722][ T3643] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 189.043350][ T4546] device hsr_slave_0 entered promiscuous mode [ 189.070240][ T4546] device hsr_slave_1 entered promiscuous mode [ 189.098366][ T4546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.106817][ T4546] Cannot create hsr debugfs directory [ 190.080642][ T3735] device hsr_slave_0 left promiscuous mode [ 190.110609][ T3735] device hsr_slave_1 left promiscuous mode [ 190.147923][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.199583][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.474997][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.535272][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.714818][ T3735] device bridge_slave_1 left promiscuous mode [ 190.843454][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.012045][ T3735] device bridge_slave_0 left promiscuous mode [ 191.018404][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.133199][ T3735] device veth1_macvtap left promiscuous mode [ 191.280374][ T3735] device veth0_macvtap left promiscuous mode [ 191.299600][ T3735] device veth1_vlan left promiscuous mode [ 191.300159][ T3642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.307311][ T3735] device veth0_vlan left promiscuous mode [ 191.321818][ T3642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.333341][ T3642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.346614][ T3642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.357021][ T3642] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.364775][ T3642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.398772][ T3652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.407272][ T3652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.415509][ T3652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.424833][ T3652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.433388][ T3652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.441074][ T3652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.045540][ T3735] team0 (unregistering): Port device team_slave_1 removed [ 192.159179][ T3735] team0 (unregistering): Port device team_slave_0 removed [ 192.249271][ T3735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.332700][ T3735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.509816][ T3652] Bluetooth: hci2: command tx timeout [ 193.838641][ T3735] bond0 (unregistering): Released all slaves [ 194.303246][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.309708][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.330337][ T4681] loop3: detected capacity change from 0 to 256 [ 196.444584][ T3652] Bluetooth: hci2: command tx timeout [ 196.906580][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 197.453110][ T4664] chnl_net:caif_netlink_parms(): no params data found [ 197.712912][ T33] Bluetooth: hci5: Frame reassembly failed (-84) [ 197.750049][ T4706] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.759800][ T4706] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.461268][ T3642] Bluetooth: hci2: command tx timeout [ 199.141274][ T4664] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.165047][ T4664] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.181792][ T4664] device bridge_slave_0 entered promiscuous mode [ 199.244989][ T4724] Bluetooth: MGMT ver 1.22 [ 199.310251][ T3735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.395049][ T4664] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.416478][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.497813][ T4664] device bridge_slave_1 entered promiscuous mode [ 199.544392][ T4546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.624181][ T4546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.662900][ T3652] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.662993][ T4546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.820384][ T3735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.887589][ T4731] hugetlbfs: syz.4.178 (4731): Using mlock ulimits for SHM_HUGETLB is obsolete [ 199.937903][ T4664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.078608][ T4546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.158708][ T3735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.518658][ T4664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.550671][ T3652] Bluetooth: hci2: command tx timeout [ 200.614584][ T3735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.879515][ T4746] loop2: detected capacity change from 0 to 256 [ 200.891832][ T4746] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.910962][ T4746] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 200.916507][ T4664] team0: Port device team_slave_0 added [ 200.934904][ T4746] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 200.991918][ T4664] team0: Port device team_slave_1 added [ 201.016707][ T26] audit: type=1800 audit(1726370932.607:75): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="bus" dev="loop2" ino=1048630 res=0 errno=0 [ 201.160368][ T4752] loop3: detected capacity change from 0 to 512 [ 201.291477][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.324269][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.453216][ T4748] loop3: detected capacity change from 0 to 512 [ 201.614145][ T4748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.806836][ T4664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.818776][ T4748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 201.861492][ T4748] System zones: 1-12 [ 201.960186][ T4748] EXT4-fs (loop3): 1 orphan inode deleted [ 201.979233][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.016693][ T4748] EXT4-fs (loop3): 1 truncate cleaned up [ 202.023941][ T4748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.040264][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.079458][ T4748] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 202.140288][ T4664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.165691][ T4748] EXT4-fs (loop3): Remounting filesystem read-only [ 202.376079][ T4766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.184'. [ 202.491708][ T4546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.504112][ T4664] device hsr_slave_0 entered promiscuous mode [ 202.517090][ T4664] device hsr_slave_1 entered promiscuous mode [ 202.525551][ T4664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.533658][ T4664] Cannot create hsr debugfs directory [ 202.539642][ T3640] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 524051: comm syz-executor: invalid block [ 202.583112][ T3640] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 524051: comm syz-executor: invalid block [ 202.799958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.824124][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.694397][ T4546] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.775154][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 203.929839][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.951596][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.009313][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.016515][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.082924][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.252636][ T4788] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 204.903954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.993908][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.001232][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.043197][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.074132][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.263000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.375182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.431979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.468152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.640506][ T4546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.692786][ T4546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.741020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.750469][ T4802] loop2: detected capacity change from 0 to 256 [ 205.778339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.819308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.846995][ T4802] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.861329][ T4802] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 205.865887][ T3736] Bluetooth: hci1: Frame reassembly failed (-84) [ 205.903391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.919009][ T4802] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 205.962484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.011876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.028400][ T26] audit: type=1800 audit(1726370937.616:76): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.192" name="bus" dev="loop2" ino=1048631 res=0 errno=0 [ 206.160487][ T3653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.178279][ T3653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.186997][ T3653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.196716][ T3653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.204657][ T3653] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.212241][ T3653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.259840][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.284168][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.436542][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.459325][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.474327][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.484460][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.027807][ T4813] loop2: detected capacity change from 0 to 2048 [ 207.114337][ T4798] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 207.115085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.133399][ T4798] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 207.911825][ T3642] Bluetooth: hci1: command 0x1003 tx timeout [ 207.912468][ T3652] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 208.428563][ T4828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'. [ 208.542002][ T3652] Bluetooth: hci5: command tx timeout [ 208.647313][ T3735] device hsr_slave_0 left promiscuous mode [ 208.795101][ T3735] device hsr_slave_1 left promiscuous mode [ 208.803806][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.812633][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.820700][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.828556][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.877775][ T3735] device veth1_macvtap left promiscuous mode [ 208.885852][ T3735] device veth0_macvtap left promiscuous mode [ 208.892602][ T3735] device veth1_vlan left promiscuous mode [ 208.898694][ T3735] device veth0_vlan left promiscuous mode [ 209.735937][ T3735] team0 (unregistering): Port device team_slave_1 removed [ 209.791536][ T3735] team0 (unregistering): Port device team_slave_0 removed [ 209.844955][ T3735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.892808][ T3735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.366876][ T3735] bond0 (unregistering): Released all slaves [ 210.478505][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.506766][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.540290][ T4546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.604844][ T4857] loop4: detected capacity change from 0 to 2048 [ 210.609829][ T4664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.641503][ T4664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.844882][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.863529][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.876339][ T4807] chnl_net:caif_netlink_parms(): no params data found [ 210.888908][ T4664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.862991][ T4664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.892113][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.908294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.918124][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.933828][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.949292][ T4546] device veth0_vlan entered promiscuous mode [ 212.069749][ T4546] device veth1_vlan entered promiscuous mode [ 212.245489][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.252799][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.261138][ T4807] device bridge_slave_0 entered promiscuous mode [ 212.283097][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.291105][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.299913][ T4807] device bridge_slave_1 entered promiscuous mode [ 212.337810][ T26] audit: type=1326 audit(1726370943.915:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.2.