last executing test programs: 1m7.895515232s ago: executing program 3 (id=659): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d95c7e307963117b5a705fd4a74bc49e24a9ae8c22842f85899c62ca3a6ff691f1df44c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd25, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) read(r1, &(0x7f0000000280)=""/234, 0xea) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') 1m7.538040073s ago: executing program 3 (id=664): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="74e77474749ada47befe086cf7bba216879ec1adf408af43f1261ba5f81dc6a4a665c16e66f6d3fdb5e6b994a9b1a17fa159eadb70ccb6901fd2ac240cc40e2487cc124c4d80910e785abf8fdca4e235fe894e237c19c1184320ac08b456a5da6c46aaee7939c3e005558c64f37a8bba9ec5af12ace3853f49b9e09cef811389fabc2bb215ba6944757c89f729dbc0400af013c0b78c0678a98089b69d23798ab43b450edd3a9cd26e4f64966f5d4d3be68f638f97fa826c6e3afa517a8777ba", @ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES64, @ANYRESDEC], 0x1, 0xda6, &(0x7f0000003c80)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = fanotify_init(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x8000000, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0700000004070000000000000000e2ff00000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000800)={r6, &(0x7f0000000300)="92", 0x0}, 0x20) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m1.855557939s ago: executing program 3 (id=674): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d95c7e307963117b5a705fd4a74bc49e24a9ae8c22842f85899c62ca3a6ff691f1df44c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd25, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r8, 0x5412, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) read(r1, &(0x7f0000000280)=""/234, 0xea) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') 1m1.653431967s ago: executing program 2 (id=677): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x46) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f04080019041422c181cdaf2f7e81ee6ac15afd2ad635d949794e0043f8e9e21c901d81bf88682df4f341715730e91eba846f9d95049fe37b3ad50e5b31d9bb39238f595c4d084786d970b912c72d43bfbe3918f1d94c722bee81b988bbd8da88bd14ca12becaa9e7bf1796a584502fdd1f59b16c15234019e70ab751886b8448bf1d2d9afeb93f73a102d9e409f979"], 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x2, 0x5}}}, 0x24}}, 0x4004811) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket(0x23, 0x80000, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e081cc0a605cdbcb9a662cc10a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000007c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r8, &(0x7f0000002840)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000001000000ff010000000000000000000000000001e000000200000000000010000000000000000000000000000800000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000005000000000000000000000000000014403c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x104}}, 0x0) 59.995219538s ago: executing program 2 (id=681): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x40001df, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r3, 0x0, 0x0, 0x2404c095) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='rcu_utilization\x00', r4}, 0x10) getrandom(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x210, &(0x7f00000043c0)="$eJzsmbFv1DAUxj87ufRaoUoMMLAcQyWKRHNJDlAXhrIjIbUIGE/UVAW3V10ztJWQWrGwMCP+EYZODGwwMTIBEhIDHZmQMLLjNE4vuRIKXXg/6Xyf7fj5Pefd83AgCOK/5fOn7x+f35xfugLgDGYwYce/esUzvJAML72W1W/Wp5/sH7XHAChV9P1j9g8AvF7wgN3MrFLuamDG2lwCN1pzBxyXrb4LhjD3VRWrBRju2+FHG+owmsGkFVKwBwO5/HBVikg3sW4S3fQAVfL/YI9hGUDbbsEc/za3dx73JTDMhBS5aKl8n5GppmLc+Rn/FjhuOEeg39e9Z0/3dD+045FzfjE4Yqt7YFi0eh4TCMOwY7siduK/4Bf2vey1Zew2iaR9soNoKs7OVUzpDB+/fFIKHe1fc+On+icBBqUUPLVT9aumtB/NDfLO6KrgGDvi5FGwoyPMTYnzB/tvR1d9ObWk/WPxATUVxxQuAO7DL3TavJ+S8lalwXOlkYs1P5k8Ayv9KeoT84FLTn3ynVuhm65tdDe3d+ZW1/orYkWsJ0nvenQ1iq4lXVObs3ZM/Wub+jTl2G/VPBuwAFv9NB3GW0A6jA/7SdY6FXfx1eCbWcNN/eOY/aFUfr2YsPOLkpX3YPbDzbdWs16t8wRBEARBEARBEARBEARBEL+H/eurA4Z3085oJX5y20z/CgAA///PVViv") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 59.73894753s ago: executing program 3 (id=683): r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6c9, &(0x7f00000037c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1/file4/file7\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x4) open$dir(0x0, 0x161683, 0x100) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e000102000000000000000000000000000000000000ffff"], 0x28}}, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private}, @address_request}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e"], 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010000104000000000000000000480000", @ANYRES32=r6, @ANYRES32], 0x54}}, 0x0) 57.506962111s ago: executing program 2 (id=686): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d95c7e307963117b5a705fd4a74bc49e24a9ae8c22842f85899c62ca3a6ff691f1df44c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd25, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000", @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) read(r1, &(0x7f0000000280)=""/234, 0xea) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') 57.281965531s ago: executing program 2 (id=689): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x38, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000026c0)=[{0x0}, {&(0x7f0000004000)=""/4096, 0x1000}, {0x0}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000002400)=""/121, 0x79}, {&(0x7f0000002480)=""/86, 0x56}, {&(0x7f0000002500)=""/194, 0xc2}, {&(0x7f0000002640)=""/77, 0x4d}], 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000005, &(0x7f0000002f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9dd}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x50080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x4800003a, r0, 0x0) read$FUSE(r7, &(0x7f00000002c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 56.957264528s ago: executing program 3 (id=690): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000012c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x8912, 0x0) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r6 = memfd_create(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private1}, {@in6=@private0, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'blake2s-224-generic\x00'}, 0xfffffe27}}]}, 0x138}}, 0x0) write(r6, &(0x7f0000002140), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) readlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 55.626887142s ago: executing program 2 (id=693): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d95c7e307963117b5a705fd4a74bc49e24a9ae8c22842f85899c62ca3a6ff691f1df44c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd25, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r8, 0x5412, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) read(r1, &(0x7f0000000280)=""/234, 0xea) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') 55.41750284s ago: executing program 3 (id=695): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x46) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f04080019041422c181cdaf2f7e81ee6ac15afd2ad635d949794e0043f8e9e21c901d81bf88682df4f341715730e91eba846f9d95049fe37b3ad50e5b31d9bb39238f595c4d084786d970b912c72d43bfbe3918f1d94c722bee81b988bbd8da88bd14ca12becaa9e7bf1796a584502fdd1f59b16c15234019e70ab751886b8448bf1d2d9afeb93f73a102d9e409f979"], 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x2, 0x5}}}, 0x24}}, 0x4004811) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e081cc0a605cdbcb9a662cc10a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r8, &(0x7f0000002840)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000001000000ff010000000000000000000000000001e000000200000000000010000000000000000000000000000800000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="00000005000000000000000000000000000014403c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x104}}, 0x0) 55.374110244s ago: executing program 2 (id=697): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="4ae1a945aeb21706957dde351ec8ff116a6b3473e0deff096a7a9960f5281511c5c47eb1c5e81a6f4e6b67d2f104c6f6bd75ba564ea271b90918141ca9ae7ec8ff84f65a8e55ef364ed4b7cda365d2935abbeb15bc14f380d8de399a640bca33e95e253b42ccf675343ce2da37825992301874699273f67b3e31955525703878d46297f48914be3520ae0ff1e18afd8bea2ac8070fedf1312f364323304c89f699f1b79fa834ae4a0303d0aed4146c43a4a0e2c3867144adba2514bfa44470568e04b7f7ed242f22faa1335c5f3f9c151a49b9f400492aed270d726951f9808f13465695b4ae78bf1e6a128ed02cc1ad69065b02e40d4707ff5296a387094ab8f508d10647690f9b8af8258ad2f7d91ba4a4ede6620dc8503e8f6a8a41e5c92940956302a6259132839a3bfbe40c86037740c457a4a91663dbe29eb8018d1a64431406b565db6e9edd275be2e1972868165404eb55b61c9e3bb4a6666fabf1872e84582c08c0d252d33cf30815f79effbb8abaa9cdeb2be24ab58bedb8cdd44e337a45f24c647b5fc3277a7061864f2fe3915ff7b909f1391dc295f0f96d719109d57b4a74fd1c8595984a4d7091831164344646ada99ff84618f0efda712d61cbf8c74a7c74e9f02f0c5b7911c2eaed7658b1b7b127b8bd9ab9c02bafdfb6b80b57a8fc33adf94b80c7a0e0a75c52fcc19bc43f28167b7f34def1a65a8a678cddc3469b0e264610f3e6ce4fcc654d3d226eb096af08f661e967f902d578c3dde4e2b163f0d9324b069df875eca253e1b23e79e12ad7ffeef2482abe03a174dc1833d32a8449e7869e33d36bab788d3607eceac192d8962631ee1f347bf885734ac099b29d6dbdb21c19eac52e6ebd5cf262f7380b08c93dcc6d9ce8302a0964c3393b7f91e85b794db2877df27ec391c4eed19494be1d8577d844231ee04e4fb4d9ebee4ca840400dd48f3956cc00cb4cf4eb385f677ef464cf33ae593bc56d6f8a708913a31fd33529f3277234045e7a40625abe72ef2721c56180ea493abf500d4d3bcc705cd86ca9aba1b5ac6ba1e3d45fb7e924de2981c4ebd12c3153ecee793a6d73d6607f83058cc5bbc7cd0b2dbf87cd0c53d4013607a572933dbbdc41da669dbbdf2af1021dc45842728dde269ed7b1ad1ac659587906496f6c31672809d32d8fa3971e5805d6fbeac54edde27336b737cb50e7d934d65a75f631823fd8f3322ba173201f5678f22c5413291837a6fcbf66befc4186a42baaf798fdf256659d5d9c3a4cd7086981f4b62e80a58790e029a84c365beb6b880a0de307a6cba3366f035cfaadd3ba25bb474965a3b8c441a469477bf5b43bffe448532f4fa421f3f832b9523057d848a6f83a80f82a333e743e856988c017abf5468237d8c032aebe39d2b24f9c35c30739791e51b0050744bdaa799b019aa40e273d74775f1ed3b505aa74c1cb125c63b042b82135bfe81712cea79873f56736e8299903f40a0342f543040d9181b6357e2b3135f39117c5739dc5aac2487338f92b9935cf9a0a5ea7654721f859aea6c269f303ed48fb440b23ccfc4aac318652512ca0290e44dd7edc44cda783a2c0c23353f1ef6ea23a21035d8818594e6bf032f70bca9b96d5f2b1c49939fc90cdfed94a3c6c3890755d8b2d9502c66c23699247b478b21529112fea692f5716019743eaf4918c360e06298de9cd07351e41bb94253d6b62af611b6395df7a696ea2a5469247dd2cfcc26f86bfcc400973b05cfdb933aac527d0b8d31b103d092ab8d84626a954c76cdbbf498b93bf54a356882df73d9e51b084fdb84e2a3bf1710ff28a6862977e3b34fa0e44f57a6c97281db14392bed28c36e603d08b9b679c3a46a3d9654fc876311d64c96f126b006f3e7b3f832f5d88224b096f5564fe1fa39a0e6d9586842e3dd0e70c0dca86dffaae586c3e5bbcd2a48aa6d2890f67f9545d7feb28f61b98b27f124c731a17df7c9f752d578d29816512057a4c719cc0f8ce5896e27b49b19b4c093da0836bfdff6502530f99c7330d7be4336cfdb131714775bbea2fe9e07af8081f3f8acc0c321a83c3e7c3b7d7822648e462bf338a316ad4cccc3a2bc96d5d5dea390b246106a0979df7e53bc9370f478e294e35bfa23002854a14d36d740613be869948170ec07e11c9dfc4cac9d66c1c46b97b9cedbb2ce6bc7e42bbf700f26c89291f3ac53e422f8a5690b0f5862a661c3d2164d1a815db77d0331012a06fc4e73790ae1f721f630b140d0248e46c00ff321aa47a8d8f2b448a741b329ce60b09fa72255d18126e8c683c8ad8b192b31e692d3621b3cf8d2b2672cea04b2319c7f1455023ed6174f62b3811dbb68da4cd2a4f950baed469bf6f539d1e2abdc8c3bfaa95eb92032831eddaf016e36d02974e2a2d67f268ef9c0bded357da782edf9d8304839de89ec92f0d67bcbfc6b0a3e24a8e40860c733189fed8dadfae613db02a23bc29759e67630f1d7a31f696e7cad8223b50dc03d5875a995464a4495595719e52e9e57a375f3ee49c5e7043159d9adf5bf9b40f9effeecaf457bf3a247bd7bc5881e16a511f2da4d75b96d2e7f397c2df0cd1890cb652521f7c46f7a625b1d1c1ce6249853cf804c8e5bb7f02f16248866598c8b8d381e9c1916f00c054d6702da885ccca963af918eaea1146fb6c8218e78174050aa47184e7f5872d8a005653d3f6614cfdb3a8b5a41bafb42f8d8097c6c6c7c3bea26a2e407ffdb6382bbed386ed57981df875e82799132dc1df4d30faff99afb51c17c1feef7acd1d2e25dcbf5ea74b58dd825efdac023d4797d76102891095e5c7bfe7cf0b3acabac2c62eb6b363005b0a64ebe05afbd3d97023f215bf581ab114ab69846e971a52c8d8883da4ec9d9dbb68153898104707c7e3e5c7a4cfaa2140b9dda57db0cde2aaccfadebc9bd355d770f13d3b21f9580608272d4daea47ce89a013445d0dd0b559d6277a9c86e477f8961670a7045dce55302c354ad5d59aa6c0adca442184a087109047762a87c9e4bbf2eaeb5b93cf1c32c5a8e424b0c5232fa0b57743b663531c15a160bca95ba9af8ae4d12c54fefd2ff69af6d32800ec548246903e744ddacf2b62ad2dcd0c0ea4f9b407f30d0dda54c62b232e20d382a11cf32a30ea0e73c6642688c02eb3ff4c953b10de4fa5350d8ab4d8acebd267ecd811774f38398bac5c3767f3ccef6a2767573d964194fcd75021f73d354f8298ea9a91eba7d6f5bb6f53ef046f4a12b8ed78605e544802fcaf12d40f77b7012428d6777aecb0b4a80cd666effb788fd78a45520921770ea520651ee24d12eb250a09f79d1247cc3319dcbb512b39a63ccf8cb2c9ab62e90ee3e7a7f50c9e0d4ee06b06005b77b373de73d8b0d9c3e47007b1fbae0b22a636abd141561964792a27f68d33190f949450ec4e06179b1298d90dd3e67d328143e92e323c21de8d9163fa6f4377620b0a161b234aa2b84d6aa04a36bf4498d64128b7fe3a55dba817cbe9b01d306410a4ed12f7cc81d065115fbe1799e7a22ff24e7b66d96a65cc3dcbedadf98e551a623cf0d9a888166dc23e930cba3800330818b8a393dde3824e2f67229118fd82254625ab890ccc9e15028bcd6df9acb9f55b58feda6620c62297d525422146a5def29987898d5fd53c67770cc84de20db55de9ea0066a524a2f351993ab9b725342486ed9f1f5e566265f03e73a8fe57f628eb7ce922a181c0b31f60c8617f867cc9a61ffe2b6e8ac4d551bec492bec9c8a7f24422758e76b390739cfdea1622b3899207692bc695d4a13b25dd360ba4abc718a8ce85b526a41a74a4021afecd01dca2274f50e108e54988fb34f47bcb5fdba976989ed275f43a97ab02b74543ec4ca6d65dd137a891a4f005c6c701ddfd3ace3593bf381035040547229d1a02e87b75010d33c401b9646af008cec1710812df6e6ab5e660afec887bf2375a2faef35258506953cc5c9f6dab183ccca76c6d631e1be4191d8e556d5b6db8b364e766442083db46736bf54cb4f2762832857006830c28a1ac94a69ede53f5d43392a2353a1c07a3ea64358c4c23cc956efc29dfe6417e23bda0852edda6e40752a009258a8fbd222948c1e738373fec6c473161b2f6550b59f354bcdc0426abe030d75d22b93157db999eb57d96f587386a7fccbbe4248ce1df7ade0ab2900fa70794c5fc90667ab1b4b159550f181b4a34c540709b2811cadcc9b630ad209276ee06025547d9f4ebea7d64bfa18fea6e4380e107c29bd75f33a44dd9039abd7f007e8ea753d5eb59feb2a5793191e08164e3858b1c308e76b9f6df1b3a3f7e0619ee63f81668e04c4c48044465a2549a93cf984f7b5835d59cc1a0cd693fc6a4599c5fb19982cd83735a9339491bb241ba01d881116d83ce89c9b77b480f206042b8782f4bafbc8f8026e4ce357696fd3124d77b6fb790b0a7025a9ed7f13a8f0bb62f3b4f304889de66b7c6b2dc26389945d828241746bf8925a2e621318bd0c67e063250d61a47c17a617529f624513e2ac15d995e660acefb27e0275e1abb5cf16d5bcb328aef57cfb951b3b0f805dfe301bf2f41f83b74d41221c67eae9813dad54e9c09a2e6902e888ac36bea5b2ee05a24cad650b87c5e0a62a9b7a29de7d5985a338931bc007eda2b1f1f3f693619274d2d08fc9f646366b784205ef25e071ac4ec0d4963b032f2040fb5faddd1c354fc96e8eee486d3f3070baae630d74aa5e610b300c78a9cd767946b0dc3ef27c1f370c1a3028788a1b5d6531e9abd3f02d5b4e56f3d32f4b9b04a198038831226e2e522106c6c0892e7059fa645e0937d37e4b373fd4014ad62db94a8a6fc7ed44b2f684dd6df4bc2158f66311d9eed766bf36a8aa2a4d5daa55c59740140dd01025b0272aeee5058b56b0e39c7037364dd653d48da305b375bbcbcbd16e53cd7aed9eef03b74769d5045bb03981f057d917c417b30fd5c0c5961a2eae5d9859dcba3a763a64b4d0a8ca16f4c2b227c03036622a1ea4731dba15820f01d1da4817c7eb07b0126de799cbb2ec646fe0c15c7b3a7caa150cdc865dfaf7a93b7ae87a5fcfdc8162d76739f24a23ce8d3e4289cd69bd4c961eb939496e60939b1c8426881f802447bd875eb0241ea1e427dcf25c95c1b91c53cf1e357b6e4738e42ba2f06335c2924121ff3ffb81f9a26e70a3d4bc57e5cb4605d08995a2a4a0588d2f8901a9910bee0d216a29248f2335c206dddecebc13162850b3131a7fb1f677e97d97739147c5c4122a48cc9b6c9c8fc4cb21781f2d5d32e9e3c020b6aebdaeec494f5edefdc8aea0f4ce74bc8cd047826ef2268de922c4d403c6bf3acedf72da1b8b300f466a0423d9afd73a163dfb7fe91bdff3510acc23482c5c08a55f3d9ac61dc2d60d57f11f2ff72dc4d0e8b005cbf09afc2c0d0302d4da324962a0fbb3509bbd33f7572ff8ee47e379e6e8cfd13bf9fd46844a5f1370b1efd5bd93e18e363274451176c5e3d4c4983f11f4a1275f1b3a402b345f394fa31bb202779cafc2eb5fb8ff52be48613a6a9428a9917963c4f971c5c26162fb9fa95f16d7be391262ab9f520a77758a38f9b0184ab7ee3ab90d223bd96586681a0662819f54f912f70ef7359d3285b6e4fdc652a224d237d38a47c09361c8b3c24b54cc8e0abd17ec283ee0b68ba242de247fc0e6912c38808e33df489fdb593e59e3837914f978f3cf9482a6441ccb67d89929a5453111c3365a5ca31459e870efec48e64e212f1146", @ANYRES16], 0x9, 0x2af, &(0x7f00000001c0)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000004c0)={0x81, 0x5, 0x6a8, 0x2ea1, 0x6}) lseek(r3, 0x851, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1152c08, 0x0, 0xfe, 0x0, &(0x7f0000000000)) sysinfo(&(0x7f0000000080)) 46.717621484s ago: executing program 1 (id=710): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getuid() getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000006c0)) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)) fcntl$getownex(r0, 0x10, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r6, 0x100000000, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x1, r5, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) unshare(0x68060200) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b32356d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d17c708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08cdc339081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9d6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f74a2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bcff00000000000000fec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420ae305fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42f48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fadf9ffffff238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3b99caf6b00d84a604047497022d9c30e23ef4df5c89644f48bb536f7946b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6020048cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffee738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c65a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c3329c8a6b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d2a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d009000000c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb7847c7148b6ce431bb90e29389f22fc5b59a70efaea2bd40195af4486220d70bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24622a4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744d9b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de99258842cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b9906009af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) 44.291305792s ago: executing program 1 (id=717): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) accept$unix(r0, &(0x7f00000012c0), 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r1}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8a, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r4}, 0x20) r5 = socket(0x10, 0x3, 0x0) ppoll(&(0x7f00000004c0)=[{r2}, {r5, 0x6}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1, 0xffffffffffffffff}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x40) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'rose0\x00', 'wlan1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b743f62e8d07b5b6e30260e37fa3003dfb671d1a030867bf4f4d36d947df"}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'ip6_vti0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000001680)="8302c7ffe58930b9856aaa1416a2c0e7b3db49cc") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001600)={0x0, @local, @multicast2}, &(0x7f0000001640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x25, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x24d}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x100000, 0x48, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 43.967557889s ago: executing