last executing test programs: 7m18.804020186s ago: executing program 1 (id=456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 7m18.467471241s ago: executing program 1 (id=459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393", 0xf0}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000900)=""/131, 0x83}], 0x2}, 0x7ffd}], 0x1, 0x40002123, 0x0) 7m17.430054341s ago: executing program 1 (id=467): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0xffffffdd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32], 0x4c}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 7m16.043775702s ago: executing program 1 (id=473): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 7m15.842027151s ago: executing program 1 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}]}}, @TCA_CHAIN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48848}, 0x20000800) 7m13.329962025s ago: executing program 1 (id=484): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 6m57.592366766s ago: executing program 32 (id=484): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 4m36.831887785s ago: executing program 2 (id=810): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f00000003c0)=""/182, &(0x7f00000000c0)=0xb6) r6 = gettid() rt_tgsigqueueinfo(r4, r6, 0x2b, &(0x7f0000000d80)={0x400018, 0x0, 0x7}) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x3, 0x5003) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000000)={0x0, 0xffffffe9, 0x0, 0x515f3157, 0x0, "78d01f00000000000000000000000000004000"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r9, &(0x7f0000002080)={0x2020}, 0x2020) r10 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r10}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r10}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000180)=0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xd4, 0x19, 0x200, 0x70bd2c, 0x25dfdbfc, {{@in6=@mcast2, @in6=@private1, 0x4e24, 0x1a, 0x4e20, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, r12}, {0x3bce, 0xcdd, 0x0, 0x6, 0x907, 0xff, 0x3, 0x10001}, {0x7, 0x45e, 0x1, 0xf}, 0x4, 0x0, 0x0, 0x1, 0x3}, [@srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @extra_flags={0x8, 0x18, 0xeb}]}, 0xd4}, 0x1, 0x0, 0x0, 0x90}, 0x4000101) close_range(r11, 0xffffffffffffffff, 0x0) 4m35.382129559s ago: executing program 2 (id=811): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000095000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd, 0x4, {}, 0x1, 0x4}) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffb, r7, 0x1) r8 = socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x7}) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000001780)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) 4m34.277967971s ago: executing program 2 (id=812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000006f070000000fc653", @ANYBLOB="78e5c8391b87af1b7577f39eaa2b076cb0a4bc75b90af9d0d1b760afd75085de9adb2e63d5574eb595d2c7935f9f8d86498236d29548766e02277e625ed7d63bf30ed6afae9df78b788a54fab6171b53bfc17545e59a0baecbd019f9800e39db32be915f8b13fae7b5f7bd0b2ea669ba801dcb9300410b267812f5d2a56667c03f7335c94162047e81d922f0b7b9ac30a130578f958dbd6d9180601b69aa922c888bc19075e6b465698580d8b2a491456a8162d9c6da42d07709852d51c82b4f85cbea2ea0b13b4b5ad896106e3c7d48374d78", @ANYRES32, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xa) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000003c0)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}, 0x7ff}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000"], 0x48) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 4m33.611692514s ago: executing program 2 (id=813): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 4m33.321305123s ago: executing program 2 (id=814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETNSID={0x14, 0x5a, 0x300, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r2, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000063c0)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003980)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x27}}}}}, 0x20}}, 0x4000) 4m31.648202616s ago: executing program 2 (id=821): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = inotify_init1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) inotify_add_watch(r1, &(0x7f0000000340)='./file0\x00', 0x203) ftruncate(r2, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb1, 0x20000) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0) 4m16.014486795s ago: executing program 33 (id=821): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = inotify_init1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) inotify_add_watch(r1, &(0x7f0000000340)='./file0\x00', 0x203) ftruncate(r2, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb1, 0x20000) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0) 2m45.812662209s ago: executing program 3 (id=1065): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x624, &(0x7f0000000000)="$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") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100001400000000000002000000080003002b2ecefb81beb32c05c56d407c66704c74e8ae67c7464e24767d841dd54d3c7fa551c4465e46cea26183c221f02a48ce12f2b431ca9a4d8866a0ec20a70009eedf46ed0b4b4f09d136c2cedd2c2f2e038c3db42bc0ab94f7a689620ef3fd154976f3ea8d7c0539d9cd52dac2", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c40)) 2m41.634586955s ago: executing program 3 (id=1077): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) r1 = eventfd2(0xfffffff7, 0x801) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x1, r1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) r4 = syz_open_dev$dri(&(0x7f0000001400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xffffffff, 0x1, 0x3}) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x10001, 0x8d40) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r8 = getuid() r9 = getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="e17f6ee9ce2b89c26658d58a1812a6e2b440e038d0f4e99b86b78afed1aec06e8c7c7764839b00c11156eb679ba04c116dc7fa281c23624f922af64433331138fd2a6aa6aa6b453f2a62512baecfc39b1c36cf25ec31361b693b530b4772b6580b56cd4f20505c3e5fef6058", 0x6c}], 0x6, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [r3, r0, r2, 0xffffffffffffffff, r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, r3]}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, r2, r0, r4, r2, r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}], 0xb0, 0x20040005}, 0x20000001) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2m39.541851646s ago: executing program 3 (id=1081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 2m37.531959335s ago: executing program 3 (id=1086): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000a0034000202020202020000080026006c0900"], 0x54}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 2m37.148269043s ago: executing program 3 (id=1088): mkdir(&(0x7f0000000080)='./file1\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x9) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000065c0)=ANY=[@ANYBLOB='discard=0x0000000000000004,quota,errors=continue,discard=0x0000000000000004,errors=continue,usrquota,nodiscard\x00nodiscard,resize=0x0000000000010000,umask=0x0000000000000002,quota,iocharset=koi8-u,resize=0x0000000000008045,resize,fsmagic=0x00000000000003ff,uid>', @ANYRESDEC, @ANYBLOB="2c6673632cf8ffe300000000060004000100000000"], 0x1, 0x61bc, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$nci(r1, &(0x7f0000000a80)=""/218, 0xda) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x42, 0x0, &(0x7f0000000540)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r5}, './file0\x00'}) 2m34.042697826s ago: executing program 3 (id=1097): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b627", 0xb9}], 0x1}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="05000000"], 0x20}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r8 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x1) 2m18.53703012s ago: executing program 34 (id=1097): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b627", 0xb9}], 0x1}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="05000000"], 0x20}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r8 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x1) 2m16.551982297s ago: executing program 6 (id=1157): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 2m16.197771101s ago: executing program 6 (id=1159): socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b627", 0xb9}], 0x1}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="05000000"], 0x20}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) 2m15.038510023s ago: executing program 6 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="95"], 0x28}, 0x1, 0x0, 0x0, 0x240000d4}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21908002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0xffffffffffffffff) r5 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r5) r6 = socket(0x10, 0x2, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x0, 0xa}}}, 0x24}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66646e6f3d000000005fd0b8e6a4cd9619b117d2000000000000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYRESHEX=r7]) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r7, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x4, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x3ed}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="e071c360e504", @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, 0xff000000, 0x0, 0xff, 0x1, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'ipvlan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'batadv_slave_1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) 2m14.649827192s ago: executing program 6 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4048080) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xdc, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xaa, 0xa8, @random="52b34bd0ec30f560145325f64358ead616394ffef0137b1345e94b35ca4062681f497d257d278ed963bc63d58033b615ecb01fa55eb8ddac21e8a371c8e0e3f3626e0522ad057da915c36b8db1575a7ac8e576ee209a9ec14bdb9268275f17468f20c365042fce163c138cc8c24152395b994b7d4e1f22172f67813c5892435f420e2d258a1146bf7d456985fde8c32d79e5635fb199a343d7eed3df1c3ddcef93f356e7ba35"}, @handle=@pci={{0x8}, {0x11}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40001}, 0xc005) 2m13.470299849s ago: executing program 6 (id=1167): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYBLOB="040046000a0034000202020202020000080026006c090000200051801c"], 0x54}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 2m12.609465891s ago: executing program 6 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001"], 0xfc}}, 0x0) 1m57.408914902s ago: executing program 35 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001"], 0xfc}}, 0x0) 1m2.334882965s ago: executing program 0 (id=1359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="95"], 