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb744d7def9 code=0x0 [ 212.410727][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.421043][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.450707][ T4664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.466232][ T4807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.481238][ T4546] device veth0_macvtap entered promiscuous mode [ 212.499385][ T4807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.521085][ T4546] device veth1_macvtap entered promiscuous mode [ 212.600101][ T3735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.623028][ T4881] input: syz0 as /devices/virtual/input/input6 [ 212.726007][ T3735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.745303][ T4807] team0: Port device team_slave_0 added [ 212.755437][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.767985][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.779850][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.790157][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.805914][ T4807] team0: Port device team_slave_1 added [ 212.890248][ T3735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.919258][ T4664] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.931908][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.959921][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.050020][ T4807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.096076][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.124446][ T4886] loop4: detected capacity change from 0 to 512 [ 213.128319][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.154837][ T4884] loop2: detected capacity change from 0 to 4096 [ 213.166314][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.178551][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.198567][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.200738][ T4884] NILFS (loop2): invalid segment: Checksum error in segment payload [ 213.209379][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.230776][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.238953][ T4884] NILFS (loop2): trying rollback from an earlier position [ 213.240907][ T4886] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 213.258662][ T4886] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 213.270797][ T4886] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.203: Failed to acquire dquot type 0 [ 213.288515][ T3735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.290163][ T4886] EXT4-fs (loop4): Remounting filesystem read-only [ 213.306420][ T4886] EXT4-fs (loop4): 1 orphan inode deleted [ 213.313395][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.314487][ T4886] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.320353][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.320383][ T4807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.331999][ T4884] NILFS (loop2): recovery complete [ 213.358084][ T4886] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff) [ 213.376245][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.426156][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.441194][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.448407][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.463712][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.477758][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.489539][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.503713][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.521829][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.529144][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.544796][ T4890] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.588373][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.608144][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.619927][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.630936][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.640889][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.651551][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.665503][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.900955][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.921586][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.267567][ T4892] vivid-008: kernel_thread() failed [ 214.584323][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.593162][ T3649] EXT4-fs (loop4): unmounting filesystem. [ 214.611785][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.643595][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.669146][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.734454][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.791523][ T4901] loop2: detected capacity change from 0 to 1024 [ 214.801856][ T4807] device hsr_slave_0 entered promiscuous mode [ 214.822198][ T4807] device hsr_slave_1 entered promiscuous mode [ 214.832020][ T4807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.840104][ T4807] Cannot create hsr debugfs directory [ 214.849194][ T4546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.877936][ T4546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.890891][ T4546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.915886][ T4546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.940376][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.025593][ T4901] hfsplus: xattr searching failed [ 215.031091][ T26] audit: type=1800 audit(1726370946.615:78): pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.205" name="bus" dev="loop2" ino=4 res=0 errno=0 [ 215.079723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.107870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.122021][ T3736] hfsplus: b-tree write err: -5, ino 3 [ 215.130104][ T4664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.142448][ T4664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.167196][ T4271] hfsplus: node 4:3 still has 2 user(s)! [ 215.218614][ T4905] loop4: detected capacity change from 0 to 2048 [ 215.229562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.263055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.272870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.310383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.324865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.890488][ T3735] tipc: Disabling bearer [ 216.904774][ T3735] tipc: Left network mode [ 216.930113][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.964756][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.012005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.501722][ T4664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.510743][ T3868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.521090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.535456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.540996][ T3868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.555687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.723347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.738684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.850531][ T4664] device veth0_vlan entered promiscuous mode [ 217.892993][ T4664] device veth1_vlan entered promiscuous mode [ 217.953169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.956350][ T3685] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 218.400892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.410323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.434188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.446248][ T4941] ufs: You didn't specify the type of your ufs filesystem [ 218.446248][ T4941] [ 218.446248][ T4941] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 218.446248][ T4941] [ 218.446248][ T4941] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 218.454968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.478492][ T4941] ufs: ufstype=old is supported read-only [ 218.493471][ T4941] ufs: ufs_fill_super(): bad magic number [ 218.548693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.623313][ T3685] usb 5-1: Using ep0 maxpacket: 16 [ 218.643358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.670375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.780986][ T4664] device veth0_macvtap entered promiscuous mode [ 218.782976][ T26] audit: type=1326 audit(1726370950.365:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.1.210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c30b7def9 code=0x0 [ 218.788054][ T3685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.827311][ T3685] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.837530][ T4664] device veth1_macvtap entered promiscuous mode [ 218.862092][ T3685] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.862126][ T3685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.910224][ T3685] usb 5-1: config 0 descriptor?? [ 218.961990][ T4954] loop2: detected capacity change from 0 to 128 [ 219.069297][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.080964][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.091724][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.114934][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.130632][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.149669][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.159836][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.172013][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.193652][ T4664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.209276][ T4954] netlink: 'syz.2.211': attribute type 9 has an invalid length. [ 219.219410][ T4954] netlink: 'syz.2.211': attribute type 6 has an invalid length. [ 219.250028][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.260828][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.318199][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.329778][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.342612][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.355857][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.367045][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.378057][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.386437][ T3685] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 219.388576][ T4664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.406544][ T4664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.418868][ T4664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.426892][ T3685] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 219.439035][ T3685] microsoft 0003:045E:07DA.0002: no inputs found [ 219.450499][ T4664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.466169][ T3685] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 219.468079][ T4664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.519468][ T4664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.534096][ T4664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.570332][ T4958] loop1: detected capacity change from 0 to 1024 [ 219.605290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.623457][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.647883][ T4807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.656295][ T4960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.666864][ T4960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.812239][ T4958] EXT4-fs: test_dummy_encryption requires encrypt feature [ 219.942051][ T3690] usb 5-1: USB disconnect, device number 2 [ 219.942277][ T4807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.013352][ T4807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.233860][ T4976] loop4: detected capacity change from 0 to 512 [ 221.316174][ T4976] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 221.329815][ T4807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.355253][ T4976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 221.362273][ T4976] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.214: Block bitmap for bg 0 marked uninitialized [ 221.395753][ T4976] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 221.425402][ T4976] EXT4-fs (loop4): 1 orphan inode deleted [ 221.425440][ T4976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 221.450806][ T4984] loop1: detected capacity change from 0 to 512 [ 221.478564][ T4984] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.503947][ T3735] device hsr_slave_0 left promiscuous mode [ 221.531005][ T3735] device hsr_slave_1 left promiscuous mode [ 221.613972][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.621985][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.637314][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.699454][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.713949][ T3735] device bridge_slave_1 left promiscuous mode [ 221.913725][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.094789][ T4984] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.216: casefold flag without casefold feature [ 224.095264][ T3735] device bridge_slave_0 left promiscuous mode [ 224.114775][ T4984] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.216: couldn't read orphan inode 15 (err -117) [ 224.127181][ T4984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.150826][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.221929][ T3735] device veth1_macvtap left promiscuous mode [ 224.231628][ T3735] device veth0_macvtap left promiscuous mode [ 224.241832][ T3735] device veth1_vlan left promiscuous mode [ 224.247786][ T3735] device veth0_vlan left promiscuous mode [ 224.542477][ T4996] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.216: Directory hole found for htree leaf block 0 [ 224.768535][ T4998] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.216: Directory hole found for htree leaf block 0 [ 225.493010][ T3735] team0 (unregistering): Port device team_slave_1 removed [ 225.540493][ T3735] team0 (unregistering): Port device team_slave_0 removed [ 225.588931][ T3735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.635824][ T3735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.095420][ T3735] bond0 (unregistering): Released all slaves [ 226.193117][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.209704][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.219989][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.275637][ T4991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.214'. [ 226.419610][ T4996] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 226.480752][ T3868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.505162][ T3868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.543519][ T3649] EXT4-fs (loop4): unmounting filesystem. [ 226.575149][ T4546] EXT4-fs (loop1): unmounting filesystem. [ 226.596535][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.623823][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.661017][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.722368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.850244][ T4807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.924543][ T5008] sctp: [Deprecated]: syz.4.219 (pid 5008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.924543][ T5008] Use struct sctp_sack_info instead [ 226.941645][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.952928][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.969766][ T5006] loop1: detected capacity change from 0 to 512 [ 226.981610][ T5006] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.133078][ T4807] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.202689][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.240696][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.250307][ T5016] loop2: detected capacity change from 0 to 1024 [ 228.260606][ T5006] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #17: comm syz.1.220: iget: bad i_size value: -6917529027641081756 [ 228.282246][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.289483][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.297967][ T5016] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.309165][ T5006] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.220: couldn't read orphan inode 17 (err -117) [ 228.340906][ T5006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.344024][ T5016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.384947][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.398610][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.589581][ T5006] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.220: bg 0: block 65: padding at end of block bitmap is not set [ 228.631738][ T5006] Quota error (device loop1): write_blk: dquota write failed [ 229.476160][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.506212][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.513406][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.542531][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.551996][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.612281][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.612703][ T5028] loop0: detected capacity change from 0 to 256 [ 229.623661][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.636254][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.645982][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.660323][ T5028] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.707063][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.766655][ T5028] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 229.775462][ T5006] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 229.818202][ T5028] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 229.892317][ T5006] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.220: Failed to acquire dquot type 0 [ 229.988423][ T26] audit: type=1800 audit(1726370961.573:80): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.223" name="bus" dev="loop0" ino=1048639 res=0 errno=0 [ 230.161385][ T4807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.182013][ T4807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.736235][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.818376][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.872158][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.872686][ T5032] loop0: detected capacity change from 0 to 512 [ 230.897825][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.909310][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.920368][ T5032] EXT4-fs: Ignoring removed bh option [ 230.941433][ T4546] EXT4-fs (loop1): unmounting filesystem. [ 230.967130][ T5032] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.022070][ T5032] EXT4-fs (loop0): 1 orphan inode deleted [ 231.034338][ T5032] EXT4-fs (loop0): 1 truncate cleaned up [ 231.040029][ T5032] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 232.056959][ T5041] EXT4-fs error (device loop0): ext4_check_all_de:655: inode #12: block 7: comm syz.0.224: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 232.200891][ T5041] EXT4-fs (loop0): Remounting filesystem read-only [ 232.322864][ T4664] EXT4-fs (loop0): unmounting filesystem. [ 232.656743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.730995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.572904][ T4807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.661830][ T5065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.228'. [ 233.754807][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.802549][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.893458][ T5068] loop0: detected capacity change from 0 to 2048 [ 233.912721][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.947143][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.018415][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.141173][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.193267][ T4807] device veth0_vlan entered promiscuous mode [ 234.713271][ T4807] device veth1_vlan entered promiscuous mode [ 235.210814][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.319462][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.346386][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.386248][ T4807] device veth0_macvtap entered promiscuous mode [ 235.426259][ T4807] device veth1_macvtap entered promiscuous mode [ 235.499357][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.518238][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.585071][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.605458][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.616915][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.627962][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.639369][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.650337][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.768223][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 235.787919][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.804521][ T5081] loop4: detected capacity change from 0 to 2048 [ 236.629608][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.679319][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.866900][ T5084] loop2: detected capacity change from 0 to 32768 [ 236.879127][ T5084] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.233 (5084) [ 236.910376][ T5084] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.920994][ T5084] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 236.929910][ T5084] BTRFS info (device loop2): using free space tree [ 236.948475][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.960761][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.974994][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.987543][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.001304][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.015916][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.089911][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.109949][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.127612][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.438592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.637382][ T5084] BTRFS info (device loop2): enabling ssd optimizations [ 237.641336][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.653449][ T5108] loop0: detected capacity change from 0 to 256 [ 237.660899][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.678685][ T5108] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.816469][ T5108] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 237.855581][ T5108] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 237.912855][ T26] audit: type=1800 audit(1726370969.492:81): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.234" name="bus" dev="loop0" ino=1048640 res=0 errno=0 [ 238.132437][ T5110] dlm: Unknown command passed to DLM device : 0 [ 238.132437][ T5110] [ 239.628637][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.731440][ T4807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.751046][ T5114] loop1: detected capacity change from 0 to 164 [ 239.766454][ T4807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.803554][ T4807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.821549][ T4271] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.857231][ T4807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.504364][ T5118] loop0: detected capacity change from 0 to 512 [ 