program 1 (id=719): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d95c7e307963117b5a705fd4a74bc49e24a9ae8c22842f85899c62ca3a6ff691f1df44c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd25, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) read(r1, &(0x7f0000000280)=""/234, 0xea) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') 42.964118726s ago: executing program 1 (id=721): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x9fd, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x20000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x2880, 0x61) r6 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r7, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}}], 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0xfffffffc}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 40.497931346s ago: executing program 1 (id=725): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f00000069c0)=[{0x0}, {&(0x7f00000000c0)=""/13, 0x40}], 0x2) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1fff, 0x0) r2 = io_uring_setup(0x3e76, &(0x7f0000000000)) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) dup2(r3, r2) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000002140)=""/244, 0xf4}], 0x1000000000000299) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r5 = syz_open_pts(r4, 0x801) sched_setscheduler(0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x6c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x4, {0x0, 0x0, 0x0, "f2"}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x6c}}, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(r7, &(0x7f00000003c0)='./file0\x00', r7, &(0x7f0000000280)='./file0/file0\x00', 0x0) 39.773446198s ago: executing program 1 (id=728): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3}]}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r4, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r2, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002b) 26.766548171s ago: executing program 0 (id=753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000ff00000000000000000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x80000001, 0x0}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') write$cgroup_pid(r3, &(0x7f00000005c0)=0xffffffffffffffff, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x17, 0x7, 0x3, 0x6, 0x8, 0xffffffffffffffff, 0xe4, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6, r7}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001700)={{0x1, 0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x24, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x56}, @alu={0x4, 0x1, 0xd, 0x7, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x0, 0x1d, &(0x7f0000001600)=""/29, 0x41100, 0xd, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000001740)=[0xffffffffffffffff, r7, r8], &(0x7f0000001780), 0x10, 0x1, @void, @value}, 0x90) r9 = syz_open_dev$vcsu(&(0x7f0000000380), 0x6, 0x4080) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0xb, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r10, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000240)={r10, &(0x7f00000000c0), 0x0}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r11, 0x10, 0x1f, 0x8001) pread64(r11, &(0x7f0000000300)=""/4096, 0x1000, 0x2fe) r12 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101000, 0x11b) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000080000000000000001d0d00005c820c000100000095010000000000009ac7238e8899ac76ebb3424ed4919ae44ef8f60aace0b71b1b32f67892eea65dd6ae0c213f10968f774130268181799d994d864ac4c76c12a5add93d6319f6ca8c6db0e5c527b3f1b3d9e6e2e54b88a747ff3260b7705f7774ff5a2dee45e4d90d18aba6e333c9ff86026f55726d95695915e472fcfab416ce56928595180f7df8aecb5cd60d1d4d4984332393f28275cedfcfbc0159fd51deabf4b7a53e464a8a9e8f00e546462b226b0092fa3e5338706c41ea6830bf6e5d48838186a6ee92c0b7363be0cf73"], &(0x7f0000000180)='GPL\x00', 0x401, 0x2a, &(0x7f00000001c0)=""/42, 0x41000, 0x50, '\x00', r1, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x8, 0x5}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r9, r10, r11, r12], 0x0, 0x10, 0x7fffffff, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r14, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r15 = dup(r14) write$FUSE_BMAP(r15, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r15, &(0x7f0000000280)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[], [], 0x6b}}) 26.575614127s ago: executing program 0 (id=754): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1008008, &(0x7f0000000540)={[{@longad}, {@uid}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x8000002}}, {@shortad}, {@gid}, {@session={'session', 0x3d, 0xad0d}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x2}}, {@dmode={'dmode', 0x3d, 0x7}}, {@volume={'volume', 0x3d, 0x1f}}]}, 0x6, 0xc46, &(0x7f0000000f40)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x4080, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0xfffffff, 0x1000f1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ftruncate(r6, 0x2000009) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) write$binfmt_script(r6, &(0x7f00000008c0)={'#! ', './bus', [{0x20, 'netde\v\x7fM\x02\xb1\xda`\xd9\x80%\x15\x19\xf8@\x02\x00\x00\x00\x00\x00\x00\x00?)P\x9e\x92\xebP\xbf'}, {0x20, 'pci\x00'}, {0x20, '\xed:\xc9]X4\x12\xc6mM\xe2\xce\x1d\xfb\xf2\xb0:6D\xda\xa2\xc8G\xa0\xae\x1f\x9e\xeb\xe5\xc2\xf0r\xf6\x8f\xe8hZ6\xbe\x93\xfd U*\xbb\xa7h\xd0\xb0P\xeb\"\xf1\xef\xd9\xf8\x87L\x1e\xeb\x1c|O,\x86\x7fU\x9b[K)\xbb\x00o\xe3\x11[\xd2\x1f\x90\v^9`\x89L\r\x9f\n\xfa'}]}, 0x8d) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000001}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYRES16=r8], 0x110}}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x124, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 25.2598497s ago: executing program 0 (id=757): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0xfffffeff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000040067000400cc0004000801"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendfile(r5, r6, 0x0, 0x8000002b) 24.873275243s ago: executing program 0 (id=760): r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6c9, &(0x7f00000037c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1/file4/file7\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x4) open$dir(0x0, 0x161683, 0x100) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e000102000000000000000000000000000000000000ffff"], 0x28}}, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e"], 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010000104000000000000000000480000", @ANYRES32=r6, @ANYRES32], 0x54}}, 0x0) 23.511498529s ago: executing program 0 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x1, 0x0, 0xfffffffffffffff9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setns(0xffffffffffffffff, 0x4000000) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x60, 0x13, 0x4, 0x70bd2d, 0x0, {0x3, 0x87, 0x1, 0x4, {0x4e22, 0x4e20, [0x8, 0x6, 0x4, 0x2], [0x5, 0x7, 0x1, 0x1000], 0x0, [0x5, 0x4]}, 0x2, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "6f17d64dd968298569ca29d86e26"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x40004) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "d60e1e6d1995713e36a45f0895edbac3"}, @md5sig={0x13, 0x12, "3b94bab91e007c67e3bf8194e9d8e3db"}, @mptcp=@ack={0x1e, 0x4}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800"], 0x98}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0xc0}}, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000240)={0x20, 0x0, 0x5, {0x5, 0x2, "a8dad2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20.061273014s ago: executing program 0 (id=769): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000005c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@discard}, {@orlov}, {@noauto_da_alloc}, {@journal_async_commit}, {@jqfmt_vfsv1}, {@grpid}, {}, {@data_err_abort}]}, 0x0, 0x238, &(0x7f0000000600)="$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") landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000080)='vlan0\x00', 0x40, 0x1f, 0x8}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}, 0xfffffffa}, 0x1c) keyctl$clear(0x1c, 0xfffffffffffffff9) listen(r7, 0x0) unshare(0x2a020400) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 597.476579ms ago: executing program 4 (id=792): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x46) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f04080019041422c181cdaf2f7e81ee6ac15afd2ad635d949794e0043f8e9e21c901d81bf88682df4f341715730e91eba846f9d95049fe37b3ad50e5b31d9bb39238f595c4d084786d970b912c72d43bfbe3918f1d94c722bee81b988bbd8da88bd14ca12becaa9e7bf1796a584502fdd1f59b16c15234019e70ab751886b8448bf1d2d9afeb93f73a102d9e409f979"], 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='netlink_extack\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4004811) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket(0x23, 0x80000, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e081cc0a605cdbcb9a662cc10a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000007c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r8, &(0x7f0000002840)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000001000000ff010000000000000000000000000001e000000200000000000010000000000000000000000000000800000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000005000000000000000000000000000014403c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x104}}, 0x0) 419.074585ms ago: executing program 4 (id=793): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d95c7e307963117b5a705fd4a74bc49e24a9ae8c22842f85899c62ca3a6ff691f1df44c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd25, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000505050505050"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r8, 0x5412, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) read(r1, &(0x7f0000000280)=""/234, 0xea) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') 400.074386ms ago: executing program 4 (id=794): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf4240, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, &(0x7f0000000340)) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000340), 0x20001341) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 197.230643ms ago: executing program 4 (id=795): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00', @ANYRES16, @ANYBLOB="050000000000000000002e00000008000300", @ANYBLOB="0a0034000202020202020000040067000400cc000400080106006600"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r4, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendfile(r2, r3, 0x0, 0x8000002b) 113.627041ms ago: executing program 4 (id=796): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x46) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f04080019041422c181cdaf2f7e81ee6ac15afd2ad635d949794e0043f8e9e21c901d81bf88682df4f341715730e91eba846f9d95049fe37b3ad50e5b31d9bb39238f595c4d084786d970b912c72d43bfbe3918f1d94c722bee81b988bbd8da88bd14ca12becaa9e7bf1796a584502fdd1f59b16c15234019e70ab751886b8448bf1d2d9afeb93f73a102d9e409f979"], 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='netlink_extack\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4004811) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e081cc0a605cdbcb9a662cc10a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r8, &(0x7f0000002840)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000001000000ff010000000000000000000000000001e000000200000000000010000000000000000000000000000800000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="00000005000000000000000000000000000014403c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x104}}, 0x0) 0s ago: executing program 4 (id=797): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000b7030000000000008500000071000000950000000000000065bf7f0e062ec0bc5d904547a930de79b2ae29ab"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rt_sigtimedwait(&(0x7f0000000040)={[0x3f0a85d]}, &(0x7f00000002c0), &(0x7f0000000200)={0x0, 0x989680}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000001000000", 0x6033) r2 = dup2(r0, r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x6f06, &(0x7f00000005c0), &(0x7f0000000580), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x11, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000007c0)="010000000000000000fe7f000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000002680)=""/4110, 0x26, 0x100e, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x86, &(0x7f0000002600)}, 0x10) rt_sigsuspend(&(0x7f0000000380)={[0x6]}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r6}, &(0x7f0000000580), &(0x7f0000001ec0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1, 0x0, 0x0, 0xd}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r9, &(0x7f0000000000)='./file0\x00', 0x0) move_mount(r9, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = dup(r10) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): 3e syscall=202 compat=0 ip=0x7f36b377dff9 code=0x0 [ 326.794396][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.815194][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.878984][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.886363][ T3646] Bluetooth: hci0: command tx timeout [ 326.948009][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 326.983932][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.993816][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.002753][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.009942][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.019177][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.074832][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.084611][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.096089][ T6069] device bridge_slave_0 entered promiscuous mode [ 327.167104][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.176715][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.193108][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.200366][ T4729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.210621][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.233053][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.242258][ T6069] device bridge_slave_1 entered promiscuous mode [ 327.330432][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.381489][ T6069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.474414][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.483916][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.506059][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.530425][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.701466][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.736058][ T6069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.334584][ T3646] Bluetooth: hci1: command tx timeout [ 328.964257][ T3646] Bluetooth: hci0: command tx timeout [ 328.986266][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.994546][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.003416][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.055176][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.098840][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.241369][ T6069] team0: Port device team_slave_0 added [ 329.281373][ T5849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.337330][ T6158] netlink: 'syz.4.395': attribute type 13 has an invalid length. [ 329.363411][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.371459][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.403997][ T6079] device bridge_slave_0 entered promiscuous mode [ 329.445813][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.453116][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.465671][ T6079] device bridge_slave_1 entered promiscuous mode [ 329.484846][ T6069] team0: Port device team_slave_1 added [ 329.860340][ T6177] netlink: 44 bytes leftover after parsing attributes in process `syz.0.396'. [ 331.202663][ T3646] Bluetooth: hci1: command tx timeout [ 331.208348][ T3646] Bluetooth: hci0: command tx timeout [ 332.113441][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.201034][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.257323][ T3845] device hsr_slave_0 left promiscuous mode [ 332.349077][ T3845] device hsr_slave_1 left promiscuous mode [ 332.370008][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.426586][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.475152][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.490247][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.542018][ T3845] device bridge_slave_1 left promiscuous mode [ 332.572349][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.603929][ T3845] device bridge_slave_0 left promiscuous mode [ 332.628092][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.713289][ T3845] device veth1_macvtap left promiscuous mode [ 332.729403][ T3845] device veth0_macvtap left promiscuous mode [ 332.759223][ T3845] device veth1_vlan left promiscuous mode [ 332.776196][ T3845] device veth0_vlan left promiscuous mode [ 333.285192][ T3646] Bluetooth: hci1: command tx timeout [ 333.640050][ T3845] team0 (unregistering): Port device team_slave_1 removed [ 333.703455][ T3845] team0 (unregistering): Port device team_slave_0 removed [ 333.752443][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.805679][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.350397][ T3845] bond0 (unregistering): Released all slaves [ 334.431659][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.438890][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.466510][ T6069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.507260][ T6197] netlink: 'syz.4.399': attribute type 13 has an invalid length. [ 334.541166][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.553538][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.592855][ T6069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.622603][ T6079] team0: Port device team_slave_0 added [ 334.637632][ T6079] team0: Port device team_slave_1 added [ 334.703426][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.727039][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.748724][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.802627][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.844181][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.912189][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.095643][ T6069] device hsr_slave_0 entered promiscuous mode [ 335.102801][ T6069] device hsr_slave_1 entered promiscuous mode [ 335.112352][ T6069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.141918][ T6069] Cannot create hsr debugfs directory [ 335.179826][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.366317][ T6228] loop4: detected capacity change from 0 to 512 [ 335.475903][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.599466][ T6228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.402: inode #1: comm syz.4.402: iget: illegal inode # [ 335.623672][ T6228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.402: error while reading EA inode 1 err=-117 [ 335.640131][ T6228] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 335.653711][ T6228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.402: inode #1: comm syz.4.402: iget: illegal inode # [ 335.676971][ T6228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.402: error while reading EA inode 1 err=-117 [ 335.695236][ T6228] EXT4-fs (loop4): 1 orphan inode deleted [ 335.701181][ T6228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 