0x28}, 0x1, 0x0, 0x0, 0x240000d4}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21908002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) fstat(r0, &(0x7f0000000500)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x4, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x3ed}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="e071c360e504", @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, 0xff000000, 0x0, 0xff, 0x1, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'ipvlan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'batadv_slave_1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) 1m0.835252421s ago: executing program 0 (id=1362): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 58.979052865s ago: executing program 8 (id=1368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 57.969731647s ago: executing program 8 (id=1370): socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b627", 0xb9}], 0x1}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="05000000"], 0x20}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r8 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x1) 56.644444318s ago: executing program 8 (id=1375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_mount_image$omfs(&(0x7f0000009e00), &(0x7f0000000000)='./file1\x00', 0x2400881, &(0x7f0000000040)={[{@fmask={'fmask', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x1000000000000000}}, {}, {@dmask={'dmask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x3}}, {@fmask={'fmask', 0x3d, 0x5}}, {@dmask={'dmask', 0x3d, 0x3}}, {}, {@umask}, {}]}, 0xfd, 0x9e28, &(0x7f0000013c80)="$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") 55.611179971s ago: executing program 8 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x1}, 0x14}}, 0x0) 55.328989568s ago: executing program 8 (id=1379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETNSID={0x14, 0x5a, 0x300, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000063c0)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003980)={0x20, r4, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x27}}}}}, 0x20}}, 0x4000) 54.86146171s ago: executing program 0 (id=1381): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r0, 0x84, 0x7c, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) pipe(&(0x7f0000000380)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000014006b03000000d86e6c1d0002845da60600000000000000e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000002000000000000000000004d050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 54.185031503s ago: executing program 8 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001"], 0xfc}}, 0x0) 52.496960062s ago: executing program 0 (id=1384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="95"], 0x28}, 0x1, 0x0, 0x0, 0x240000d4}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21908002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x4, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x3ed}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="e071c360e504", @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, 0xff000000, 0x0, 0xff, 0x1, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'ipvlan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'batadv_slave_1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) 52.080226417s ago: executing program 0 (id=1387): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 51.132659184s ago: executing program 0 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001"], 0xfc}}, 0x0) 39.081706993s ago: executing program 36 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001"], 0xfc}}, 0x0) 36.015360714s ago: executing program 37 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001"], 0xfc}}, 0x0) 12.578073561s ago: executing program 7 (id=1478): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) kexec_load(0x0, 0x0, 0x0, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) geteuid() r4 = fsopen(&(0x7f00000002c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', r5, r2, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$vim2m(&(0x7f0000000280), 0x8a6, 0x2) sendto$inet(r3, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000090000001d006c62f980ad8a3feea6f2ccce9042198e00174020000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11.186100114s ago: executing program 7 (id=1480): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x30008c0, &(0x7f0000000400)={[{@file_umask={'file_umask', 0x3d, 0x1001}}, {@dir_umask}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2fe, &(0x7f00000004c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) mkdir(0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 10.529701503s ago: executing program 7 (id=1483): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000280)=ANY=[@ANYBLOB='nonumtail=0,checkTstrict,iocharset=cp865,shortname=win95,codepage=949,uni_xlYte=0,allow_utime=00000000000000000177777,sHortname=mixed,shortname=lowur,uni_xlate=1,short8=0,\x00'/186], 0x26, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") mount$nfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000540)={0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000006000000000000002f5431cbf4effb9a9396e9ac9277bcc34f320bd255209bfb2ec085863ac62624b427938c0e2ef2f04eaa83cb9a8c92822e5d03b10fae6ce2be7c705eacd0a0c5e2a4a8e873a32039e5b45644f8110a44741c431dfeb221c6d252a7363b8aeb16f09a37019a5440e08ababa0e062ae343fc6c3a63d84d9f4a55c92e9a0ebb4c66674300"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000400000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x2, &(0x7f00000000c0)={&(0x7f0000000300)=""/138, 