240.645210][ T5118] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 241.036914][ T5118] EXT4-fs (loop0): 1 truncate cleaned up [ 241.053363][ T5118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.757094][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.782251][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.865842][ T4467] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4467) [ 241.903873][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.034818][ T5118] loop0: detected capacity change from 512 to 64 [ 242.155885][ T5143] IPv6: NLM_F_REPLACE set, but no existing node found! [ 242.161232][ T3736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.900203][ T3736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.932110][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.998045][ T5137] syz.0.236: attempt to access beyond end of device [ 244.998045][ T5137] loop0: rw=524288, sector=54, nr_sectors = 18 limit=64 [ 245.006797][ T5151] loop4: detected capacity change from 0 to 256 [ 245.095979][ T5151] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.147874][ T5151] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 245.148853][ T26] audit: type=1800 audit(1726370976.732:82): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.236" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 245.201502][ T5151] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 245.259438][ T5155] loop1: detected capacity change from 0 to 256 [ 245.309580][ T5157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.241'. [ 245.321429][ T26] audit: type=1800 audit(1726370976.911:83): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.242" name="bus" dev="loop4" ino=1048644 res=0 errno=0 [ 246.093399][ T5155] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 247.310281][ T26] audit: type=1800 audit(2000000000.679:84): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.244" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 248.193271][ T5174] loop4: detected capacity change from 0 to 256 [ 248.242938][ T5176] loop3: detected capacity change from 0 to 2048 [ 248.250149][ T5174] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.302529][ T26] audit: type=1326 audit(2000000001.669:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.2.248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb744d7def9 code=0x0 [ 248.326570][ T5174] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 248.370015][ T5174] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 248.569204][ T26] audit: type=1800 audit(2000000001.939:86): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.246" name="bus" dev="loop4" ino=1048647 res=0 errno=0 [ 255.505988][ T5203] loop4: detected capacity change from 0 to 256 [ 255.747635][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.843411][ T5209] Unsupported ieee802154 address type: 0 [ 255.881352][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.890248][ T5203] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.901205][ T5203] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 256.094630][ T5203] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 258.634452][ T5229] loop1: detected capacity change from 0 to 256 [ 259.481722][ T5229] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.536979][ T5228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.259'. [ 259.546430][ T5229] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 259.622338][ T5233] loop4: detected capacity change from 0 to 1024 [ 259.690221][ T5229] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 259.732405][ T5236] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 259.793118][ T26] audit: type=1800 audit(2000000013.159:87): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.261" name="bus" dev="loop1" ino=1048649 res=0 errno=0 [ 261.250112][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.253273][ T3642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.254374][ T3642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.255265][ T3642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.255847][ T3642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 261.256909][ T3642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.271100][ T3652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.273360][ T3652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.273625][ T3652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.275641][ T3652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.276970][ T3652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 261.277298][ T3652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.429404][ T5248] team0: Port device macvlan1 added [ 261.810270][ T5259] loop4: detected capacity change from 0 to 1024 [ 263.347462][ T3652] Bluetooth: hci1: command tx timeout [ 263.823661][ T3735] hfsplus: b-tree write err: -5, ino 4 [ 265.011509][ T5116] EXT4-fs (loop0): unmounting filesystem. [ 265.611136][ T48] Bluetooth: hci1: command tx timeout [ 266.139104][ T3693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.551048][ T3693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.690612][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 266.818321][ T3693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.280790][ T3693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.434947][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.454729][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.465819][ T5249] device bridge_slave_0 entered promiscuous mode [ 268.514816][ T5303] loop4: detected capacity change from 0 to 128 [ 268.638483][ T5257] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.677148][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.685937][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.727646][ T5249] device bridge_slave_1 entered promiscuous mode [ 268.863456][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.919265][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.208696][ T5249] team0: Port device team_slave_0 added [ 269.324681][ T5249] team0: Port device team_slave_1 added [ 269.338269][ T5318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 269.532845][ T5316] mkiss: ax0: crc mode is auto. [ 269.777891][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.788893][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.877062][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.928802][ T3652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.980338][ T3652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.989123][ T3652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.997545][ T3652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.006632][ T3652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.014088][ T3652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.028314][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.035670][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.056005][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.089411][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.098313][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.105563][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.182212][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.208903][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.266131][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.578984][ T5337] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 271.276209][ T26] audit: type=1326 audit(2000000023.959:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5331 comm="syz.1.280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c30b7def9 code=0x0 [ 271.674625][ T5249] device hsr_slave_0 entered promiscuous mode [ 272.147468][ T48] Bluetooth: hci0: command tx timeout [ 273.729795][ T5249] device hsr_slave_1 entered promiscuous mode [ 273.867665][ T5347] loop1: detected capacity change from 0 to 2048 [ 274.227561][ T3652] Bluetooth: hci0: command tx timeout [ 275.208009][ T5358] loop1: detected capacity change from 0 to 256 [ 275.245903][ T5358] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.358968][ T3693] device hsr_slave_0 left promiscuous mode [ 275.367029][ T5358] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 275.550701][ T5360] capability: warning: `syz.3.284' uses 32-bit capabilities (legacy support in use) [ 275.761193][ T5358] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 275.775678][ T3693] device hsr_slave_1 left promiscuous mode [ 275.792222][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.806843][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.853016][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.866889][ T26] audit: type=1800 audit(2000000029.239:89): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.285" name="bus" dev="loop1" ino=1048650 res=0 errno=0 [ 275.887741][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.904199][ T3693] device bridge_slave_1 left promiscuous mode [ 275.911265][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.930029][ T3693] device bridge_slave_0 left promiscuous mode [ 275.940978][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.001498][ T3693] device veth1_macvtap left promiscuous mode [ 276.010059][ T3693] device veth0_macvtap left promiscuous mode [ 276.030456][ T3693] device veth1_vlan left promiscuous mode [ 276.086880][ T3693] device veth0_vlan left promiscuous mode [ 276.820121][ T5367] loop1: detected capacity change from 0 to 512 [ 277.057233][ T5367] EXT4-fs error (device loop1): __ext4_iget:5055: inode #14: block 1886221359: comm syz.1.287: invalid block [ 277.252740][ T5367] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.287: couldn't read orphan inode 14 (err -117) [ 277.277729][ T5367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 277.305621][ T5367] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff) [ 277.332486][ T5373] loop4: detected capacity change from 0 to 512 [ 277.367262][ T5373] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.441014][ T5373] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz.4.288: iget: bad i_size value: -6917529027641081756 [ 277.507494][ T5373] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.288: couldn't read orphan inode 17 (err -117) [ 277.520339][ T5378] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 277.541175][ T5373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 277.628656][ T5373] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.288: bg 0: block 65: padding at end of block bitmap is not set [ 277.644706][ T5378] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 277.668557][ T5373] Quota error (device loop4): write_blk: dquota write failed [ 277.716992][ T5373] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 277.729013][ T5380] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 277.745632][ T5378] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.287: Failed to acquire dquot type 0 [ 277.760159][ T5373] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.288: Failed to acquire dquot type 0 [ 277.779050][ T5380] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 277.877143][ T5380] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.287: Failed to acquire dquot type 0 [ 278.786921][ T3649] EXT4-fs (loop4): unmounting filesystem. [ 278.888792][ T4546] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 278.943033][ T4546] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 279.102877][ T4546] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz-executor: Failed to acquire dquot type 0 [ 281.029941][ T3693] team0 (unregistering): Port device team_slave_1 removed [ 281.083605][ T3693] team0 (unregistering): Port device team_slave_0 removed [ 281.135823][ T3693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.190857][ T3693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.757780][ T3693] bond0 (unregistering): Released all slaves [ 281.905262][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 282.345952][ T4546] EXT4-fs (loop1): unmounting filesystem. [ 