335.994509][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.300643][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.330435][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.344673][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.353437][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.393584][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.403230][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.512833][ T5849] device veth0_vlan entered promiscuous mode [ 336.530649][ T5230] EXT4-fs (loop4): unmounting filesystem. [ 336.622881][ T6079] device hsr_slave_0 entered promiscuous mode [ 336.671853][ T6079] device hsr_slave_1 entered promiscuous mode [ 336.702979][ T6079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.712995][ T6079] Cannot create hsr debugfs directory [ 336.743914][ T5849] device veth1_vlan entered promiscuous mode [ 336.949103][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.969160][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.049684][ T5849] device veth0_macvtap entered promiscuous mode [ 337.092746][ T3845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.117142][ T5849] device veth1_macvtap entered promiscuous mode [ 337.156507][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.173782][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.189723][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.204235][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.214647][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.225152][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.237386][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.280530][ T3845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.301671][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.313517][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.332842][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.349826][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.374554][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.392389][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.403065][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.414188][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.424040][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.435292][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.453965][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.505542][ T3845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.520230][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.530260][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.543133][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.552803][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.574480][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.583253][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.625973][ T3845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.779456][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.795736][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.955553][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.969974][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.980145][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.005953][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.459105][ T6284] loop4: detected capacity change from 0 to 16 [ 340.049077][ T6284] erofs: (device loop4): mounted with root inode @ nid 36. [ 340.069388][ T6280] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 340.080032][ T6280] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 340.091713][ T6280] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 342.018995][ T6305] xt_ipvs: protocol family 7 not supported [ 342.673095][ T6079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.683638][ T6079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.702604][ T6079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.866008][ T6320] loop2: detected capacity change from 0 to 128 [ 342.879815][ T6319] loop4: detected capacity change from 0 to 1024 [ 342.887796][ T6319] hfsplus: unable to parse mount options [ 342.898305][ T6317] netlink: 'syz.0.423': attribute type 13 has an invalid length. [ 343.131073][ T6320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 343.149405][ T6079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.164757][ T6320] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038 (0x7fffffff) [ 347.786477][ T3845] device hsr_slave_0 left promiscuous mode [ 347.808168][ T3845] device hsr_slave_1 left promiscuous mode [ 347.839288][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.869241][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.906532][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.954358][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.979260][ T3845] device bridge_slave_1 left promiscuous mode [ 348.000362][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.179666][ T5849] EXT4-fs (loop2): unmounting filesystem. [ 348.225829][ T3845] device bridge_slave_0 left promiscuous mode [ 348.248646][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.480572][ T3845] device veth1_macvtap left promiscuous mode [ 348.486773][ T3845] device veth0_macvtap left promiscuous mode [ 348.492944][ T3845] device veth1_vlan left promiscuous mode [ 348.498908][ T3845] device veth0_vlan left promiscuous mode [ 348.801999][ T6346] loop2: detected capacity change from 0 to 2048 [ 348.872315][ T6346] loop2: p1 < > p4 [ 349.025155][ T6346] loop2: p4 size 8388608 extends beyond EOD, truncated [ 349.311343][ T5198] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 349.330660][ T6347] loop2: detected capacity change from 0 to 256 [ 349.369286][ T5193] udevd[5193]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 349.383910][ T5198] udevd[5198]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 349.507985][ T5193] udevd[5193]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 349.521394][ T5198] udevd[5198]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 350.020915][ T3845] team0 (unregistering): Port device team_slave_1 removed [ 350.069221][ T3845] team0 (unregistering): Port device team_slave_0 removed [ 350.118336][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.169702][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.685314][ T3845] bond0 (unregistering): Released all slaves [ 350.811514][ T6323] device syzkaller0 entered promiscuous mode [ 350.968192][ T3643] Bluetooth: hci2: command tx timeout [ 350.969729][ T3656] Bluetooth: hci2: hardware error 0x01 [ 353.044535][ T3656] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 353.342702][ T3646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.367056][ T3646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.390455][ T3646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.400021][ T3646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.408593][ T3646] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 353.417288][ T3646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.578097][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 353.678521][ T6069] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.829252][ T6069] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.870848][ T6069] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.908246][ T6069] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.995055][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.358367][ T6362] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 355.155866][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.173786][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.226564][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.280811][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 355.389646][ T6374] loop2: detected capacity change from 0 to 128 [ 355.404792][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.423927][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.437729][ T6374] EXT4-fs: Ignoring removed orlov option [ 355.444402][ T3646] Bluetooth: hci4: command tx timeout [ 355.475060][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.482240][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.504943][ T6374] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 355.577060][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.637107][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.678475][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.685676][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.744656][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.755623][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.775899][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.870175][ T6353] chnl_net:caif_netlink_parms(): no params data found [ 355.921454][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.954322][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.145021][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.161144][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.199233][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.547946][ T3646] Bluetooth: hci4: command tx timeout [ 357.549301][ T26] audit: type=1326 audit(2000000102.500:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 357.580446][ T26] audit: type=1326 audit(2000000102.520:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 357.603316][ T26] audit: type=1326 audit(2000000102.530:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 357.634599][ T26] audit: type=1326 audit(2000000102.530:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 357.658740][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.675911][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.701760][ T26] audit: type=1326 audit(2000000102.550:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 357.850438][ T26] audit: type=1326 audit(2000000102.620:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5af697c990 code=0x7ffc0000 [ 357.903768][ T26] audit: type=1326 audit(2000000102.630:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5af697c990 code=0x7ffc0000 [ 357.958121][ T26] audit: type=1326 audit(2000000102.630:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 358.009544][ T26] audit: type=1326 audit(2000000102.660:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 358.063691][ T26] audit: type=1326 audit(2000000102.750:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 358.120019][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.135129][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.184654][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.257337][ T6069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.375367][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.391406][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.531684][ T3845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.558226][ T6069] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.619004][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.628661][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.665243][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.672409][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.779004][ T3845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.850105][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.861265][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.886103][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.904990][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.912138][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.927785][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.938428][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.948176][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.966013][ T6353] device bridge_slave_0 entered promiscuous mode [ 359.031646][ T3845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.077821][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.090754][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.100004][ T6353] device bridge_slave_1 entered promiscuous mode [ 359.119493][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.130401][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.153818][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.172677][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.191518][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.201842][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.223675][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.232907][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.299448][ T3845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.374688][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.381952][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.397552][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.406987][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.416914][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.442405][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.473446][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.511855][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.556994][ T6414] loop2: detected capacity change from 0 to 1024 [ 359.564542][ T6414] hfsplus: unable to parse mount options [ 359.630707][ T3646] Bluetooth: hci4: command tx timeout [ 360.606113][ T6421] loop2: detected capacity change from 0 to 256 [ 360.700147][ T6421] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 361.402890][ T6353] team0: Port device team_slave_0 added [ 361.503444][ T6426] netlink: 'syz.0.428': attribute type 3 has an invalid length. [ 361.511344][ T6426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.428'. [ 361.571626][ T6426] dccp_xmit_packet: Payload too large (65475) for featneg. [ 361.794721][ T3646] Bluetooth: hci4: command tx timeout [ 361.817586][ T6353] team0: Port device team_slave_1 added [ 362.167231][ T6422] dccp_close: ABORT with 65475 bytes unread [ 362.174211][ T6422] dccp_close: ABORT with 11 bytes unread [ 362.333541][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.340906][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.368111][ T6353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.400608][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.423559][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.541223][ T6353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.619304][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 362.629096][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 362.662191][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 362.718321][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 362.743152][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 362.756849][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.793427][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 362.819454][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 362.849530][ T6353] device hsr_slave_0 entered promiscuous mode [ 362.870781][ T6353] device hsr_slave_1 entered promiscuous mode [ 362.878591][ T6353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.886449][ T6353] Cannot create hsr debugfs directory [ 362.955838][ T6079] device veth0_vlan entered promiscuous mode [ 362.963800][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.976202][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.032789][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.060747][ T6079] device veth1_vlan entered promiscuous mode [ 363.136434][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.150754][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.182199][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.193039][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.366127][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.379590][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.415384][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.434753][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.447016][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.455593][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.465592][ T6069] device veth0_vlan entered promiscuous mode [ 363.476782][ T6079] device veth0_macvtap entered promiscuous mode [ 363.568041][ T6079] device veth1_macvtap entered promiscuous mode [ 363.620154][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.633230][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.650926][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.662168][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.679068][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.690629][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.710918][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.724342][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.732777][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.764021][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.780500][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.795594][ T6069] device veth1_vlan entered promiscuous mode [ 363.852075][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.871061][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.881703][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.897862][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.910075][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.933775][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.947881][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.015306][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.029117][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.063969][ T6079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.079690][ T6079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.088636][ T6079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.098480][ T6079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.173987][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.182998][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.261536][ T6069] device veth0_macvtap entered promiscuous mode [ 364.341911][ T6069] device veth1_macvtap entered promiscuous mode [ 364.455244][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.466193][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.479962][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.491158][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.501221][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.512800][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.522845][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.533501][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.545805][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.588196][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.603837][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.613163][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.625513][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.635910][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.649012][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.659007][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.669542][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.679430][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.690000][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.701927][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.710814][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.719675][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 364.728480][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.738852][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.748118][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 