0x8e}) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x3, 0xff, 0x5a, 0x0, 0x1, 0x10, 0x7, 0x8, 0xfc, 0xf5, 0x9, 0x20}, 0xe) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffd, 0x18280) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, 0x0) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000480)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) 8.570468288s ago: executing program 5 (id=1485): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb2, &(0x7f0000000540)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x21, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x69, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "743401bd61c77d756d4103c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x2}, {0x0, 0xa, "6580a5e97612fe86"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f43d000900"/16}]}, @cipso={0x86, 0x6, 0x20}]}}, "28f05509"}}}}}, 0x0) 8.322899419s ago: executing program 7 (id=1486): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000240)={0xa20000, 0xe, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xa10907, 0x574a, '\x00', @p_u32=0x0}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$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") r2 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x44, 0x6, 0x520, 0x98, 0x98, 0x3b8, 0x98, 0x188, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xc93f35ddc4ae1e35}}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, '\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) 8.287674128s ago: executing program 5 (id=1487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x39e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 7.926055838s ago: executing program 5 (id=1488): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.591375182s ago: executing program 5 (id=1489): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x624, &(0x7f0000000000)="$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") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100001400000000000002000000080003002b2ecefb81beb32c05c56d407c66704c74e8ae67c7464e24767d841dd54d3c7fa551c4465e46cea26183c221f02a48ce12f2b431ca9a4d8866a0ec20a70009eedf46ed0b4b4f09d136c2cedd2c2f2e038c3db42bc0ab94f7a689620ef3fd154976f3ea8d7c0539d9cd52dac2", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c40)) 6.394049652s ago: executing program 4 (id=1491): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x30008c0, &(0x7f0000000400)={[{@file_umask={'file_umask', 0x3d, 0x1001}}, {@dir_umask}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2fe, &(0x7f00000004c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) mkdir(0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5.954065507s ago: executing program 4 (id=1492): r0 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2030010, &(0x7f0000000040)=ANY=[], 0x3, 0x661, &(0x7f0000002a80)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) statx(r0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x80, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a0000002b000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/99], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x1, 0x14fe, &(0x7f0000001580)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x110) syz_read_part_table(0x104f, &(0x7f0000000000)="$eJzsz7utwkAUBNDxs57BrVAAMQEdIPfjeiiGUshJuAh7oQQgOCfZz51ZacNX7TYZMl7+lsM2GZPDa1ZVQ9su8y7J6d08pvoMdU/+09+WUDfXqkWehVz37elkmtf7tvSZzh/4IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8vEcAAAD//5tZFAU=") 4.57220993s ago: executing program 7 (id=1493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000480)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@discard_sync}, {@datacow}, {@ref_verify}, {@datacow}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@ssd_spread}, {@datasum}, {@barrier}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") sched_setscheduler(0x0, 0x6, &(0x7f0000000380)=0x5) io_setup(0x2, &(0x7f00000001c0)=0x0) r3 = eventfd(0xf58) io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x802b, r1, &(0x7f0000000600)="ceadd11243732beab8fadea5432827ab99ce22ff512b4394cf94366600e04961da3e2c0000000000002f183f8b09a32c29a9633d85f630a1b4937d9e8ba0959138091a0a6d5f50c29388a4d763b9e2", 0x4f, 0xffffffffffff0004, 0x0, 0x2, r3}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x50, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a0004"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x9, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r8, 0x0, 0x0, 0x1001f0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r10 = open(&(0x7f0000000080)='./bus\x00', 0x183182, 0x0) sendfile(r9, r10, 0x0, 0x12000) r11 = open(&(0x7f0000000040)='./bus\x00', 0x64142, 0xdd) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000180)={0x10, 0x1}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r9, 0x3b8b, &(0x7f0000000340)={0x10, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x0, 0x4e, 0xffffffffffffff4d, 0x2, 0x0, 0x0, @void, @value}, 0x28) sendfile(r11, r11, 0x0, 0x1000200201005) 4.245890354s ago: executing program 4 (id=1494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x3) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000100)) keyctl$get_persistent(0x16, 0x0, r1) r2 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r2, 