282.412356][ T5408] rdma_op ffff88801f2629f0 conn xmit_rdma 0000000000000000 [ 282.525229][ T5408] loop3: detected capacity change from 0 to 512 [ 282.613968][ T5408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 282.645647][ T5408] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 282.676203][ T5408] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 282.725366][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.737526][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.770079][ T5327] device bridge_slave_0 entered promiscuous mode [ 282.812046][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.855167][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.880944][ T5327] device bridge_slave_1 entered promiscuous mode [ 282.986360][ T5134] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 283.009203][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.051786][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.233106][ T5327] team0: Port device team_slave_0 added [ 283.255126][ T5327] team0: Port device team_slave_1 added [ 283.357302][ T5134] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.416254][ T5134] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.451335][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.459566][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.492967][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.533248][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.552588][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.598066][ T5134] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.622448][ T5134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.652190][ T5134] usb 4-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 283.665460][ T5134] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 283.677601][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.693580][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.712100][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.721267][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.731209][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.740109][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.747684][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.754871][ T5134] usb 4-1: SerialNumber: syz [ 283.763635][ T5249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.554992][ T5249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.713241][ T3693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.725295][ T5428] loop4: detected capacity change from 0 to 512 [ 284.738546][ T5428] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 284.754794][ T5249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.779096][ T5327] device hsr_slave_0 entered promiscuous mode [ 284.787924][ T5327] device hsr_slave_1 entered promiscuous mode [ 284.794682][ T5327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.797041][ T5428] EXT4-fs (loop4): 1 truncate cleaned up [ 284.804360][ T5327] Cannot create hsr debugfs directory [ 284.823636][ T5428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 284.845949][ T5249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.936335][ T5134] usb 4-1: 0:2 : does not exist [ 284.964374][ T3693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.051690][ T5134] usb 4-1: USB disconnect, device number 2 [ 285.127546][ T5257] udevd[5257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.165593][ T3693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.206656][ T5434] loop4: detected capacity change from 512 to 64 [ 285.300373][ T5436] syz.4.299: attempt to access beyond end of device [ 285.300373][ T5436] loop4: rw=524288, sector=54, nr_sectors = 18 limit=64 [ 285.335615][ T5436] syz.4.299: attempt to access beyond end of device [ 285.335615][ T5436] loop4: rw=0, sector=62, nr_sectors = 8 limit=64 [ 285.412028][ T3693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.422584][ T26] audit: type=1800 audit(2000000038.779:90): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.299" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 285.790669][ T5327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.858901][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.905399][ T5422] chnl_net:caif_netlink_parms(): no params data found [ 286.052262][ T5327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.265074][ T5327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.700178][ T5327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.818315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.850715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.007994][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.036363][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.043569][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.054005][ T5422] device bridge_slave_0 entered promiscuous mode [ 287.134510][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.143932][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.154232][ T5422] device bridge_slave_1 entered promiscuous mode [ 287.162019][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.172378][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.182129][ T3965] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.189470][ T3965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.199555][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.280476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.295002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.304968][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.312172][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.322686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.334832][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.420745][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.463413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.475058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.494478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.512503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.525908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.634615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.645852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.665366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.683287][ T5249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.703826][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.729184][ T5422] team0: Port device team_slave_0 added [ 287.799067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.814888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.842132][ T5422] team0: Port device team_slave_1 added [ 287.854543][ T5327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.949173][ T5327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.962235][ T5327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.021700][ T5327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 288.035255][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.043895][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.072233][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.165852][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.173621][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.208061][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.312683][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.323813][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.419323][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.472529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.481751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.562117][ T5422] device hsr_slave_0 entered promiscuous mode [ 288.580733][ T5422] device hsr_slave_1 entered promiscuous mode [ 288.592292][ T5422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.604007][ T5422] Cannot create hsr debugfs directory [ 288.627481][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.644652][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.658885][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.678472][ T5249] device veth0_vlan entered promiscuous mode [ 288.714680][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.723048][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.771568][ T5249] device veth1_vlan entered promiscuous mode [ 288.791434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.803581][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.811827][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.833124][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.884710][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.902387][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.915973][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.923213][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.940773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.961789][ T5249] device veth0_macvtap entered promiscuous mode [ 288.979864][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.989670][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.999385][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.006677][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.015340][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.027095][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.066696][ T5249] device veth1_macvtap entered promiscuous mode [ 289.075160][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.097633][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.117117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.128085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.152256][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.172814][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.220335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.234742][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.258111][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.277990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.291327][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.317483][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.330175][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.350946][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.371957][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.384399][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.403424][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.413575][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.424804][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.438485][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.449993][ T5327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.473915][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.490976][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.500986][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.510090][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.519246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.532650][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.543744][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.554182][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.566158][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.577630][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.588619][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.598756][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.609327][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.621027][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.664746][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.675355][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.688376][ T5249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.705573][ T5249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.727858][ T5249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.742870][ T5249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.963628][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.977827][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.993287][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.094162][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.103298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.141583][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.157894][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.174812][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.199023][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.241256][ T5327] device veth0_vlan entered promiscuous mode [ 290.281741][ T5327] device veth1_vlan entered promiscuous mode [ 290.310714][ T5422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.332294][ T5422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.343756][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.359118][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.367973][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.377533][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.395353][ T5327] device veth0_macvtap entered promiscuous mode [ 290.406930][ T5422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.417679][ T5422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.438455][ T5327] device veth1_macvtap entered promiscuous mode [ 290.506509][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.526334][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.536890][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.547946][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.559118][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.569776][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.580315][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.590951][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.608885][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.624451][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.645722][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.661525][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.672597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.681584][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.691146][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.718881][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.731427][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.741604][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.752353][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.763026][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.773790][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.784558][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.795335][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.805668][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.818708][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.831052][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.849805][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.859173][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.883632][ T5327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.892870][ T5327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.902092][ T5327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.911211][ T5327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.954535][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.995909][ T5422] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.018625][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.031233][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.063317][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.080964][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.094986][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.102308][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.121068][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.134372][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.151534][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.158792][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.181544][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.215917][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.234231][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.250844][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.265880][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.305553][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.315514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.335768][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.348083][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.357665][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.373149][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.382134][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.402407][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.661100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.670289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.695149][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.739132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.749755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.795669][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.805680][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.821106][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.832036][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.847556][ T5422] device veth0_vlan entered promiscuous mode [ 291.869063][ T5422] device veth1_vlan entered promiscuous mode [ 291.898040][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.918943][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.940676][ T5422] device veth0_macvtap entered promiscuous mode [ 291.952251][ T5422] device veth1_macvtap entered promiscuous mode [ 291.974938][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.988088][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.999385][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.010282][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.020861][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.032280][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.042665][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.053702][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.063948][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.077955][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.088179][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.099658][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.112223][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.132033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 292.141954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 292.151954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.161368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.173180][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.185256][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.197398][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.209668][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.219837][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.242644][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.253314][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.264380][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.275128][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.285986][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.297364][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.310653][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.323365][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.336661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.353912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.371688][ T5422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.390399][ T5422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.404590][ T5422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.417917][ T5422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.189769][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196163][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.627770][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.634142][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.146290][ T28] INFO: task kworker/1:4:3685 blocked for more than 143 seconds. [ 438.154635][ T28] Not tainted 6.1.110-syzkaller #0 [ 438.160551][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.176477][ T28] task:kworker/1:4 state:D stack:21944 pid:3685 ppid:2 flags:0x00004000 [ 438.185771][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 438.192548][ T28] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 438.195866][ T28] [ 438.202346][ T28] __schedule+0x143f/0x4570 [ 438.209541][ T28] ? release_firmware_map_entry+0x186/0x186 [ 438.215503][ T28] ? print_irqtrace_events+0x210/0x210 [ 438.257063][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 438.262351][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 438.276040][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 438.281337][ T28] schedule+0xbf/0x180 [ 438.285455][ T28] schedule_preempt_disabled+0xf/0x20 [ 438.299064][ T28] __mutex_lock+0x6b9/0xd80 [ 438.303668][ T28] ? __mutex_lock+0x53c/0xd80 [ 438.308874][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 438.315358][ T28] ? mutex_lock_nested+0x10/0x10 [ 438.320354][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 438.326480][ T28] ? print_irqtrace_events+0x210/0x210 [ 438.331993][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 438.339893][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 438.345140][ T28] ? process_one_work+0x7a9/0x11d0 [ 438.351557][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 438.358147][ T28] ? process_one_work+0x7a9/0x11d0 [ 438.363295][ T28] process_one_work+0x8a9/0x11d0 [ 438.368689][ T28] ? worker_detach_from_pool+0x260/0x260 [ 438.374408][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 438.380648][ T28] ? kthread_data+0x4e/0xc0 [ 438.385241][ T28] ? wq_worker_running+0x97/0x190 [ 438.390686][ T28] worker_thread+0xa47/0x1200 [ 438.395494][ T28] ? _raw_spin_unlock+0x40/0x40 [ 438.400882][ T28] kthread+0x28d/0x320 [ 438.405005][ T28] ? worker_clr_flags+0x190/0x190 [ 438.410729][ T28] ? kthread_blkcg+0xd0/0xd0 [ 438.415459][ T28] ret_from_fork+0x1f/0x30 [ 438.419973][ T28] [ 438.423035][ T28] INFO: task kworker/u4:5:3693 blocked for more than 143 seconds. [ 438.431071][ T28] Not tainted 6.1.110-syzkaller #0 [ 438.436791][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.445580][ T28] task:kworker/u4:5 state:D stack:21376 pid:3693 ppid:2 flags:0x00004000 [ 438.455342][ T28] Workqueue: netns cleanup_net [ 438.460515][ T28] Call Trace: [ 438.463821][ T28] [ 438.467322][ T28] __schedule+0x143f/0x4570 [ 438.471943][ T28] ? release_firmware_map_entry+0x186/0x186 [ 438.478434][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 438.483961][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 438.489907][ T28] schedule+0xbf/0x180 [ 438.494195][ T28] schedule_preempt_disabled+0xf/0x20 [ 438.499681][ T28] __mutex_lock+0x6b9/0xd80 [ 438.504223][ T28] ? kobject_put+0x422/0x460 [ 438.508958][ T28] ? __mutex_lock+0x53c/0xd80 [ 438.513668][ T28] ? rfkill_unregister+0xcc/0x220 [ 438.518903][ T28] ? mutex_lock_nested+0x10/0x10 [ 438.523880][ T28] ? kill_device+0x160/0x160 [ 438.528597][ T28] rfkill_unregister+0xcc/0x220 [ 438.533608][ T28] wiphy_unregister+0x223/0xb10 [ 438.538649][ T28] ? wiphy_register+0x2cc0/0x2cc0 [ 438.543718][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 438.549803][ T28] ? _raw_spin_unlock+0x40/0x40 [ 438.554701][ T28] ieee80211_unregister_hw+0x1b8/0x290 [ 438.560510][ T28] mac80211_hwsim_del_radio+0x2be/0x4a0 [ 438.567228][ T28] ? rhashtable_remove_fast+0xc50/0xc50 [ 438.572836][ T28] hwsim_exit_net+0x5b8/0x660 [ 438.578011][ T28] ? hwsim_init_net+0x80/0x80 [ 438.582737][ T28] ? __ip_vs_dev_cleanup_batch+0x235/0x250 [ 438.589012][ T28] cleanup_net+0x6ce/0xb60 [ 438.593502][ T28] ? ops_free_list+0x3b0/0x3b0 [ 438.598895][ T28] ? process_one_work+0x7a9/0x11d0 [ 438.604218][ T28] process_one_work+0x8a9/0x11d0 [ 438.609603][ T28] ? worker_detach_from_pool+0x260/0x260 [ 438.615284][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 438.620916][ T28] ? kthread_data+0x4e/0xc0 [ 438.625482][ T28] ? wq_worker_running+0x97/0x190 [ 438.630899][ T28] worker_thread+0xa47/0x1200 [ 438.635626][ T28] ? release_firmware_map_entry+0x186/0x186 [ 438.641851][ T28] kthread+0x28d/0x320 [ 438.646005][ T28] ? worker_clr_flags+0x190/0x190 [ 438.651159][ T28] ? kthread_blkcg+0xd0/0xd0 [ 438.655752][ T28] ret_from_fork+0x1f/0x30 [ 438.660364][ T28] [ 438.663442][ T28] INFO: task syz-executor:5249 blocked for more than 143 seconds. [ 438.671832][ T28] Not tainted 6.1.110-syzkaller #0 [ 438.677891][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.686753][ T28] task:syz-executor state:D stack:20472 pid:5249 ppid:1 flags:0x00004004 [ 438.696063][ T28] Call Trace: [ 438.699369][ T28] [ 438.702414][ T28] __schedule+0x143f/0x4570 [ 438.707653][ T28] ? release_firmware_map_entry+0x186/0x186 [ 438.713613][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 438.719227][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 438.724476][ T28] schedule+0xbf/0x180 [ 438.728656][ T28] schedule_preempt_disabled+0xf/0x20 [ 438.734110][ T28] __mutex_lock+0x6b9/0xd80 [ 438.738700][ T28] ? __mutex_lock+0x53c/0xd80 [ 438.743440][ T28] ? rfkill_fop_open+0x130/0x680 [ 438.748473][ T28] ? mutex_lock_nested+0x10/0x10 [ 438.753447][ T28] ? __init_waitqueue_head+0xaa/0x140 [ 438.758980][ T28] rfkill_fop_open+0x130/0x680 [ 438.763816][ T28] ? module_put+0x15a/0x350 [ 438.768427][ T28] ? rfkill_fop_ioctl+0x230/0x230 [ 438.773515][ T28] misc_open+0x304/0x380 [ 438.778966][ T28] chrdev_open+0x54a/0x630 [ 438.783461][ T28] ? cd_forget+0x160/0x160 [ 438.789116][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 438.794406][ T28] ? fsnotify_perm+0x472/0x590 [ 438.799278][ T28] ? cd_forget+0x160/0x160 [ 438.803742][ T28] do_dentry_open+0x7f9/0x10f0 [ 438.808712][ T28] path_openat+0x2644/0x2e60 [ 438.813347][ T28] ? mark_lock+0x9a/0x340 [ 438.817786][ T28] ? do_filp_open+0x480/0x480 [ 438.822512][ T28] do_filp_open+0x230/0x480 [ 438.827089][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 438.831760][ T28] ? _raw_spin_unlock+0x24/0x40 [ 438.836721][ T28] ? alloc_fd+0x5a0/0x640 [ 438.841191][ T28] do_sys_openat2+0x13b/0x4f0 [ 438.845909][ T28] ? do_sys_open+0x220/0x220 [ 438.850602][ T28] ? blkcg_maybe_throttle_current+0x1ac/0xa30 [ 438.856794][ T28] __x64_sys_openat+0x243/0x290 [ 438.861688][ T28] ? __ia32_sys_open+0x270/0x270 [ 438.866798][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 438.872837][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 438.878111][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 438.884209][ T28] do_syscall_64+0x3b/0xb0 [ 438.891267][ T28] ? clear_bhb_loop+0x45/0xa0 [ 438.896109][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.902056][ T28] RIP: 0033:0x7fb62877c890 [ 438.906565][ T28] RSP: 002b:00007ffe25d1e840 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 438.915009][ T28] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb62877c890 [ 438.923066][ T28] RDX: 0000000000000002 RSI: 00007fb6287f144e RDI: 00000000ffffff9c [ 438.931127][ T28] RBP: 00007fb6287f144e R08: 0000000000000000 R09: 0000000000000000 [ 438.939199][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 438.947420][ T28] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 438.955533][ T28] [ 438.958773][ T28] INFO: task syz-executor:5327 blocked for more than 144 seconds. [ 438.967611][ T28] Not tainted 6.1.110-syzkaller #0 [ 438.973377][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.982316][ T28] task:syz-executor state:D stack:21224 pid:5327 ppid:1 flags:0x00004004 [ 438.991708][ T28] Call Trace: [ 438.995028][ T28] [ 439.000619][ T28] __schedule+0x143f/0x4570 [ 439.005239][ T28] ? release_firmware_map_entry+0x186/0x186 [ 439.011192][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 439.016853][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.022176][ T28] schedule+0xbf/0x180 [ 439.026336][ T28] schedule_preempt_disabled+0xf/0x20 [ 439.031740][ T28] __mutex_lock+0x6b9/0xd80 [ 439.036311][ T28] ? __mutex_lock+0x53c/0xd80 [ 439.041050][ T28] ? misc_open+0x58/0x380 [ 439.045406][ T28] ? mutex_lock_nested+0x10/0x10 [ 439.050452][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 439.056266][ T28] misc_open+0x58/0x380 [ 439.060470][ T28] chrdev_open+0x54a/0x630 [ 439.064932][ T28] ? cd_forget+0x160/0x160 [ 439.069431][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.074717][ T28] ? fsnotify_perm+0x472/0x590 [ 439.079658][ T28] ? cd_forget+0x160/0x160 [ 439.084155][ T28] do_dentry_open+0x7f9/0x10f0 [ 439.089040][ T28] path_openat+0x2644/0x2e60 [ 439.093666][ T28] ? mark_lock+0x9a/0x340 [ 439.098099][ T28] ? do_filp_open+0x480/0x480 [ 439.102821][ T28] do_filp_open+0x230/0x480 [ 439.109909][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 439.114643][ T28] ? _raw_spin_unlock+0x24/0x40 [ 439.120817][ T28] ? alloc_fd+0x5a0/0x640 [ 439.125230][ T28] do_sys_openat2+0x13b/0x4f0 [ 439.130032][ T28] ? do_sys_open+0x220/0x220 [ 439.134706][ T28] ? blkcg_maybe_throttle_current+0x1ac/0xa30 [ 439.140922][ T28] __x64_sys_openat+0x243/0x290 [ 439.145827][ T28] ? __ia32_sys_open+0x270/0x270 [ 439.150847][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.156913][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 439.162150][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.168222][ T28] do_syscall_64+0x3b/0xb0 [ 439.172672][ T28] ? clear_bhb_loop+0x45/0xa0 [ 439.177427][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.183395][ T28] RIP: 0033:0x7fb9b197c890 [ 439.187906][ T28] RSP: 002b:00007fff827c6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 439.196492][ T28] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb9b197c890 [ 439.204487][ T28] RDX: 0000000000000002 RSI: 00007fb9b19f144e RDI: 00000000ffffff9c [ 439.212680][ T28] RBP: 00007fb9b19f144e R08: 0000000000000000 R09: 0000000000000000 [ 439.222434][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 439.230591][ T28] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 439.238721][ T28] [ 439.241778][ T28] INFO: task syz-executor:5422 blocked for more than 144 seconds. [ 439.249705][ T28] Not tainted 6.1.110-syzkaller #0 [ 439.255358][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.264435][ T28] task:syz-executor state:D stack:21224 pid:5422 ppid:1 flags:0x00004004 [ 439.274251][ T28] Call Trace: [ 439.277874][ T28] [ 439.280834][ T28] __schedule+0x143f/0x4570 [ 439.285404][ T28] ? release_firmware_map_entry+0x186/0x186 [ 439.291858][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 439.297703][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.302942][ T28] schedule+0xbf/0x180 [ 439.307258][ T28] schedule_preempt_disabled+0xf/0x20 [ 439.312836][ T28] __mutex_lock+0x6b9/0xd80 [ 439.317417][ T28] ? __mutex_lock+0x53c/0xd80 [ 439.322188][ T28] ? misc_open+0x58/0x380 [ 439.327954][ T28] ? mutex_lock_nested+0x10/0x10 [ 439.332973][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 439.339860][ T28] misc_open+0x58/0x380 [ 439.344181][ T28] chrdev_open+0x54a/0x630 [ 439.348721][ T28] ? cd_forget+0x160/0x160 [ 439.353193][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.358508][ T28] ? fsnotify_perm+0x472/0x590 [ 439.363321][ T28] ? cd_forget+0x160/0x160 [ 439.367946][ T28] do_dentry_open+0x7f9/0x10f0 [ 439.372778][ T28] path_openat+0x2644/0x2e60 [ 439.377504][ T28] ? mark_lock+0x9a/0x340 [ 439.381905][ T28] ? do_filp_open+0x480/0x480 [ 439.386761][ T28] do_filp_open+0x230/0x480 [ 439.391299][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 439.395912][ T28] ? _raw_spin_unlock+0x24/0x40 [ 439.400866][ T28] ? alloc_fd+0x5a0/0x640 [ 439.405245][ T28] do_sys_openat2+0x13b/0x4f0 [ 439.410050][ T28] ? do_sys_open+0x220/0x220 [ 439.414680][ T28] ? blkcg_maybe_throttle_current+0x1ac/0xa30 [ 439.420968][ T28] __x64_sys_openat+0x243/0x290 [ 439.425866][ T28] ? __ia32_sys_open+0x270/0x270 [ 439.431227][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.438739][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 439.443989][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.450424][ T28] do_syscall_64+0x3b/0xb0 [ 439.454894][ T28] ? clear_bhb_loop+0x45/0xa0 [ 439.459689][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.465616][ T28] RIP: 0033:0x7fdb1ed7c890 [ 439.470164][ T28] RSP: 002b:00007ffc20ce49f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 439.478755][ T28] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdb1ed7c890 [ 439.486901][ T28] RDX: 0000000000000002 RSI: 00007fdb1edf144e RDI: 00000000ffffff9c [ 439.494898][ T28] RBP: 00007fdb1edf144e R08: 0000000000000000 R09: 0000000000000000 [ 439.503140][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 439.511376][ T28] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 439.519878][ T28] [ 439.522942][ T28] INFO: task syz.4.299:5427 blocked for more than 144 seconds. [ 439.530688][ T28] Not tainted 6.1.110-syzkaller #0 [ 439.536481][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.545460][ T28] task:syz.4.299 state:D stack:24160 pid:5427 ppid:3649 flags:0x00004004 [ 439.555328][ T28] Call Trace: [ 439.559220][ T28] [ 439.562226][ T28] __schedule+0x143f/0x4570 [ 439.566966][ T28] ? release_firmware_map_entry+0x186/0x186 [ 439.572928][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 439.578841][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.584113][ T28] schedule+0xbf/0x180 [ 439.588719][ T28] schedule_preempt_disabled+0xf/0x20 [ 439.594167][ T28] __mutex_lock+0x6b9/0xd80 [ 439.599120][ T28] ? kobject_put+0x422/0x460 [ 439.603748][ T28] ? __mutex_lock+0x53c/0xd80 [ 439.608564][ T28] ? rfkill_unregister+0xcc/0x220 [ 439.613642][ T28] ? mutex_lock_nested+0x10/0x10 [ 439.618690][ T28] ? kill_device+0x160/0x160 [ 439.623312][ T28] ? nfc_genl_device_removed+0x251/0x370 [ 439.629028][ T28] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 439.635194][ T28] rfkill_unregister+0xcc/0x220 [ 439.640151][ T28] nfc_unregister_device+0x92/0x290 [ 439.645388][ T28] virtual_ncidev_close+0x55/0x90 [ 439.650504][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 439.655686][ T28] __fput+0x3f6/0x8d0 [ 439.662471][ T28] task_work_run+0x246/0x300 [ 439.667422][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 439.672525][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 439.678149][ T28] exit_to_user_mode_loop+0xde/0x100 [ 439.683476][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 439.689259][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 439.694869][ T28] do_syscall_64+0x47/0xb0 [ 439.699421][ T28] ? clear_bhb_loop+0x45/0xa0 [ 439.704181][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.710174][ T28] RIP: 0033:0x7f1cb577def9 [ 439.714634][ T28] RSP: 002b:00007ffcf687bf18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 439.723161][ T28] RAX: 0000000000000000 RBX: 00007f1cb5937a80 RCX: 00007f1cb577def9 [ 439.731216][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 439.739281][ T28] RBP: 00007f1cb5937a80 R08: 0000000000000006 R09: 00007ffcf687c20f [ 439.747792][ T28] R10: 00000000005cb1e0 R11: 0000000000000246 R12: 0000000000045d2f [ 439.755838][ T28] R13: 00007ffcf687c020 R14: 0000000000000fd2 R15: ffffffffffffffff [ 439.764007][ T28] [ 439.768491][ T28] INFO: task syz.3.301:5453 blocked for more than 144 seconds. [ 439.776988][ T28] Not tainted 6.1.110-syzkaller #0 [ 439.782664][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.792394][ T28] task:syz.3.301 state:D stack:25544 pid:5453 ppid:4807 flags:0x00004004 [ 439.801980][ T28] Call Trace: [ 439.805287][ T28] [ 439.808637][ T28] __schedule+0x143f/0x4570 [ 439.813304][ T28] ? release_firmware_map_entry+0x186/0x186 [ 439.819646][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 439.825189][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.830964][ T28] schedule+0xbf/0x180 [ 439.835122][ T28] schedule_preempt_disabled+0xf/0x20 [ 439.840848][ T28] __mutex_lock+0x6b9/0xd80 [ 439.845396][ T28] ? __mutex_lock+0x53c/0xd80 [ 439.850504][ T28] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 439.855872][ T28] ? mutex_lock_nested+0x10/0x10 [ 439.861486][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 439.867506][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 439.872956][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 439.882121][ T28] ? _raw_spin_unlock+0x40/0x40 [ 439.887952][ T28] nfc_rfkill_set_block+0x4c/0x2f0 [ 439.893220][ T28] ? nfc_unregister_device+0x290/0x290 [ 439.899245][ T28] rfkill_set_block+0x1e7/0x430 [ 439.904270][ T28] rfkill_fop_write+0x5b7/0x790 [ 439.910082][ T28] ? rfkill_fop_read+0x470/0x470 [ 439.915101][ T28] ? fsnotify_perm+0x64/0x590 [ 439.920219][ T28] ? security_file_permission+0x75/0xa0 [ 439.926234][ T28] ? rfkill_fop_read+0x470/0x470 [ 439.931225][ T28] vfs_write+0x2d9/0xbc0 [ 439.935572][ T28] ? file_end_write+0x250/0x250 [ 439.940596][ T28] ? __fget_files+0x28/0x4a0 [ 439.945462][ T28] ? __fget_files+0x435/0x4a0 [ 439.950432][ T28] ? __fget_files+0x28/0x4a0 [ 439.955130][ T28] ? __fdget_pos+0x1db/0x360 [ 439.959826][ T28] ? ksys_write+0x77/0x2c0 [ 439.964383][ T28] ksys_write+0x19c/0x2c0 [ 439.968945][ T28] ? print_irqtrace_events+0x210/0x210 [ 439.974651][ T28] ? __ia32_sys_read+0x80/0x80 [ 439.979592][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.985625][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 439.991275][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.997708][ T28] do_syscall_64+0x3b/0xb0 [ 440.002181][ T28] ? clear_bhb_loop+0x45/0xa0 [ 440.007294][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.013429][ T28] RIP: 0033:0x7f3b6cb7def9 [ 440.018600][ T28] RSP: 002b:00007f3b6c9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.028562][ T28] RAX: ffffffffffffffda RBX: 00007f3b6cd36058 RCX: 00007f3b6cb7def9 [ 440.037614][ T28] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000008 [ 440.046241][ T28] RBP: 00007f3b6cbf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 440.054771][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.063104][ T28] R13: 0000000000000000 R14: 00007f3b6cd36058 R15: 00007ffc19b42028 [ 440.072745][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.072859][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.086026][ T28] [ 440.089237][ T28] [ 440.089237][ T28] Showing all locks held in the system: [ 440.099823][ T28] 1 lock held by rcu_tasks_kthre/12: [ 440.105167][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 440.115753][ T28] 1 lock held by rcu_tasks_trace/13: [ 440.121188][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 440.132588][ T28] 1 lock held by khungtaskd/28: [ 440.137586][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 440.148400][ T28] 2 locks held by getty/3400: [ 440.153113][ T28] #0: ffff88802e014098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 440.162977][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 440.173311][ T28] 3 locks held by kworker/1:4/3685: [ 440.178598][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 440.189072][ T28] #1: ffffc900044cfd20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 440.202164][ T28] #2: ffffffff8e7a9088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 440.215331][ T28] 4 locks held by kworker/u4:5/3693: [ 440.220791][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 440.231181][ T28] #1: ffffc900045a7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 440.241207][ T28] #2: ffffffff8e4ed390 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 440.250681][ T28] #3: ffffffff8e7a9088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 440.261011][ T28] 2 locks held by kworker/u4:6/3735: [ 440.266469][ T28] 2 locks held by syz-executor/5249: [ 440.271849][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.280431][ T28] #1: ffffffff8e7a9088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x130/0x680 [ 440.290554][ T28] 1 lock held by syz-executor/5327: [ 440.295749][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.304352][ T28] 1 lock held by syz-executor/5422: [ 440.309649][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.321313][ T28] 2 locks held by syz.4.299/5427: [ 440.327461][ T28] #0: ffff8880213f9100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 440.337952][ T28] #1: ffffffff8e7a9088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 440.348453][ T28] 2 locks held by syz.3.301/5453: [ 440.353506][ T28] #0: ffffffff8e7a9088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 440.363718][ T28] #1: ffff8880213f9100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 440.373486][ T28] 1 lock held by syz-executor/5567: [ 440.378838][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.387883][ T28] 1 lock held by syz-executor/5569: [ 440.393106][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.401670][ T28] 1 lock held by syz-executor/5571: [ 440.406948][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.415444][ T28] 1 lock held by syz-executor/5573: [ 440.420683][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.432029][ T28] 1 lock held by syz-executor/5575: [ 440.437376][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.446010][ T28] 1 lock held by syz-executor/5577: [ 440.451228][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.459900][ T28] 1 lock held by syz-executor/5579: [ 440.465115][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.473747][ T28] 1 lock held by syz-executor/5585: [ 440.479216][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.487834][ T28] 1 lock held by syz-executor/5587: [ 440.493480][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.502000][ T28] 1 lock held by syz-executor/5589: [ 440.507261][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.515775][ T28] 1 lock held by syz-executor/5591: [ 440.521061][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.529613][ T28] 1 lock held by syz-executor/5593: [ 440.534833][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.545269][ T28] 1 lock held by syz-executor/5595: [ 440.551491][ T28] #0: ffffffff8da7f768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 440.560314][ T28] [ 440.562666][ T28] ============================================= [ 440.562666][ T28] [ 440.571162][ T28] NMI backtrace for cpu 1 [ 440.575512][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.110-syzkaller #0 [ 440.583411][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 440.593563][ T28] Call Trace: [ 440.596852][ T28] [ 440.599796][ T28] dump_stack_lvl+0x1e3/0x2cb [ 440.604490][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 440.610077][ T28] ? panic+0x764/0x764 [ 440.614162][ T28] ? vprintk_emit+0x622/0x740 [ 440.618865][ T28] ? printk_sprint+0x490/0x490 [ 440.623674][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 440.628804][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 440.633767][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 440.639926][ T28] ? _printk+0xd1/0x111 [ 440.644085][ T28] ? panic+0x764/0x764 [ 440.648171][ T28] ? __wake_up_klogd+0xcc/0x100 [ 440.653122][ T28] ? panic+0x764/0x764 [ 440.657285][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 440.663364][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 440.669540][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 440.675528][ T28] watchdog+0xf88/0xfd0 [ 440.679972][ T28] ? watchdog+0x1f8/0xfd0 [ 440.684345][ T28] kthread+0x28d/0x320 [ 440.688424][ T28] ? hungtask_pm_notify+0x50/0x50 [ 440.693468][ T28] ? kthread_blkcg+0xd0/0xd0 [ 440.698085][ T28] ret_from_fork+0x1f/0x30 [ 440.702558][ T28] [ 440.705911][ T28] Sending NMI from CPU 1 to CPUs 0: [ 440.711270][ C0] NMI backtrace for cpu 0 [ 440.711281][ C0] CPU: 0 PID: 5133 Comm: kworker/0:11 Not tainted 6.1.110-syzkaller #0 [ 440.711299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 440.711310][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 440.711341][ C0] RIP: 0010:lock_acquire+0x1b0/0x5a0 [ 440.711369][ C0] Code: 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 42 80 3c 2b 00 74 08 4c 89 ff e8 8d ac 77 00 48 8d 5c 24 60 4c 8b bc 24 80 00 00 00 48 c7 c7 20 10 0c 8b e8 13 70 3c 09 65 ff 05 0c f4 97 7e 45 31 [ 440.711397][ C0] RSP: 0018:ffffc9000485fa80 EFLAGS: 00000246 [ 440.711410][ C0] RAX: 0000000000000000 RBX: ffffc9000485fae0 RCX: ffffffff816a83db [ 440.711422][ C0] RDX: 0000000000000000 RSI: ffffffff8b5d6da0 RDI: ffffffff8b5d6d60 [ 440.711435][ C0] RBP: ffffc9000485fbe0 R08: dffffc0000000000 R09: fffffbfff1d33c96 [ 440.711448][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200090bf58 [ 440.711460][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 440.711472][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 440.711486][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.711499][ C0] CR2: 00007fcc0690c7dd CR3: 000000000d08e000 CR4: 00000000003506f0 [ 440.711514][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.711524][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.711534][ C0] Call Trace: [ 440.711540][ C0] [ 440.711546][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 440.711564][ C0] ? read_lock_is_recursive+0x10/0x10 [ 440.711591][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 440.711609][ C0] ? nmi_handle+0x25/0x440 [ 440.711643][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 440.711669][ C0] ? nmi_handle+0x12e/0x440 [ 440.711696][ C0] ? nmi_handle+0x25/0x440 [ 440.711721][ C0] ? lock_acquire+0x1b0/0x5a0 [ 440.711750][ C0] ? default_do_nmi+0x62/0x150 [ 440.711769][ C0] ? exc_nmi+0xa8/0x100 [ 440.711785][ C0] ? end_repeat_nmi+0x16/0x31 [ 440.711814][ C0] ? lock_acquire+0xeb/0x5a0 [ 440.711839][ C0] ? lock_acquire+0x1b0/0x5a0 [ 440.711864][ C0] ? lock_acquire+0x1b0/0x5a0 [ 440.711890][ C0] ? lock_acquire+0x1b0/0x5a0 [ 440.711914][ C0] [ 440.711919][ C0] [ 440.711928][ C0] ? read_lock_is_recursive+0x10/0x10 [ 440.711955][ C0] ? wg_ratelimiter_gc_entries+0x3a7/0x470 [ 440.711983][ C0] ? __might_sleep+0xb0/0xb0 [ 440.712004][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 440.712026][ C0] _raw_spin_lock+0x2a/0x40 [ 440.712045][ C0] ? wg_ratelimiter_gc_entries+0x5c/0x470 [ 440.712072][ C0] wg_ratelimiter_gc_entries+0x5c/0x470 [ 440.712102][ C0] ? process_one_work+0x7a9/0x11d0 [ 440.712122][ C0] process_one_work+0x8a9/0x11d0 [ 440.712150][ C0] ? worker_detach_from_pool+0x260/0x260 [ 440.712173][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 440.712194][ C0] ? kthread_data+0x4e/0xc0 [ 440.712221][ C0] ? wq_worker_running+0x97/0x190 [ 440.712239][ C0] worker_thread+0xa47/0x1200 [ 440.712273][ C0] kthread+0x28d/0x320 [ 440.712287][ C0] ? worker_clr_flags+0x190/0x190 [ 440.712306][ C0] ? kthread_blkcg+0xd0/0xd0 [ 440.712323][ C0] ret_from_fork+0x1f/0x30 [ 440.712353][ C0] [ 441.036272][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 441.043161][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.110-syzkaller #0 [ 441.051086][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 441.061252][ T28] Call Trace: [ 441.064810][ T28] [ 441.067760][ T28] dump_stack_lvl+0x1e3/0x2cb [ 441.072476][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 441.077947][ T28] ? panic+0x764/0x764 [ 441.082024][ T28] ? llist_add_batch+0x160/0x1d0 [ 441.086990][ T28] ? vscnprintf+0x59/0x80 [ 441.091318][ T28] panic+0x318/0x764 [ 441.095226][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 441.101506][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 441.106999][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 441.113146][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 441.119818][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 441.125995][ T28] watchdog+0xfc7/0xfd0 [ 441.130165][ T28] ? watchdog+0x1f8/0xfd0 [ 441.134492][ T28] kthread+0x28d/0x320 [ 441.138568][ T28] ? hungtask_pm_notify+0x50/0x50 [ 441.143603][ T28] ? kthread_blkcg+0xd0/0xd0 [ 441.148200][ T28] ret_from_fork+0x1f/0x30 [ 441.152672][ T28] [ 441.156145][ T28] Kernel Offset: disabled [ 441.160503][ T28] Rebooting in 86400 seconds..