364.756593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.765997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.837565][ T6069] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.848189][ T6069] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.857860][ T6069] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.866885][ T6069] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.928642][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.940696][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.955003][ T3845] device hsr_slave_0 left promiscuous mode [ 364.962839][ T3845] device hsr_slave_1 left promiscuous mode [ 364.970236][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.977930][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.986386][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.993835][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.003180][ T3845] device bridge_slave_1 left promiscuous mode [ 365.009855][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.018507][ T3845] device bridge_slave_0 left promiscuous mode [ 365.025267][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.069290][ T3845] device veth1_macvtap left promiscuous mode [ 365.075648][ T3845] device veth0_macvtap left promiscuous mode [ 365.081770][ T3845] device veth1_vlan left promiscuous mode [ 365.092414][ T3845] device veth0_vlan left promiscuous mode [ 365.625904][ T3845] team0 (unregistering): Port device team_slave_1 removed [ 365.679445][ T3845] team0 (unregistering): Port device team_slave_0 removed [ 365.727495][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.777474][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.350170][ T3845] bond0 (unregistering): Released all slaves [ 366.454811][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 366.596757][ T6353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.510142][ T6353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.573859][ T6353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.635855][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.637291][ T6353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.690191][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.733889][ T6467] loop2: detected capacity change from 0 to 128 [ 367.752416][ T6466] loop1: detected capacity change from 0 to 764 [ 367.775150][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.980933][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.017691][ T6466] rock: directory entry would overflow storage [ 368.029358][ T6466] rock: sig=0x4654, size=5, remaining=4 [ 368.057654][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.112279][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.299987][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.458129][ T6353] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.476378][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.529963][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.586520][ T6466] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.393'. [ 368.607570][ T6478] netlink: 'syz.3.378': attribute type 13 has an invalid length. [ 368.731277][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.767163][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.819019][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.826235][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.892544][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.929113][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.956152][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.985659][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.992846][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.031838][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.068646][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.142953][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.187951][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.229047][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.249161][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.270228][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.308961][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.356305][ T6353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.393362][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.423813][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.445586][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.495101][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.769244][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 370.706922][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.719383][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.749405][ T6353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.219292][ T6508] loop3: detected capacity change from 0 to 2048 [ 371.885263][ T6508] loop3: p1 < > p4 [ 371.890361][ T6508] loop3: p4 size 8388608 extends beyond EOD, truncated [ 371.951381][ T6434] udevd[6434]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 371.968255][ T6429] udevd[6429]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 372.288632][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.304835][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.342971][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.355379][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.368756][ T6353] device veth0_vlan entered promiscuous mode [ 372.376584][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.393801][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.409188][ T6353] device veth1_vlan entered promiscuous mode [ 372.442616][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 372.468801][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 372.490318][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.517483][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.546451][ T6353] device veth0_macvtap entered promiscuous mode [ 372.624799][ T6353] device veth1_macvtap entered promiscuous mode [ 372.663018][ T6514] loop3: detected capacity change from 0 to 128 [ 372.723059][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.735486][ T6514] EXT4-fs: Ignoring removed orlov option [ 372.752317][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.760155][ T6514] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 372.763197][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.784665][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.796102][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.870636][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.882291][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.904540][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.995248][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.201412][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 373.237149][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 373.260960][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 373.285541][ T3646] Bluetooth: hci0: command tx timeout [ 373.285972][ T3643] Bluetooth: hci0: hardware error 0x01 [ 373.420015][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.455871][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 373.499606][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.522503][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.603527][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.615148][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 373.630761][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.654255][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 373.678357][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.688947][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.708045][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.717371][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.738540][ T7] usb 1-1: config 0 descriptor?? [ 373.764593][ T6516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 373.780518][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.812004][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.858597][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.923953][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.965996][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.002012][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.181018][ T1191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.252978][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 374.303691][ T7] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 374.437062][ T7] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 374.551614][ T6353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.576494][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.592586][ T6353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.605399][ T3646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.618045][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.626257][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.648121][ T3646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.659177][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.667264][ T3646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.707401][ T6353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.798683][ T6353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.918895][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.012115][ T1191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.034650][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.069709][ T6532] loop1: detected capacity change from 0 to 256 [ 375.071176][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.268927][ T6528] Bluetooth: MGMT ver 1.22 [ 375.306577][ T1191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.374417][ T3643] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 375.404925][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 375.404944][ T26] audit: type=1326 audit(2000000121.670:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.1.441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25c377dff9 code=0x0 [ 375.615014][ T1191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.683122][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.739849][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.824921][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.849071][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 375.884299][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.923005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 376.438074][ T6538] loop4: detected capacity change from 0 to 32768 [ 376.474613][ T6543] netlink: 'syz.3.445': attribute type 13 has an invalid length. [ 376.482833][ T6538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.419 (6538) [ 376.565299][ T6538] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 376.575885][ T6538] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 376.585130][ T6538] BTRFS info (device loop4): using free space tree [ 376.603463][ T6548] loop1: detected capacity change from 0 to 128 [ 376.685621][ T3686] usb 1-1: USB disconnect, device number 3 [ 376.724682][ T3643] Bluetooth: hci2: command tx timeout [ 377.218029][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 377.393938][ T6538] BTRFS info (device loop4): enabling ssd optimizations [ 378.405892][ T6585] dlm: no local IP address has been set [ 378.411584][ T6585] dlm: cannot start dlm midcomms -107 [ 378.815573][ T3643] Bluetooth: hci2: command tx timeout [ 379.189932][ T6353] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.226356][ T6592] netlink: 'syz.3.448': attribute type 13 has an invalid length. [ 379.367231][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.373773][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.421417][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.431117][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.460810][ T6527] device bridge_slave_0 entered promiscuous mode [ 379.541081][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.633514][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.712924][ T6527] device bridge_slave_1 entered promiscuous mode [ 379.862916][ T6604] loop1: detected capacity change from 0 to 2048 [ 379.990699][ T6604] loop1: p1 < > p4 [ 380.016040][ T6604] loop1: p4 size 8388608 extends beyond EOD, truncated [ 380.511289][ T6434] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 380.536937][ T6606] loop1: detected capacity change from 0 to 256 [ 380.561933][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 380.593006][ T6434] udevd[6434]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 380.670405][ T6607] "syz.3.452" (6607) uses obsolete ecb(arc4) skcipher [ 380.833949][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 380.868898][ T6434] udevd[6434]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 380.884531][ T3643] Bluetooth: hci2: command tx timeout [ 381.050587][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.275670][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.468397][ T6624] loop4: detected capacity change from 0 to 2048 [ 382.248082][ T3643] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 382.254815][ T3656] Bluetooth: hci1: hardware error 0x01 [ 382.260566][ T3643] Bluetooth: hci1: Injecting HCI hardware error event [ 382.270175][ T3643] Bluetooth: hci1: command tx timeout [ 382.299607][ T6624] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 382.309310][ T6624] NILFS (loop4): mounting unchecked fs [ 382.340967][ T6624] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount [ 382.354507][ T152] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 382.435006][ T6434] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 382.664417][ T152] usb 2-1: Using ep0 maxpacket: 32 [ 382.695981][ T6527] team0: Port device team_slave_0 added [ 382.802180][ T6527] team0: Port device team_slave_1 added [ 382.812385][ T6632] loop4: detected capacity change from 0 to 128 [ 382.826238][ T152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.860540][ T152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.872115][ T6632] EXT4-fs: Ignoring removed orlov option [ 382.886182][ T152] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.911072][ T152] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 382.922017][ T6632] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 382.952914][ T6635] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 382.962056][ T152] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 382.972155][ T3643] Bluetooth: hci2: command tx timeout [ 382.982831][ T152] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 383.136516][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.144010][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.174636][ T152] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.193414][ T152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.225706][ T152] usb 2-1: Product: syz [ 383.235023][ T152] usb 2-1: Manufacturer: syz [ 383.257096][ T152] usb 2-1: SerialNumber: syz [ 383.284966][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.401241][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.412116][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.573082][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.954606][ T152] cdc_ncm 2-1:1.0: bind() failure [ 383.982814][ T152] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 384.031844][ T152] cdc_ncm 2-1:1.1: bind() failure [ 384.076712][ T152] usb 2-1: USB disconnect, device number 8 [ 384.414490][ T3656] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 384.552640][ T6527] device hsr_slave_0 entered promiscuous mode [ 384.562648][ T6652] loop3: detected capacity change from 0 to 1024 [ 384.594350][ T6527] device hsr_slave_1 entered promiscuous mode [ 384.616340][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.623966][ T6527] Cannot create hsr debugfs directory [ 385.015683][ T6663] netlink: 'syz.0.457': attribute type 13 has an invalid length. [ 385.045311][ T6664] netlink: 'syz.4.459': attribute type 13 has an invalid length. [ 385.072562][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 385.146106][ T6676] netlink: 52 bytes leftover after parsing attributes in process `syz.3.458'. [ 385.375902][ T1191] device hsr_slave_0 left promiscuous mode [ 385.397961][ T1191] device hsr_slave_1 left promiscuous mode [ 385.407601][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.420589][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.440175][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.458718][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.473138][ T1191] device bridge_slave_1 left promiscuous mode [ 385.498410][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.559397][ T1191] device bridge_slave_0 left promiscuous mode [ 385.588188][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.719696][ T1191] device veth1_macvtap left promiscuous mode [ 385.736438][ T1191] device veth0_macvtap left promiscuous mode [ 385.742700][ T1191] device veth1_vlan left promiscuous mode [ 385.753699][ T1191] device veth0_vlan left promiscuous mode [ 386.400444][ T1191] team0 (unregistering): Port device team_slave_1 removed [ 386.455895][ T1191] team0 (unregistering): Port device team_slave_0 removed [ 386.506253][ T1191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.560313][ T1191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.082175][ T1191] bond0 (unregistering): Released all slaves [ 387.172048][ T6678] netlink: 'syz.1.461': attribute type 13 has an invalid length. [ 387.702058][ T6695] loop1: detected capacity change from 0 to 32768 [ 387.823669][ T6700] loop3: detected capacity change from 0 to 2048 [ 387.869772][ T6695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.464 (6695) [ 387.894788][ T6700] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 387.904601][ T6700] NILFS (loop3): mounting unchecked fs [ 387.928630][ T6700] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 388.154036][ T6695] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.164582][ T6695] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 388.173328][ T6695] BTRFS info (device loop1): using free space tree [ 389.691517][ T6695] BTRFS info (device loop1): enabling ssd optimizations [ 390.813633][ T6738] dlm: no local IP address has been set [ 390.819503][ T6738] dlm: cannot start dlm midcomms -107 [ 391.459718][ T6079] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 391.487785][ T6743] loop3: detected capacity change from 0 to 1024 [ 391.495248][ T6743] hfsplus: unable to parse mount options [ 391.937208][ T6544] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.145079][ T6755] loop3: detected capacity change from 0 to 256 [ 393.177529][ T6755] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 393.692547][ T6772] loop1: detected capacity change from 0 to 1024 [ 393.864631][ T6776] netlink: 'syz.3.474': attribute type 13 has an invalid length. [ 394.011913][ T6778] netlink: 'syz.4.475': attribute type 13 has an invalid length. [ 394.107558][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 394.462622][ T6784] netlink: 52 bytes leftover after parsing attributes in process `syz.1.472'. [ 394.853617][ T6527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.928323][ T6797] loop1: detected capacity change from 0 to 128 [ 394.939271][ T6527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.968758][ T6797] EXT4-fs: Ignoring removed orlov option [ 395.000038][ T6527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.021356][ T6797] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 395.251436][ T6799] loop3: detected capacity change from 0 to 2048 [ 395.272911][ T6799] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 395.282809][ T6799] NILFS (loop3): mounting unchecked fs [ 395.306070][ T6799] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 395.937996][ T6527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.329320][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.382167][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 396.443766][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.457996][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.507936][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.542314][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.556471][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.604994][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.612153][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.692860][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.782346][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.843900][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.890676][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.897953][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.968397][ T6818] loop4: detected capacity change from 0 to 1024 [ 397.053225][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.105658][ T6818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 397.134359][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.188691][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.202576][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.958292][ T6828] dlm: no local IP address has been set [ 397.963983][ T6828] dlm: cannot start dlm midcomms -107 [ 398.177807][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.244325][ T6822] netlink: 'syz.3.484': attribute type 13 has an invalid length. [ 398.483091][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.550555][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.576507][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.590060][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.601667][ T6353] EXT4-fs (loop4): unmounting filesystem. [ 398.685118][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.708868][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.725598][ T6839] netlink: 'syz.3.486': attribute type 13 has an invalid length. [ 398.891955][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.908227][ T3656] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 398.917213][ T3656] Bluetooth: hci4: Injecting HCI hardware error event [ 398.927899][ T3643] Bluetooth: hci4: hardware error 0x00 [ 399.045421][ T6844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.141404][ T6845] loop4: detected capacity change from 0 to 1024 [ 400.148968][ T6845] hfsplus: unable to parse mount options [ 400.387923][ T6434] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 400.612354][ T6854] netlink: 'syz.3.488': attribute type 13 has an invalid length. [ 400.663586][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 400.802354][ T6855] netlink: 52 bytes leftover after parsing attributes in process `syz.0.487'. [ 400.964542][ T3643] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 401.182681][ T6846] loop4: detected capacity change from 0 to 256 [ 401.267126][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.967202][ T6846] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 402.985809][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.071071][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.222271][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 403.241963][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 403.303401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.326216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.370223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.707028][ T6883] loop3: detected capacity change from 0 to 2048 [ 404.440717][ T6883] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 404.443768][ T6434] udevd[6434]: incorrect nilfs2 checksum on /dev/loop3 [ 404.450411][ T6883] NILFS (loop3): mounting unchecked fs [ 404.454730][ T6883] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 404.466230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 404.549136][ T6527] device veth0_vlan entered promiscuous mode [ 404.571602][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 404.679619][ T6873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.492'. [ 404.727813][ T6873] device wlan1 entered promiscuous mode [ 404.748249][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 404.914471][ T6896] netlink: 'syz.3.496': attribute type 11 has an invalid length. [ 404.922256][ T6896] netlink: 'syz.3.496': attribute type 11 has an invalid length. [ 404.930238][ T6896] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.496'. [ 409.440784][ T6527] device veth1_vlan entered promiscuous mode [ 409.567784][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 409.578960][ T6902] loop4: detected capacity change from 0 to 1024 [ 409.717299][ T6902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.742017][ T6527] device veth0_macvtap entered promiscuous mode [ 409.771270][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.781382][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.801274][ T6527] device veth1_macvtap entered promiscuous mode [ 409.815963][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.191455][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.203293][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.213475][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.264328][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.560790][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.571479][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.581379][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.591988][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.604011][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.790904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 412.812504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.852997][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.864856][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.884243][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.914276][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.941943][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.962020][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.981710][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.992641][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.015025][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.022741][ T6914] netlink: 'syz.1.499': attribute type 13 has an invalid length. [ 413.064436][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.077010][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.102495][ T6527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.122945][ T6527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.271534][ T6527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.298940][ T6527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.324626][ T6353] EXT4-fs (loop4): unmounting filesystem. [ 413.331955][ T6920] netlink: 'syz.3.500': attribute type 13 has an invalid length. [ 413.671051][ T6941] loop4: detected capacity change from 0 to 128 [ 413.754563][ T6941] EXT4-fs: Ignoring removed orlov option [ 413.764988][ T3845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.773326][ T3845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.807745][ T6941] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 413.883956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.127219][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.305390][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.168257][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 415.276761][ T26] audit: type=1326 audit(2000000161.540:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 415.349200][ T26] audit: type=1326 audit(2000000161.540:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 415.673883][ T6961] loop2: detected capacity change from 0 to 2048 [ 415.879010][ T6961] loop2: p1 < > p4 [ 415.888870][ T6961] loop2: p4 size 8388608 extends beyond EOD, truncated [ 416.067391][ T3094] loop2: p1 < > p4 [ 416.136841][ T6966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.243407][ T3094] loop2: p4 size 8388608 extends beyond EOD, truncated [ 416.277795][ T26] audit: type=1326 audit(2000000161.550:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 416.365621][ T26] audit: type=1326 audit(2000000161.550:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 416.449901][ T26] audit: type=1326 audit(2000000161.550:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 416.467782][ T6434] udevd[6434]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 416.550585][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 416.576449][ T6967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.604646][ T26] audit: type=1326 audit(2000000161.550:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 416.609272][ T6544] udevd[6544]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 416.649031][ T6434] udevd[6434]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 416.677638][ T6972] loop2: detected capacity change from 0 to 8 [ 416.732939][ T26] audit: type=1326 audit(2000000161.550:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 416.785874][ T6972] SQUASHFS error: lzo decompression failed, data probably corrupt [ 416.799252][ T6972] SQUASHFS error: Failed to read block 0x91: -5 [ 416.808734][ T26] audit: type=1326 audit(2000000161.550:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 416.834981][ T6972] SQUASHFS error: Unable to read metadata cache entry [8f] [ 416.842588][ T6972] SQUASHFS error: Unable to read inode 0x11f [ 416.889027][ T26] audit: type=1326 audit(2000000161.550:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 416.962586][ T26] audit: type=1326 audit(2000000161.550:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x7ffc0000 [ 418.498589][ T6991] netlink: 'syz.3.511': attribute type 13 has an invalid length. [ 418.763023][ T7004] loop2: detected capacity change from 0 to 512 [ 418.831901][ T7010] loop3: detected capacity change from 0 to 128 [ 418.960017][ T7014] loop4: detected capacity change from 0 to 128 [ 418.970769][ T7010] EXT4-fs: Ignoring removed orlov option [ 418.995131][ T7010] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 419.012691][ T7014] EXT4-fs (loop4): Test dummy encryption mode enabled [ 419.047814][ T6434] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 420.393006][ T7014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 420.414933][ T7014] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038 (0x7fffffff) [ 421.333163][ T7030] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 421.344650][ T7030] overlayfs: upper fs does not support tmpfile. [ 421.354346][ T7030] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 421.689156][ T7046] loop2: detected capacity change from 0 to 1024 [ 422.810199][ T6353] EXT4-fs (loop4): unmounting filesystem. [ 423.790483][ T7068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.523'. [ 423.810687][ T7068] tmpfs: Unknown parameter 'usrquota' [ 424.285693][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 424.296238][ T7073] netlink: 'syz.4.525': attribute type 13 has an invalid length. [ 424.932719][ T7088] netlink: 'syz.0.539': attribute type 13 has an invalid length. [ 424.945735][ T7090] loop4: detected capacity change from 0 to 512 [ 424.997846][ T7090] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 425.073538][ T7090] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.530: invalid indirect mapped block 512 (level 0) [ 425.131099][ T7090] EXT4-fs (loop4): Remounting filesystem read-only [ 425.144925][ T7090] EXT4-fs (loop4): 1 orphan inode deleted [ 425.238864][ T7090] EXT4-fs (loop4): 1 truncate cleaned up [ 425.294492][ T120] block nbd3: Attempted send on invalid socket [ 425.321615][ T120] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.354185][ T120] block nbd3: Attempted send on invalid socket [ 425.366465][ T120] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.379540][ T7095] Mount JFS Failure: -5 [ 425.384606][ T7095] jfs_mount failed w/return code = -5 [ 425.457463][ T7090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 425.815927][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 426.174225][ T7102] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 427.555954][ T7112] loop2: detected capacity change from 0 to 128 [ 427.627431][ T7112] EXT4-fs: Ignoring removed orlov option [ 427.707053][ T7112] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 429.418763][ T6353] EXT4-fs (loop4): unmounting filesystem. [ 429.894217][ T7142] program syz.3.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.302466][ T7142] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 431.664016][ T7148] loop2: detected capacity change from 0 to 1024 [ 431.887315][ T7157] loop3: detected capacity change from 0 to 2048 [ 432.658491][ T7157] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 432.668267][ T7157] NILFS (loop3): mounting unchecked fs [ 432.678195][ T7157] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 432.712352][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 432.837004][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 433.221611][ T7163] netlink: 52 bytes leftover after parsing attributes in process `syz.2.541'. [ 433.225414][ T7168] sctp: [Deprecated]: syz.0.544 (pid 7168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.225414][ T7168] Use struct sctp_sack_info instead [ 433.251003][ T7163] device wlan1 entered promiscuous mode [ 433.290023][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 433.331606][ T7173] loop4: detected capacity change from 0 to 128 [ 433.352958][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.362032][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.395329][ T7173] EXT4-fs: Ignoring removed orlov option [ 433.413888][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 433.433206][ T7173] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 434.008604][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.015971][ T7169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.024873][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.031981][ T7169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.088160][ T7169] device bridge0 entered promiscuous mode [ 434.269490][ T7176] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.278919][ T7176] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.287901][ T7176] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.296692][ T7176] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.605740][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.886281][ T7196] netlink: 160 bytes leftover after parsing attributes in process `syz.4.550'. [ 434.938423][ T3656] Bluetooth: hci3: sending frame failed (-49) [ 434.947518][ T3643] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 435.430919][ T7204] autofs4:pid:7204:autofs_fill_super: called with bogus options [ 437.278775][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 437.278788][ T26] audit: type=1326 audit(2000000181.810:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae257dff9 code=0x7ffc0000 [ 437.618079][ T26] audit: type=1326 audit(2000000181.890:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae257dff9 code=0x7ffc0000 [ 437.739596][ T7209] netlink: 56 bytes leftover after parsing attributes in process `syz.0.553'. [ 437.847472][ T26] audit: type=1326 audit(2000000182.020:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae257dff9 code=0x7ffc0000 [ 438.064770][ T26] audit: type=1326 audit(2000000182.020:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae257dff9 code=0x7ffc0000 [ 438.342426][ T26] audit: type=1326 audit(2000000182.060:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae257dff9 code=0x7ffc0000 [ 438.634568][ T3740] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 438.982271][ T26] audit: type=1326 audit(2000000182.180:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faae257c990 code=0x7ffc0000 [ 439.176557][ T7231] loop3: detected capacity change from 0 to 2048 [ 439.200537][ T7231] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 439.210499][ T7231] NILFS (loop3): mounting unchecked fs [ 439.234349][ T7231] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 439.987190][ T26] audit: type=1326 audit(2000000182.180:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faae257c990 code=0x7ffc0000 [ 440.013113][ T26] audit: type=1326 audit(2000000182.180:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae257dff9 code=0x7ffc0000 [ 440.014546][ T3740] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 440.036319][ T26] audit: type=1326 audit(2000000182.210:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae257dff9 code=0x7ffc0000 [ 440.070615][ T26] audit: type=1326 audit(2000000182.320:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7faae257dff9 code=0x7ffc0000 [ 440.214252][ T3740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.501752][ T3740] usb 2-1: config 0 descriptor?? [ 440.645371][ T7235] loop4: detected capacity change from 0 to 32768 [ 440.702215][ T7235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.559 (7235) [ 440.734454][ T7235] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 440.744833][ T7235] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 440.753008][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 440.753646][ T7235] BTRFS info (device loop4): force clearing of disk cache [ 440.769571][ T7235] BTRFS info (device loop4): using free space tree [ 440.806857][ T7243] loop2: detected capacity change from 0 to 1024 [ 440.844713][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.851090][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.791674][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 441.870785][ T7247] netlink: 52 bytes leftover after parsing attributes in process `syz.2.562'. [ 442.096993][ T7235] BTRFS info (device loop4): enabling ssd optimizations [ 442.105592][ T7235] BTRFS info (device loop4): rebuilding free space tree [ 442.258584][ T6353] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 442.324335][ T3643] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 442.333701][ T3643] Bluetooth: hci2: Injecting HCI hardware error event [ 442.356911][ T3656] Bluetooth: hci2: hardware error 0x00 [ 442.581529][ T26] kauditd_printk_skb: 75 callbacks suppressed [ 442.623486][ T26] audit: type=1326 audit(2000000188.840:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25c377dbfb code=0x7ffc0000 [ 443.001325][ T26] audit: type=1326 audit(2000000188.870:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25c377dbfb code=0x7ffc0000 [ 443.366218][ T26] audit: type=1326 audit(2000000188.880:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c377dff9 code=0x7ffc0000 [ 443.416328][ T7283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.566'. [ 443.448919][ T26] audit: type=1326 audit(2000000188.880:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c377dff9 code=0x7ffc0000 [ 443.534229][ T26] audit: type=1326 audit(2000000188.980:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25c377dbfb code=0x7ffc0000 [ 443.604346][ T26] audit: type=1326 audit(2000000188.990:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25c377dbfb code=0x7ffc0000 [ 443.629588][ T26] audit: type=1326 audit(2000000189.000:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c377dff9 code=0x7ffc0000 [ 443.658879][ T26] audit: type=1326 audit(2000000189.000:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c377dff9 code=0x7ffc0000 [ 443.683435][ T26] audit: type=1326 audit(2000000189.090:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25c377dbfb code=0x7ffc0000 [ 443.706316][ T26] audit: type=1326 audit(2000000189.100:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25c377dbfb code=0x7ffc0000 [ 443.734592][ T3740] usb 2-1: Cannot read MAC address [ 443.740307][ T3740] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 444.427271][ T7292] loop4: detected capacity change from 0 to 2048 [ 444.743828][ T7292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.684623][ T3656] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 445.741281][ T7301] netlink: 56 bytes leftover after parsing attributes in process `syz.3.568'. [ 446.111629][ T3740] usb 2-1: USB disconnect, device number 9 [ 446.735749][ T7323] loop1: detected capacity change from 0 to 2048 [ 446.754949][ T7323] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 446.765433][ T7323] NILFS (loop1): mounting unchecked fs [ 446.792573][ T7323] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount [ 447.134853][ T7321] loop2: detected capacity change from 0 to 512 [ 447.249540][ T7321] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 447.406337][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.413720][ T7321] block device autoloading is deprecated and will be removed. [ 447.436573][ T6434] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 447.446646][ T7321] I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.464846][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.486478][ T7321] EXT4-fs (loop2): couldn't read superblock of external journal [ 447.604696][ T7326] loop3: detected capacity change from 0 to 1024 [ 447.690050][ T7330] loop1: detected capacity change from 0 to 512 [ 447.756456][ T7321] loop2: detected capacity change from 0 to 2048 [ 447.843446][ T7330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 447.871894][ T7321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 447.891829][ T7321] EXT4-fs error (device loop2): __ext4_new_inode:1071: comm syz.2.572: reserved inode found cleared - inode=1 [ 447.914245][ T7330] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 447.951691][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 447.972907][ T7337] netlink: 52 bytes leftover after parsing attributes in process `syz.3.574'. [ 447.998763][ T7321] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 448.159913][ T4005] hid (null): unknown global tag 0xc [ 448.169546][ T4005] hid (null): report_id 43916 is invalid [ 448.175521][ T4005] hid (null): unknown global tag 0xc [ 448.187240][ T4005] hid-generic 0006:00FF:0005.0002: unknown main item tag 0x2 [ 448.191040][ T7337] device wlan1 entered promiscuous mode [ 448.197401][ T4005] hid-generic 0006:00FF:0005.0002: unknown main item tag 0x1 [ 448.279644][ T4005] hid-generic 0006:00FF:0005.0002: ignoring exceeding usage max [ 449.179719][ T4005] hid-generic 0006:00FF:0005.0002: unknown main item tag 0x1 [ 449.204301][ T4005] hid-generic 0006:00FF:0005.0002: unknown global tag 0xc [ 449.221922][ T4005] hid-generic 0006:00FF:0005.0002: item 0 4 1 12 parsing failed [ 449.243345][ T4005] hid-generic: probe of 0006:00FF:0005.0002 failed with error -22 [ 449.403313][ T7342] netlink: 56 bytes leftover after parsing attributes in process `syz.0.577'. [ 449.438019][ T6527] EXT4-fs (loop2): unmounting filesystem. [ 449.475369][ T6079] EXT4-fs (loop1): unmounting filesystem. [ 449.791210][ T7349] loop2: detected capacity change from 0 to 1024 [ 449.917561][ T7361] loop4: detected capacity change from 0 to 256 [ 449.981116][ T7361] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.100198][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 450.100300][ T26] audit: type=1804 audit(2000000196.340:428): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.581" name="/newroot/29/file0/file0" dev="loop4" ino=1048664 res=1 errno=0 [ 450.128399][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.233452][ T7349] EXT4-fs: Ignoring removed orlov option [ 450.498324][ T7349] EXT4-fs (loop2): Test dummy encryption mode enabled [ 450.985663][ T7368] vivid-007: kernel_thread() failed [ 451.290900][ T26] audit: type=1326 audit(2000000197.280:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.0.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5af697dff9 code=0x0 [ 451.605826][ T7349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 451.870005][ T7383] ieee802154 phy0 wpan0: encryption failed: -90 [ 452.262609][ T7386] loop4: detected capacity change from 0 to 8192 [ 452.315216][ T7386] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 452.360941][ T26] audit: type=1800 audit(2000000198.610:430): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.584" name="bus" dev="loop4" ino=1048665 res=0 errno=0 [ 452.968344][ T26] audit: type=1800 audit(2000000199.230:431): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.584" name="bus" dev="loop4" ino=1048665 res=0 errno=0 [ 453.115734][ T26] audit: type=1800 audit(2000000199.230:432): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.584" name="bus" dev="loop4" ino=1048665 res=0 errno=0 [ 453.181847][ T26] audit: type=1800 audit(2000000199.230:433): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.584" name="bus" dev="loop4" ino=1048665 res=0 errno=0 [ 453.333955][ T26] audit: type=1800 audit(2000000199.230:434): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.584" name="bus" dev="loop4" ino=1048665 res=0 errno=0 [ 453.396822][ T6527] EXT4-fs (loop2): unmounting filesystem. [ 454.249319][ T7401] loop3: detected capacity change from 0 to 736 [ 454.454323][ T7396] qrtr: Invalid version 48 [ 454.486784][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 454.539128][ T7409] loop1: detected capacity change from 0 to 1024 [ 454.700220][ T7396] loop7: detected capacity change from 0 to 7 [ 455.725255][ T7396] Dev loop7: unable to read RDB block 7 [ 455.741509][ T7396] loop7: unable to read partition table [ 456.705609][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 456.714462][ T7396] loop7: partition table beyond EOD, truncated [ 456.714527][ T7396] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 456.714527][ T7396] ) failed (rc=-5) [ 456.822138][ T7415] netlink: 52 bytes leftover after parsing attributes in process `syz.1.591'. [ 456.846415][ T7415] device wlan1 entered promiscuous mode [ 457.170851][ T7430] loop0: detected capacity change from 0 to 1024 [ 457.191171][ T7436] loop1: detected capacity change from 0 to 1024 [ 457.199437][ T7436] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1024)! [ 457.211597][ T7436] EXT4-fs (loop1): group descriptors corrupted! [ 457.223848][ T7432] loop4: detected capacity change from 0 to 1024 [ 457.238285][ T7437] loop3: detected capacity change from 0 to 1024 [ 457.280377][ T6434] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.301588][ T7437] hfsplus: extend alloc file! (8192,65536,366) [ 458.046147][ T7443] netlink: 52 bytes leftover after parsing attributes in process `syz.0.596'. [ 458.108565][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 458.475684][ T7452] netlink: 52 bytes leftover after parsing attributes in process `syz.4.595'. [ 458.492172][ T7452] device wlan1 entered promiscuous mode [ 458.663307][ T7456] loop2: detected capacity change from 0 to 2048 [ 459.404364][ T7456] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 459.414192][ T7456] NILFS (loop2): mounting unchecked fs [ 459.423285][ T7456] NILFS (loop2): recovery cancelled because norecovery option was specified for a read/write mount [ 459.507600][ T6434] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.220687][ T7459] hub 9-0:1.0: USB hub found [ 460.231366][ T7459] hub 9-0:1.0: 8 ports detected [ 460.359875][ T7463] loop1: detected capacity change from 0 to 256 [ 460.364909][ T7464] netlink: 'syz.0.604': attribute type 13 has an invalid length. [ 460.655938][ T7463] FAT-fs (loop1): Directory bread(block 64) failed [ 460.798045][ T7463] FAT-fs (loop1): Directory bread(block 65) failed [ 461.075317][ T7463] FAT-fs (loop1): Directory bread(block 66) failed [ 461.210412][ T7463] FAT-fs (loop1): Directory bread(block 67) failed [ 461.294752][ T7463] FAT-fs (loop1): Directory bread(block 68) failed [ 461.315702][ T7475] loop3: detected capacity change from 0 to 1024 [ 461.342603][ T7463] FAT-fs (loop1): Directory bread(block 69) failed [ 461.392898][ T7463] FAT-fs (loop1): Directory bread(block 70) failed [ 461.450593][ T7463] FAT-fs (loop1): Directory bread(block 71) failed [ 461.457739][ T7463] FAT-fs (loop1): Directory bread(block 72) failed [ 461.470034][ T7481] loop0: detected capacity change from 0 to 128 [ 461.477842][ T7463] FAT-fs (loop1): Directory bread(block 73) failed [ 461.488978][ T7481] EXT4-fs: Ignoring removed orlov option [ 461.549962][ T7481] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 461.752573][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 462.207154][ T6429] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 462.641957][ T7489] netlink: 52 bytes leftover after parsing attributes in process `syz.3.609'. [ 462.908741][ T7500] loop4: detected capacity change from 0 to 1024 [ 463.226519][ T7509] loop0: detected capacity change from 0 to 2048 [ 463.861969][ T7510] loop2: detected capacity change from 0 to 128 [ 463.874401][ T7509] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 463.884354][ T7509] NILFS (loop0): mounting unchecked fs [ 464.456201][ T7509] NILFS (loop0): recovery cancelled because norecovery option was specified for a read/write mount [ 464.467727][ T7502] loop1: detected capacity change from 0 to 1024 [ 464.561181][ T7510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 464.570467][ T7510] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 464.756766][ T7514] loop3: detected capacity change from 0 to 8 [ 464.791785][ T6527] EXT4-fs (loop2): unmounting filesystem. [ 464.810988][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 464.854914][ T7515] netlink: 52 bytes leftover after parsing attributes in process `syz.4.615'. [ 464.917925][ T7518] netlink: 52 bytes leftover after parsing attributes in process `syz.1.613'. [ 465.222052][ T7524] netlink: 'syz.2.620': attribute type 13 has an invalid length. [ 465.332780][ T7532] netlink: 'syz.0.621': attribute type 4 has an invalid length. [ 465.558303][ T7533] netlink: 'syz.0.621': attribute type 4 has an invalid length. [ 465.766277][ T7548] vivid-008: disconnect [ 465.788218][ T7548] 9pnet_fd: p9_fd_create_unix (7548): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 466.162376][ T7528] vivid-008: reconnect [ 466.476193][ T7553] loop4: detected capacity change from 0 to 128 [ 466.483547][ T7553] EXT4-fs: Ignoring removed orlov option [ 466.502518][ T7553] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 466.540193][ T7560] loop2: detected capacity change from 0 to 1024 [ 467.162624][ T7568] loop3: detected capacity change from 0 to 2048 [ 468.195799][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 468.210470][ T7568] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 468.220196][ T7568] NILFS (loop3): mounting unchecked fs [ 468.228191][ T7568] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 468.248176][ T7562] netlink: 52 bytes leftover after parsing attributes in process `syz.2.627'. [ 468.306833][ T7573] loop0: detected capacity change from 0 to 128 [ 468.356854][ T7573] EXT4-fs: Ignoring removed orlov option [ 468.375535][ T7573] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 468.683888][ T7580] loop4: detected capacity change from 0 to 1024 [ 468.718878][ T7581] loop3: detected capacity change from 0 to 1024 [ 468.848075][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 468.877194][ T7587] netlink: 52 bytes leftover after parsing attributes in process `syz.4.634'. [ 468.892259][ T7586] netlink: 'syz.1.636': attribute type 13 has an invalid length. [ 468.930775][ T7589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.633'. [ 469.565550][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 469.579203][ T7600] cgroup: noprefix used incorrectly [ 473.976095][ T7604] nfs4: Bad value for 'source' [ 474.156811][ T7613] loop4: detected capacity change from 0 to 128 [ 474.164949][ T7613] EXT4-fs: Ignoring removed orlov option [ 474.201210][ T7613] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 474.224225][ T3740] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 475.327108][ T7619] loop1: detected capacity change from 0 to 2048 [ 475.340003][ T7619] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 475.349737][ T7619] NILFS (loop1): mounting unchecked fs [ 475.358499][ T7619] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount [ 475.496307][ T7621] netlink: 'syz.2.644': attribute type 13 has an invalid length. [ 475.601691][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.644'. [ 475.624323][ T7627] loop1: detected capacity change from 0 to 1024 [ 475.654243][ T3740] usb 1-1: device not accepting address 4, error -71 [ 475.812060][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 475.894576][ T7627] netlink: 52 bytes leftover after parsing attributes in process `syz.1.647'. [ 475.993503][ T7635] netlink: 'syz.4.649': attribute type 13 has an invalid length. [ 476.228958][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 477.307110][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 478.271171][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 478.392571][ T7656] hub 6-0:1.0: USB hub found [ 478.404311][ T7656] hub 6-0:1.0: 1 port detected [ 482.243372][ T7662] loop2: detected capacity change from 0 to 128 [ 482.266342][ T7663] loop1: detected capacity change from 0 to 1024 [ 482.321597][ T7662] EXT4-fs: Ignoring removed orlov option [ 482.361712][ T7662] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 482.413383][ T7665] loop0: detected capacity change from 0 to 128 [ 482.555089][ T7665] EXT4-fs: Ignoring removed orlov option [ 482.591472][ T7665] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 482.845896][ T7669] loop3: detected capacity change from 0 to 2048 [ 482.854348][ T7669] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 482.864118][ T7669] NILFS (loop3): mounting unchecked fs [ 482.876222][ T7669] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 482.971940][ T7670] netlink: 52 bytes leftover after parsing attributes in process `syz.1.654'. [ 486.354823][ T7712] fuse: Bad value for 'fd' [ 486.429725][ T7709] loop3: detected capacity change from 0 to 4096 [ 486.610650][ T7709] NILFS (loop3): invalid segment: Checksum error in segment payload [ 486.659311][ T7717] loop0: detected capacity change from 0 to 1024 [ 486.692273][ T7709] NILFS (loop3): trying rollback from an earlier position [ 487.020353][ T7722] loop4: detected capacity change from 0 to 512 [ 487.031657][ T7722] ext4: Unknown parameter 'obj_type' [ 487.954180][ T7709] NILFS (loop3): recovery complete [ 487.983708][ T7725] loop2: detected capacity change from 0 to 2048 [ 488.006197][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 488.032822][ T7725] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 488.042880][ T7725] NILFS (loop2): mounting unchecked fs [ 488.058138][ T7725] NILFS (loop2): recovery cancelled because norecovery option was specified for a read/write mount [ 488.071729][ T7721] netlink: 52 bytes leftover after parsing attributes in process `syz.0.667'. [ 488.140033][ T7730] loop4: detected capacity change from 0 to 1024 [ 488.147772][ T7732] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.421826][ T7738] loop2: detected capacity change from 0 to 128 [ 488.435135][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 488.464885][ T7738] EXT4-fs: Ignoring removed orlov option [ 488.496331][ T7737] netlink: 52 bytes leftover after parsing attributes in process `syz.4.671'. [ 488.523772][ T7738] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 488.865860][ T7743] overlayfs: upper fs does not support tmpfile. [ 488.889079][ T7744] overlayfs: upper fs does not support tmpfile. [ 488.897663][ T7744] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 488.904751][ T7744] overlayfs: failed to set xattr on upper [ 488.910574][ T7744] overlayfs: ...falling back to index=off,metacopy=off. [ 488.917721][ T7744] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 488.944813][ T7743] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 488.952857][ T7743] overlayfs: failed to set xattr on upper [ 488.958766][ T7743] overlayfs: ...falling back to index=off,metacopy=off. [ 489.354924][ T7540] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 491.197249][ T7757] ptrace attach of "./syz-executor exec"[6353] was attempted by ""[7757] [ 491.797192][ T7779] loop4: detected capacity change from 0 to 128 [ 491.866147][ T7780] loop0: detected capacity change from 0 to 2048 [ 492.435976][ T7784] loop2: detected capacity change from 0 to 16 [ 492.603276][ T7784] erofs: (device loop2): mounted with root inode @ nid 36. [ 492.778044][ T7784] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 492.794889][ T7780] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 492.806230][ T7780] NILFS (loop0): mounting unchecked fs [ 493.311367][ T7782] loop3: detected capacity change from 0 to 1024 [ 493.631559][ T7784] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4 in[53, 4043] out[1851] [ 493.642912][ T7784] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 493.655756][ T7780] NILFS (loop0): recovery cancelled because norecovery option was specified for a read/write mount [ 494.069141][ T7788] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 494.111106][ T7791] loop0: detected capacity change from 0 to 1024 [ 494.122685][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 494.139643][ T7794] fuse: Bad value for 'fd' [ 494.151496][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.683'. [ 494.273192][ T7797] loop1: detected capacity change from 0 to 128 [ 494.311714][ T7797] EXT4-fs: Ignoring removed orlov option [ 494.340376][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 494.373233][ T7797] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 494.389907][ T7791] netlink: 52 bytes leftover after parsing attributes in process `syz.0.685'. [ 495.924961][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 496.240836][ T7825] loop2: detected capacity change from 0 to 256 [ 496.288474][ T7832] loop4: detected capacity change from 0 to 16 [ 496.288612][ T7825] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 496.337686][ T7832] erofs: (device loop4): mounted with root inode @ nid 36. [ 496.665816][ T7837] loop1: detected capacity change from 0 to 2048 [ 498.055788][ T7841] overlayfs: './file1' not a directory [ 498.333399][ T7842] overlayfs: missing 'lowerdir' [ 499.519213][ T7837] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 499.523235][ T7541] udevd[7541]: incorrect nilfs2 checksum on /dev/loop1 [ 499.528939][ T7837] NILFS (loop1): mounting unchecked fs [ 499.590789][ T7837] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount [ 499.689763][ T6434] udevd[6434]: incorrect nilfs2 checksum on /dev/loop1 [ 499.853548][ T7848] loop1: detected capacity change from 0 to 1024 [ 501.118201][ T7859] netlink: 52 bytes leftover after parsing attributes in process `syz.1.700'. [ 501.227694][ T7870] loop4: detected capacity change from 0 to 128 [ 501.246112][ T7870] EXT4-fs: Ignoring removed orlov option [ 501.283218][ T7870] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 503.643054][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.649520][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.815769][ T7880] loop0: detected capacity change from 0 to 1024 [ 504.025330][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 504.077522][ T7888] netlink: 52 bytes leftover after parsing attributes in process `syz.0.705'. [ 504.269336][ T7895] loop1: detected capacity change from 0 to 2048 [ 504.356504][ T7895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.209387][ T7904] netlink: 'syz.0.711': attribute type 13 has an invalid length. [ 505.793516][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 505.871206][ T7919] cgroup: Invalid name [ 506.786096][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.865963][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.913992][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 506.991364][ T7928] loop0: detected capacity change from 0 to 1024 [ 507.189227][ T7932] netlink: 52 bytes leftover after parsing attributes in process `syz.0.716'. [ 507.443522][ T7937] loop4: detected capacity change from 0 to 128 [ 507.532113][ T7937] EXT4-fs: Ignoring removed orlov option [ 507.637346][ T7937] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 508.750760][ T7950] loop1: detected capacity change from 0 to 512 [ 509.672305][ T7950] EXT4-fs (loop1): 1 truncate cleaned up [ 509.680989][ T7950] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 509.802730][ T7960] loop4: detected capacity change from 0 to 1024 [ 510.291892][ T7969] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.721: Directory hole found for htree leaf block 0 [ 510.856984][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 510.895490][ T7970] netlink: 52 bytes leftover after parsing attributes in process `syz.4.723'. [ 511.056556][ T6079] EXT4-fs (loop1): unmounting filesystem. [ 513.164714][ T7999] loop4: detected capacity change from 0 to 2048 [ 513.172696][ T7999] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 513.182659][ T7999] NILFS (loop4): mounting unchecked fs [ 513.191220][ T7999] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount [ 513.255238][ T6434] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 513.521504][ T8005] loop0: detected capacity change from 0 to 1024 [ 513.685276][ T8010] netlink: 52 bytes leftover after parsing attributes in process `syz.0.730'. [ 514.808136][ T8037] loop4: detected capacity change from 0 to 1024 [ 514.973993][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 514.994462][ T8042] netlink: 52 bytes leftover after parsing attributes in process `syz.4.733'. [ 515.784989][ T8064] loop4: detected capacity change from 0 to 164 [ 517.162629][ T8074] loop0: detected capacity change from 0 to 2048 [ 517.450442][ T8074] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 517.460291][ T8074] NILFS (loop0): mounting unchecked fs [ 517.477491][ T8074] NILFS (loop0): recovery cancelled because norecovery option was specified for a read/write mount [ 518.108735][ T8082] loop4: detected capacity change from 0 to 1024 [ 519.051421][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 519.071577][ T8085] netlink: 52 bytes leftover after parsing attributes in process `syz.4.740'. [ 519.716011][ T8093] loop4: detected capacity change from 0 to 2048 [ 519.732656][ T8093] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 519.742494][ T8093] NILFS (loop4): mounting unchecked fs [ 519.751843][ T8093] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount [ 519.943778][ T6434] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 520.387176][ T8095] loop4: detected capacity change from 0 to 1024 [ 520.483082][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 520.497922][ T8096] netlink: 52 bytes leftover after parsing attributes in process `syz.4.743'. [ 520.967508][ T8098] loop0: detected capacity change from 0 to 128 [ 520.996101][ T8098] EXT4-fs: Ignoring removed orlov option [ 521.008085][ T8098] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 522.002473][ T8104] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 522.872929][ T8109] netlink: 'syz.0.747': attribute type 13 has an invalid length. [ 522.893687][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 523.121584][ T8114] netlink: 'syz.4.749': attribute type 13 has an invalid length. [ 523.139926][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.749'. [ 523.824974][ T8121] loop0: detected capacity change from 0 to 1024 [ 524.020634][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 524.048755][ T8122] netlink: 52 bytes leftover after parsing attributes in process `syz.0.751'. [ 524.523719][ T8126] loop4: detected capacity change from 0 to 2048 [ 524.532410][ T8126] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 524.542237][ T8126] NILFS (loop4): mounting unchecked fs [ 524.550246][ T8126] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount [ 524.613628][ T6434] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 525.014403][ T8130] loop0: detected capacity change from 0 to 2048 [ 525.033111][ T8130] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18881, location=18881 [ 526.318598][ T8139] netlink: 'syz.0.757': attribute type 13 has an invalid length. [ 526.330445][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 526.683861][ T8147] loop4: detected capacity change from 0 to 128 [ 526.703264][ T8147] EXT4-fs: Ignoring removed orlov option [ 526.718742][ T8147] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 526.879433][ T8149] loop0: detected capacity change from 0 to 1024 [ 527.716936][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 527.755159][ T8152] netlink: 52 bytes leftover after parsing attributes in process `syz.0.760'. [ 527.788121][ T8154] loop4: detected capacity change from 0 to 2048 [ 528.466166][ T8157] loop0: detected capacity change from 0 to 256 [ 528.521361][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 528.562648][ T8154] loop4: detected capacity change from 0 to 512 [ 528.600512][ T8154] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 528.609853][ T8154] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038 (0x7fffffff) [ 528.672715][ T6353] EXT4-fs (loop4): unmounting filesystem. [ 528.907702][ T3688] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 529.305251][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.316378][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.326737][ T3688] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 529.336147][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.347732][ T3688] usb 1-1: config 0 descriptor?? [ 529.542973][ T8175] loop4: detected capacity change from 0 to 512 [ 529.566128][ T8175] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 529.579692][ T8175] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 529.589300][ T8175] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.767: Failed to acquire dquot type 0 [ 529.601221][ T8175] EXT4-fs (loop4): Remounting filesystem read-only [ 529.608183][ T8175] EXT4-fs (loop4): 1 orphan inode deleted [ 529.615921][ T8175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 529.624998][ T8175] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038 (0x7fffffff) [ 529.650476][ T8175] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 529.661747][ T8175] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 529.671457][ T8175] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.767: Failed to acquire dquot type 0 [ 529.683214][ T8175] EXT4-fs (loop4): Remounting filesystem read-only [ 529.871404][ T3688] hid (null): bogus close delimiter [ 530.084380][ T3688] usb 1-1: language id specifier not provided by device, defaulting to English [ 530.155950][ T8180] EXT4-fs (loop4): shut down requested (2) [ 530.341569][ T6353] EXT4-fs (loop4): unmounting filesystem. [ 530.399434][ T8182] loop4: detected capacity change from 0 to 128 [ 530.407397][ T8182] EXT4-fs: Ignoring removed orlov option [ 530.428825][ T8182] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 530.504247][ T3688] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 530.516029][ T3688] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 530.529022][ T3688] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 530.543362][ T3688] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 530.552222][ T3688] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 530.590132][ T3688] usb 1-1: USB disconnect, device number 6 [ 531.490572][ T8186] loop4: detected capacity change from 0 to 1024 [ 531.596146][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 531.612979][ T8187] netlink: 52 bytes leftover after parsing attributes in process `syz.4.770'. [ 532.469203][ T8191] loop4: detected capacity change from 0 to 1024 [ 532.576410][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 532.590618][ T8192] netlink: 52 bytes leftover after parsing attributes in process `syz.4.772'. [ 542.435837][ T8207] loop4: detected capacity change from 0 to 128 [ 542.442854][ T8207] EXT4-fs: Ignoring removed orlov option [ 542.455257][ T8207] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 543.490771][ T8211] netlink: 'syz.4.778': attribute type 13 has an invalid length. [ 543.776528][ T8215] loop4: detected capacity change from 0 to 2048 [ 543.785210][ T8215] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 543.795011][ T8215] NILFS (loop4): mounting unchecked fs [ 543.803273][ T8215] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount [ 543.824648][ T8205] udevd[8205]: incorrect nilfs2 checksum on /dev/loop4 [ 544.171998][ T26] audit: type=1326 audit(2000000290.430:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7fc00000 [ 544.194469][ T26] audit: type=1326 audit(2000000290.430:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efca8f7dff9 code=0x7fc00000 [ 544.249557][ T8222] loop4: detected capacity change from 0 to 2048 [ 544.273387][ T8222] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 544.281320][ T8222] UDF-fs: Scanning with blocksize 512 failed [ 544.298398][ T8222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.897890][ T26] audit: type=1326 audit(2000000291.160:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7fc00000 [ 544.978724][ T8224] loop4: detected capacity change from 0 to 128 [ 544.986191][ T8224] EXT4-fs: Ignoring removed orlov option [ 544.992817][ T8224] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 546.027406][ T8228] netlink: 'syz.4.784': attribute type 13 has an invalid length. [ 546.039825][ T8228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.784'. [ 548.123600][ T8237] netlink: 'syz.4.787': attribute type 13 has an invalid length. [ 548.387992][ T8243] loop4: detected capacity change from 0 to 2048 [ 548.398508][ T8243] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 548.408532][ T8243] NILFS (loop4): mounting unchecked fs [ 548.418077][ T8243] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount [ 548.690574][ T8205] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 549.021661][ T8247] netlink: 'syz.4.790': attribute type 3 has an invalid length. [ 549.029505][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.4.790'. [ 549.752770][ T8244] dccp_close: ABORT with 65475 bytes unread [ 549.759090][ T8244] dccp_close: ABORT with 11 bytes unread [ 549.875618][ T8249] loop4: detected capacity change from 0 to 128 [ 549.882663][ T8249] EXT4-fs: Ignoring removed orlov option [ 549.892903][ T8249] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 551.252983][ T8259] capability: warning: `syz.4.794' uses 32-bit capabilities (legacy support in use) [ 551.348859][ T8263] netlink: 'syz.4.795': attribute type 13 has an invalid length. [ 551.557208][ T26] audit: type=1326 audit(2000000297.820:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.580116][ T26] audit: type=1326 audit(2000000297.830:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.602500][ T26] audit: type=1326 audit(2000000297.830:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.626161][ T26] audit: type=1326 audit(2000000297.830:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.653717][ T26] audit: type=1326 audit(2000000297.830:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.676136][ T26] audit: type=1326 audit(2000000297.830:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.698932][ T26] audit: type=1326 audit(2000000297.830:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.721284][ T26] audit: type=1326 audit(2000000297.830:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.744129][ T26] audit: type=1326 audit(2000000297.830:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 551.767938][ T26] audit: type=1326 audit(2000000297.830:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8f7dff9 code=0x7ffc0000 [ 563.686460][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.692819][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.127320][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.133724][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.684602][ T28] INFO: task kworker/1:1:27 blocked for more than 143 seconds. [ 659.692211][ T28] Not tainted 6.1.112-syzkaller #0 [ 659.699764][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 659.708543][ T28] task:kworker/1:1 state:D stack:22848 pid:27 ppid:2 flags:0x00004000 [ 659.718131][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 659.725061][ T28] Call Trace: [ 659.728370][ T28] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 659.731329][ T28] __schedule+0x143f/0x4570 [ 659.741445][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 659.746830][ T28] ? release_firmware_map_entry+0x186/0x186 [ 659.752989][ T28] ? print_irqtrace_events+0x210/0x210 [ 659.764204][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 659.775267][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 659.784290][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 659.789569][ T28] schedule+0xbf/0x180 [ 659.793688][ T28] schedule_preempt_disabled+0xf/0x20 [ 659.844939][ T28] __mutex_lock+0x6b9/0xd80 [ 659.849542][ T28] ? __mutex_lock+0x53c/0xd80 [ 659.856918][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 659.863241][ T28] ? mutex_lock_nested+0x10/0x10 [ 659.868273][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 659.874359][ T28] ? print_irqtrace_events+0x210/0x210 [ 659.879854][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 659.885850][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 659.891101][ T28] ? process_one_work+0x7a9/0x11d0 [ 659.896286][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 659.902392][ T28] ? process_one_work+0x7a9/0x11d0 [ 659.907636][ T28] process_one_work+0x8a9/0x11d0 [ 659.912617][ T28] ? worker_detach_from_pool+0x260/0x260 [ 659.918361][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 659.923932][ T28] ? kthread_data+0x4e/0xc0 [ 659.929754][ T28] ? wq_worker_running+0x97/0x190 [ 659.935191][ T28] worker_thread+0xa47/0x1200 [ 659.939939][ T28] kthread+0x28d/0x320 [ 659.944123][ T28] ? worker_clr_flags+0x190/0x190 [ 659.949254][ T28] ? kthread_blkcg+0xd0/0xd0 [ 659.953872][ T28] ret_from_fork+0x1f/0x30 [ 659.959102][ T28] [ 659.962404][ T28] INFO: task syz-executor:6079 blocked for more than 143 seconds. [ 659.970765][ T28] Not tainted 6.1.112-syzkaller #0 [ 659.976795][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 659.986486][ T28] task:syz-executor state:D stack:21224 pid:6079 ppid:1 flags:0x00004002 [ 659.996107][ T28] Call Trace: [ 659.999414][ T28] [ 660.002374][ T28] __schedule+0x143f/0x4570 [ 660.007848][ T28] ? release_firmware_map_entry+0x186/0x186 [ 660.013811][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 660.019744][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 660.027362][ T28] schedule+0xbf/0x180 [ 660.031480][ T28] schedule_preempt_disabled+0xf/0x20 [ 660.037321][ T28] __mutex_lock+0x6b9/0xd80 [ 660.041864][ T28] ? kobject_put+0x422/0x460 [ 660.046961][ T28] ? __mutex_lock+0x53c/0xd80 [ 660.051694][ T28] ? rfkill_unregister+0xcc/0x220 [ 660.057153][ T28] ? mutex_lock_nested+0x10/0x10 [ 660.062131][ T28] ? kill_device+0x160/0x160 [ 660.067249][ T28] ? kmem_cache_free+0x292/0x510 [ 660.072242][ T28] rfkill_unregister+0xcc/0x220 [ 660.077524][ T28] hci_unregister_dev+0x362/0x500 [ 660.082602][ T28] vhci_release+0x7f/0xd0 [ 660.095746][ T28] ? vhci_open+0x360/0x360 [ 660.100253][ T28] __fput+0x3f6/0x8d0 [ 660.104703][ T28] task_work_run+0x246/0x300 [ 660.109338][ T28] ? kasan_quarantine_put+0xd4/0x220 [ 660.115010][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 660.120078][ T28] ? kmem_cache_free+0x292/0x510 [ 660.125472][ T28] ? do_exit+0xa6e/0x26a0 [ 660.129851][ T28] do_exit+0xa73/0x26a0 [ 660.136434][ T28] ? put_task_struct+0x80/0x80 [ 660.141249][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 660.147700][ T28] ? print_irqtrace_events+0x210/0x210 [ 660.153209][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 660.158788][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 660.164145][ T28] do_group_exit+0x202/0x2b0 [ 660.168773][ T28] __x64_sys_exit_group+0x3b/0x40 [ 660.173800][ T28] do_syscall_64+0x3b/0xb0 [ 660.178290][ T28] ? clear_bhb_loop+0x45/0xa0 [ 660.183025][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.189169][ T28] RIP: 0033:0x7f25c377dff9 [ 660.193643][ T28] RSP: 002b:00007ffd994aa488 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 660.202157][ T28] RAX: ffffffffffffffda RBX: 00007f25c37f01a6 RCX: 00007f25c377dff9 [ 660.210229][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 660.218251][ T28] RBP: 0000000000000016 R08: 00007ffd994a8226 R09: 00007ffd994ab740 [ 660.226388][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd994ab740 [ 660.234483][ T28] R13: 00007f25c37f0134 R14: 0000555594fe84a8 R15: 00007ffd994ae9e0 [ 660.242489][ T28] [ 660.247692][ T28] INFO: task syz.3.695:7822 blocked for more than 143 seconds. [ 660.255334][ T28] Not tainted 6.1.112-syzkaller #0 [ 660.260978][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.269782][ T28] task:syz.3.695 state:D stack:25832 pid:7822 ppid:6069 flags:0x00004004 [ 660.279056][ T28] Call Trace: [ 660.282333][ T28] [ 660.285389][ T28] __schedule+0x143f/0x4570 [ 660.289948][ T28] ? release_firmware_map_entry+0x186/0x186 [ 660.295882][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 660.301371][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 660.306709][ T28] schedule+0xbf/0x180 [ 660.310813][ T28] schedule_preempt_disabled+0xf/0x20 [ 660.316254][ T28] __mutex_lock+0x6b9/0xd80 [ 660.320800][ T28] ? kobject_put+0x422/0x460 [ 660.325564][ T28] ? __mutex_lock+0x53c/0xd80 [ 660.330266][ T28] ? rfkill_unregister+0xcc/0x220 [ 660.335361][ T28] ? mutex_lock_nested+0x10/0x10 [ 660.340338][ T28] ? kill_device+0x160/0x160 [ 660.345064][ T28] ? nfc_genl_device_removed+0x251/0x370 [ 660.350736][ T28] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 660.358827][ T28] rfkill_unregister+0xcc/0x220 [ 660.363731][ T28] nfc_unregister_device+0x92/0x290 [ 660.369083][ T28] virtual_ncidev_close+0x55/0x90 [ 660.374205][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 660.379354][ T28] __fput+0x3f6/0x8d0 [ 660.383365][ T28] task_work_run+0x246/0x300 [ 660.388099][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 660.393159][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 660.398716][ T28] exit_to_user_mode_loop+0xde/0x100 [ 660.404824][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 660.410403][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 660.416028][ T28] do_syscall_64+0x47/0xb0 [ 660.420464][ T28] ? clear_bhb_loop+0x45/0xa0 [ 660.425289][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.431219][ T28] RIP: 0033:0x7faae257dff9 [ 660.435719][ T28] RSP: 002b:00007ffc7fbbdb18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 660.444266][ T28] RAX: 0000000000000000 RBX: 000000000007920e RCX: 00007faae257dff9 [ 660.452271][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 660.460305][ T28] RBP: 00007faae2737a80 R08: 0000000000000001 R09: 00007ffc7fbbde0f [ 660.469781][ T28] R10: 00007faae2200000 R11: 0000000000000246 R12: 000000000007936c [ 660.478927][ T28] R13: 00007ffc7fbbdc20 R14: 0000000000000032 R15: ffffffffffffffff [ 660.487687][ T28] [ 660.490771][ T28] INFO: task syz.2.697:7843 blocked for more than 144 seconds. [ 660.498382][ T28] Not tainted 6.1.112-syzkaller #0 [ 660.504140][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.512815][ T28] task:syz.2.697 state:D stack:24088 pid:7843 ppid:6527 flags:0x00004004 [ 660.522069][ T28] Call Trace: [ 660.525515][ T28] [ 660.528471][ T28] __schedule+0x143f/0x4570 [ 660.533014][ T28] ? release_firmware_map_entry+0x186/0x186 [ 660.538959][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 660.544571][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 660.549805][ T28] schedule+0xbf/0x180 [ 660.553887][ T28] schedule_preempt_disabled+0xf/0x20 [ 660.559321][ T28] __mutex_lock+0x6b9/0xd80 [ 660.563865][ T28] ? __mutex_lock+0x53c/0xd80 [ 660.568703][ T28] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 660.576131][ T28] ? mutex_lock_nested+0x10/0x10 [ 660.581102][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 660.586472][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 660.591701][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 660.597654][ T28] ? _raw_spin_unlock+0x40/0x40 [ 660.602532][ T28] nfc_rfkill_set_block+0x4c/0x2f0 [ 660.607782][ T28] ? nfc_unregister_device+0x290/0x290 [ 660.613269][ T28] rfkill_set_block+0x1e7/0x430 [ 660.618225][ T28] rfkill_fop_write+0x5b7/0x790 [ 660.623111][ T28] ? rfkill_fop_read+0x470/0x470 [ 660.628175][ T28] ? fsnotify_perm+0x64/0x590 [ 660.632897][ T28] ? security_file_permission+0x75/0xa0 [ 660.638524][ T28] ? rfkill_fop_read+0x470/0x470 [ 660.643493][ T28] vfs_write+0x2d9/0xbc0 [ 660.648142][ T28] ? print_irqtrace_events+0x210/0x210 [ 660.653621][ T28] ? file_end_write+0x250/0x250 [ 660.658527][ T28] ? __fget_files+0x28/0x4a0 [ 660.663135][ T28] ? __fget_files+0x435/0x4a0 [ 660.667938][ T28] ? __fget_files+0x28/0x4a0 [ 660.672561][ T28] ? __fdget_pos+0x1db/0x360 [ 660.677214][ T28] ? ksys_write+0x77/0x2c0 [ 660.681652][ T28] ksys_write+0x19c/0x2c0 [ 660.687533][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 660.692771][ T28] ? __ia32_sys_read+0x80/0x80 [ 660.699015][ T28] do_syscall_64+0x3b/0xb0 [ 660.703485][ T28] ? clear_bhb_loop+0x45/0xa0 [ 660.708343][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.714324][ T28] RIP: 0033:0x7f13abb7dff9 [ 660.718798][ T28] RSP: 002b:00007f13ac925038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 660.727476][ T28] RAX: ffffffffffffffda RBX: 00007f13abd36208 RCX: 00007f13abb7dff9 [ 660.735528][ T28] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000008 [ 660.743516][ T28] RBP: 00007f13abbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 660.751622][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.759770][ T28] R13: 0000000000000001 R14: 00007f13abd36208 R15: 00007ffe2128ca88 [ 660.768056][ T28] [ 660.771117][ T28] INFO: task syz-executor:7942 blocked for more than 144 seconds. [ 660.779091][ T28] Not tainted 6.1.112-syzkaller #0 [ 660.784853][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.793551][ T28] task:syz-executor state:D stack:27560 pid:7942 ppid:1 flags:0x00004004 [ 660.805017][ T28] Call Trace: [ 660.808451][ T28] [ 660.811409][ T28] __schedule+0x143f/0x4570 [ 660.816033][ T28] ? release_firmware_map_entry+0x186/0x186 [ 660.822047][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 660.827695][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 660.832929][ T28] schedule+0xbf/0x180 [ 660.837086][ T28] schedule_preempt_disabled+0xf/0x20 [ 660.842501][ T28] __mutex_lock+0x6b9/0xd80 [ 660.847178][ T28] ? __mutex_lock+0x53c/0xd80 [ 660.851887][ T28] ? rfkill_register+0x30/0x880 [ 660.856793][ T28] ? mutex_lock_nested+0x10/0x10 [ 660.861761][ T28] ? __init_waitqueue_head+0xaa/0x140 [ 660.867303][ T28] ? device_initialize+0x24a/0x450 [ 660.872445][ T28] rfkill_register+0x30/0x880 [ 660.877205][ T28] hci_register_dev+0x4df/0xa40 [ 660.882094][ T28] vhci_create_device+0x3ba/0x700 [ 660.887295][ T28] vhci_write+0x38b/0x440 [ 660.891669][ T28] vfs_write+0x857/0xbc0 [ 660.896029][ T28] ? file_end_write+0x250/0x250 [ 660.900918][ T28] ? __fdget_pos+0x1db/0x360 [ 660.906411][ T28] ksys_write+0x19c/0x2c0 [ 660.910772][ T28] ? print_irqtrace_events+0x210/0x210 [ 660.916632][ T28] ? __ia32_sys_read+0x80/0x80 [ 660.921528][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 660.927813][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 660.933068][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 660.939251][ T28] do_syscall_64+0x3b/0xb0 [ 660.943711][ T28] ? clear_bhb_loop+0x45/0xa0 [ 660.948469][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.954522][ T28] RIP: 0033:0x7f273db7caa0 [ 660.958962][ T28] RSP: 002b:00007ffda23653f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 660.969138][ T28] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f273db7caa0 [ 660.977380][ T28] RDX: 0000000000000002 RSI: 00007ffda236540a RDI: 00000000000000ca [ 660.985788][ T28] RBP: 00007f273dd36a38 R08: 0000000000000000 R09: 00007f273e86d6c0 [ 660.993801][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 661.002095][ T28] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 661.010255][ T28] [ 661.013315][ T28] INFO: task syz-executor:7943 blocked for more than 144 seconds. [ 661.021460][ T28] Not tainted 6.1.112-syzkaller #0 [ 661.027900][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.037636][ T28] task:syz-executor state:D stack:27464 pid:7943 ppid:1 flags:0x00004004 [ 661.047391][ T28] Call Trace: [ 661.050736][ T28] [ 661.053700][ T28] __schedule+0x143f/0x4570 [ 661.058442][ T28] ? release_firmware_map_entry+0x186/0x186 [ 661.064428][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 661.069948][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 661.075321][ T28] schedule+0xbf/0x180 [ 661.079440][ T28] schedule_preempt_disabled+0xf/0x20 [ 661.084966][ T28] __mutex_lock+0x6b9/0xd80 [ 661.089500][ T28] ? __mutex_lock+0x53c/0xd80 [ 661.094342][ T28] ? rfkill_register+0x30/0x880 [ 661.099231][ T28] ? mutex_lock_nested+0x10/0x10 [ 661.104266][ T28] ? __init_waitqueue_head+0xaa/0x140 [ 661.109675][ T28] ? device_initialize+0x24a/0x450 [ 661.114925][ T28] rfkill_register+0x30/0x880 [ 661.119649][ T28] hci_register_dev+0x4df/0xa40 [ 661.128892][ T28] vhci_create_device+0x3ba/0x700 [ 661.134296][ T28] vhci_write+0x38b/0x440 [ 661.138676][ T28] vfs_write+0x857/0xbc0 [ 661.142927][ T28] ? file_end_write+0x250/0x250 [ 661.148417][ T28] ? __fdget_pos+0x1db/0x360 [ 661.153056][ T28] ksys_write+0x19c/0x2c0 [ 661.157694][ T28] ? print_irqtrace_events+0x210/0x210 [ 661.163212][ T28] ? __ia32_sys_read+0x80/0x80 [ 661.168175][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 661.174261][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 661.179498][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 661.185795][ T28] do_syscall_64+0x3b/0xb0 [ 661.190254][ T28] ? clear_bhb_loop+0x45/0xa0 [ 661.195024][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.200949][ T28] RIP: 0033:0x7f6af4d7caa0 [ 661.205493][ T28] RSP: 002b:00007ffd08a17d78 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 661.213938][ T28] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6af4d7caa0 [ 661.221973][ T28] RDX: 0000000000000002 RSI: 00007ffd08a17d8a RDI: 00000000000000ca [ 661.230093][ T28] RBP: 00007f6af4f36a38 R08: 0000000000000000 R09: 00007f6af5a6d6c0 [ 661.238420][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 661.248191][ T28] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 661.256340][ T28] [ 661.259638][ T28] [ 661.259638][ T28] Showing all locks held in the system: [ 661.268033][ T28] 1 lock held by rcu_tasks_kthre/12: [ 661.273358][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 661.284261][ T28] 1 lock held by rcu_tasks_trace/13: [ 661.289573][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 661.300671][ T28] 3 locks held by kworker/1:1/27: [ 661.305860][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 661.316414][ T28] #1: ffffc90000a3fd20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 661.329456][ T28] #2: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 661.340875][ T28] 1 lock held by khungtaskd/28: [ 661.345815][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 661.357637][ T28] 2 locks held by getty/3396: [ 661.362344][ T28] #0: ffff88802e34b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 661.372709][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 661.383211][ T28] 2 locks held by kworker/u4:10/3845: [ 661.388689][ T28] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 661.398727][ T28] #1: ffff8880b8e27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a3/0x770 [ 661.410224][ T28] 1 lock held by syz-executor/4069: [ 661.415496][ T28] #0: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 661.425747][ T28] 1 lock held by syz-executor/6079: [ 661.430958][ T28] #0: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 661.441211][ T28] 1 lock held by syz-executor/6353: [ 661.446646][ T28] #0: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 661.456921][ T28] 2 locks held by syz.3.695/7822: [ 661.461966][ T28] #0: ffff88805b4fd100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 661.473151][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 661.483606][ T28] 2 locks held by syz.2.697/7843: [ 661.488914][ T28] #0: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 661.499234][ T28] #1: ffff88805b4fd100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 661.509016][ T28] 2 locks held by syz-executor/7942: [ 661.514358][ T28] #0: ffff888078d5a918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.524814][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.534857][ T28] 2 locks held by syz-executor/7943: [ 661.540166][ T28] #0: ffff888027630118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.550284][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.560299][ T28] 2 locks held by syz-executor/8112: [ 661.565666][ T28] #0: ffff8880588f8118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.577194][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.587284][ T28] 2 locks held by syz-executor/8204: [ 661.592588][ T28] #0: ffff8880792cd918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.602708][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.612995][ T28] 2 locks held by syz-executor/8272: [ 661.618358][ T28] #0: ffff888073b75118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.628467][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.638500][ T28] 2 locks held by syz-executor/8274: [ 661.643821][ T28] #0: ffff888063fb5918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.654016][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.664078][ T28] 2 locks held by syz-executor/8276: [ 661.669383][ T28] #0: ffff888024c1c118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.679540][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.691039][ T28] 2 locks held by syz-executor/8279: [ 661.696526][ T28] #0: ffff888077da6118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.706686][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.716886][ T28] 2 locks held by syz-executor/8283: [ 661.722224][ T28] #0: ffff888067126918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.732383][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.742402][ T28] 2 locks held by syz-executor/8285: [ 661.747790][ T28] #0: ffff88805a2d4118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.758137][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.768208][ T28] 2 locks held by syz-executor/8291: [ 661.773507][ T28] #0: ffff8880762b5118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 661.783606][ T28] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 661.793659][ T28] [ 661.796698][ T28] ============================================= [ 661.796698][ T28] [ 661.806065][ T28] NMI backtrace for cpu 1 [ 661.810419][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 661.818323][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 661.828391][ T28] Call Trace: [ 661.831695][ T28] [ 661.834646][ T28] dump_stack_lvl+0x1e3/0x2cb [ 661.839375][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 661.844949][ T28] ? panic+0x764/0x764 [ 661.849031][ T28] ? vprintk_emit+0x622/0x740 [ 661.853724][ T28] ? printk_sprint+0x490/0x490 [ 661.858501][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 661.863624][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 661.868732][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 661.874905][ T28] ? _printk+0xd1/0x111 [ 661.879088][ T28] ? panic+0x764/0x764 [ 661.883173][ T28] ? __wake_up_klogd+0xcc/0x100 [ 661.888038][ T28] ? panic+0x764/0x764 [ 661.892124][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 661.898204][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 661.904290][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 661.910283][ T28] watchdog+0xf88/0xfd0 [ 661.914480][ T28] ? watchdog+0x1f8/0xfd0 [ 661.918889][ T28] kthread+0x28d/0x320 [ 661.922968][ T28] ? hungtask_pm_notify+0x50/0x50 [ 661.928010][ T28] ? kthread_blkcg+0xd0/0xd0 [ 661.932611][ T28] ret_from_fork+0x1f/0x30 [ 661.937074][ T28] [ 661.940589][ T28] Sending NMI from CPU 1 to CPUs 0: [ 661.946242][ C0] NMI backtrace for cpu 0 [ 661.946254][ C0] CPU: 0 PID: 1198 Comm: kworker/u4:6 Not tainted 6.1.112-syzkaller #0 [ 661.946272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 661.946284][ C0] Workqueue: events_unbound toggle_allocation_gate [ 661.946320][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 661.946344][ C0] Code: 00 0f 0b 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 68 4c 0f 0d 48 89 de 5b e9 67 ab 56 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0d f4 bf 77 7e 65 8b 15 f5 bf 77 7e 81 e2 00 01 ff 00 74 [ 661.946358][ C0] RSP: 0018:ffffc90004f478e8 EFLAGS: 00000246 [ 661.946372][ C0] RAX: ffffffff8aa493e5 RBX: ffffc90004f479e8 RCX: ffff888027779dc0 [ 661.946386][ C0] RDX: ffff888027779dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.946397][ C0] RBP: 0000000000000000 R08: ffffffff8aa493c7 R09: ffffffff8aa484ba [ 661.946409][ C0] R10: 0000000000000003 R11: ffff888027779dc0 R12: 1ffff920009e8f3a [ 661.946421][ C0] R13: ffffc90004f47980 R14: ffffc90004f479d2 R15: 1ffff920009e8f3d [ 661.946434][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 661.946448][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.946460][ C0] CR2: 0000557d5f367058 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 661.946475][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 661.946485][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 661.946496][ C0] Call Trace: [ 661.946502][ C0] [ 661.946508][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 661.946526][ C0] ? read_lock_is_recursive+0x10/0x10 [ 661.946554][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 661.946572][ C0] ? nmi_handle+0x25/0x440 [ 661.946607][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 661.946633][ C0] ? nmi_handle+0x12e/0x440 [ 661.946659][ C0] ? nmi_handle+0x25/0x440 [ 661.946685][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 661.946706][ C0] ? default_do_nmi+0x62/0x150 [ 661.946724][ C0] ? exc_nmi+0xa8/0x100 [ 661.946741][ C0] ? end_repeat_nmi+0x16/0x31 [ 661.946769][ C0] ? __get_immv32+0x4a/0x350 [ 661.946786][ C0] ? insn_decode+0x377/0x500 [ 661.946802][ C0] ? insn_decode+0x395/0x500 [ 661.946826][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 661.946848][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 661.946875][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 661.946897][ C0] [ 661.946901][ C0] [ 661.946906][ C0] insn_decode+0x395/0x500 [ 661.946925][ C0] ? kmem_cache_alloc_node+0x62/0x310 [ 661.946947][ C0] __jump_label_patch+0xe4/0x440 [ 661.946964][ C0] ? kmem_cache_alloc_node+0x62/0x310 [ 661.946986][ C0] ? arch_jump_label_transform_queue+0xd0/0xd0 [ 661.947009][ C0] ? kmem_cache_alloc_node+0x62/0x310 [ 661.947028][ C0] ? kmem_cache_alloc_node+0x71/0x310 [ 661.947048][ C0] ? kmem_cache_alloc_node+0x67/0x310 [ 661.947069][ C0] ? static_key_disable_cpuslocked+0x97/0x1b0 [ 661.947094][ C0] ? mutex_lock_nested+0x10/0x10 [ 661.947114][ C0] arch_jump_label_transform_queue+0x4a/0xd0 [ 661.947134][ C0] __jump_label_update+0x177/0x3a0 [ 661.947161][ C0] static_key_disable_cpuslocked+0xce/0x1b0 [ 661.947185][ C0] static_key_disable+0x16/0x20 [ 661.947206][ C0] toggle_allocation_gate+0x3e0/0x480 [ 661.947229][ C0] ? show_object+0xa0/0xa0 [ 661.947250][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 661.947277][ C0] ? print_irqtrace_events+0x210/0x210 [ 661.947300][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 661.947323][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 661.947345][ C0] ? process_one_work+0x7a9/0x11d0 [ 661.947365][ C0] process_one_work+0x8a9/0x11d0 [ 661.947392][ C0] ? worker_detach_from_pool+0x260/0x260 [ 661.947415][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 661.947436][ C0] ? kthread_data+0x4e/0xc0 [ 661.947463][ C0] ? wq_worker_running+0x97/0x190 [ 661.947480][ C0] worker_thread+0xa47/0x1200 [ 661.947506][ C0] ? _raw_spin_unlock+0x40/0x40 [ 661.947533][ C0] kthread+0x28d/0x320 [ 661.947547][ C0] ? worker_clr_flags+0x190/0x190 [ 661.947566][ C0] ? kthread_blkcg+0xd0/0xd0 [ 661.947582][ C0] ret_from_fork+0x1f/0x30 [ 661.947613][ C0] [ 661.956421][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 661.956442][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 661.956466][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 661.956480][ T28] Call Trace: [ 661.956488][ T28] [ 661.956497][ T28] dump_stack_lvl+0x1e3/0x2cb [ 661.956542][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 661.956579][ T28] ? panic+0x764/0x764 [ 661.956617][ T28] ? llist_add_batch+0x160/0x1d0 [ 661.956657][ T28] ? vscnprintf+0x59/0x80 [ 661.956688][ T28] panic+0x318/0x764 [ 661.956716][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 661.956742][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 661.956775][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 661.956797][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 661.956824][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 661.956852][ T28] watchdog+0xfc7/0xfd0 [ 661.956889][ T28] ? watchdog+0x1f8/0xfd0 [ 661.956925][ T28] kthread+0x28d/0x320 [ 661.956946][ T28] ? hungtask_pm_notify+0x50/0x50 [ 661.956975][ T28] ? kthread_blkcg+0xd0/0xd0 [ 661.956998][ T28] ret_from_fork+0x1f/0x30 [ 661.957044][ T28] [ 661.958788][ T28] Kernel Offset: disabled [ 662.481802][ T28] Rebooting in 86400 seconds..