0x80000001, 0x800, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) unshare(0x40600) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x44000, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 3.553566019s ago: executing program 4 (id=1495): socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b627", 0xb9}], 0x1}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="05000000"], 0x20}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) 1.158091136s ago: executing program 7 (id=1496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000006f070000000fc653", @ANYBLOB="78e5c8391b87af1b7577f39eaa2b076cb0a4bc75b90af9d0d1b760afd75085de9adb2e63d5574eb595d2c7935f9f8d86498236d29548766e02277e625ed7d63bf30ed6afae9df78b788a54fab6171b53bfc17545e59a0baecbd019f9800e39db32be915f8b13fae7b5f7bd0b2ea669ba801dcb9300410b267812f5d2a56667c03f7335c94162047e81d922f0b7b9ac30a130578f958dbd6d9180601b69aa922c888bc19075e6b465698580d8b2a491456a8162d9c6da42d07709852d51c82b4f85cbea2ea0b13b4b5ad896106e3c7d48374d78", @ANYRES32, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xa) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000"], 0x48) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 1.127997542s ago: executing program 4 (id=1497): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f00000000c0), 0x0) 1.080311875s ago: executing program 5 (id=1498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000006f070000000fc653", @ANYBLOB="78e5c8391b87af1b7577f39eaa2b076cb0a4bc75b90af9d0d1b760afd75085de9adb2e63d5574eb595d2c7935f9f8d86498236d29548766e02277e625ed7d63bf30ed6afae9df78b788a54fab6171b53bfc17545e59a0baecbd019f9800e39db32be915f8b13fae7b5f7bd0b2ea669ba801dcb9300410b267812f5d2a56667c03f7335c94162047e81d922f0b7b9ac30a130578f958dbd6d9180601b69aa922c888bc19075e6b465698580d8b2a491456a8162d9c6da42d07709852d51c82b4f85cbea2ea0b13b4b5ad896106e3c7d48374d78", @ANYRES32, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xa) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000"], 0x48) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 857.801226ms ago: executing program 4 (id=1499): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000100)={0x901, 0x80, 0x4, {0x2, @sliced={0x9, [0xda34, 0x9, 0x0, 0x3, 0x4, 0x6, 0x7, 0x6, 0x0, 0x2, 0x8, 0x8063, 0x0, 0xb, 0x7, 0x54c, 0xc8, 0x2, 0x3, 0x3, 0x0, 0x0, 0x1, 0x4, 0x8001, 0x7, 0xfffb, 0x6, 0x5, 0x5000, 0x1a01, 0x80, 0x0, 0x80, 0x3, 0x0, 0x8, 0x6, 0x5, 0x8, 0x3, 0x9, 0x3, 0x8, 0x0, 0x0, 0x5, 0xe1f1], 0xdbb}}, 0x80}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x5c, 0x20000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c100006000000000000000700000000602c4c62"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x2400, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x80, 0xbbba, 0x0, 0x20, 0xffffffff, {}, {0xaa9d, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x80000, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) io_submit(0x0, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 0s ago: executing program 5 (id=1500): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x30008c0, &(0x7f0000000400)={[{@file_umask={'file_umask', 0x3d, 0x1001}}, {@dir_umask}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2fe, &(0x7f00000004c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) mkdir(0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): t 6081 - 0 [ 551.665899][T10144] XFS (loop4): Ending clean mount [ 551.678832][T10144] XFS (loop4): Quotacheck needed: Please wait. [ 551.772215][T10144] XFS (loop4): Quotacheck: Done. [ 552.479346][T10158] could not allocate digest TFM handle poly1305 [ 552.728392][ T5852] Bluetooth: hci4: command tx timeout [ 552.740906][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.748152][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.798642][ T5837] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 552.836522][T10097] bridge_slave_0: entered allmulticast mode [ 552.852516][T10097] bridge_slave_0: entered promiscuous mode [ 552.872261][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.127602][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.136157][T10097] bridge_slave_1: entered allmulticast mode [ 553.157145][T10097] bridge_slave_1: entered promiscuous mode [ 553.263168][T10167] xt_policy: output policy not valid in PREROUTING and INPUT [ 553.686993][ T968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.365752][T10170] loop5: detected capacity change from 0 to 32768 [ 554.463777][T10170] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 1791,journal_flush_disabled,fsck,fix_errors=no,norecovery,version_upgrade=incompatible [ 554.463777][T10170] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 554.500803][T10170] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 554.509144][T10170] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 554.517184][T10170] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 554.517184][T10170] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 554.539260][T10170] bcachefs (loop5): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap [ 554.539260][T10170] [ 554.595469][T10170] bcachefs (loop5): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 554.611988][T10170] bcachefs (loop5): btree node read error at btree freespace level 0/0 [ 554.612009][T10170] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 4398046511104: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 554.612025][T10170] loop5 node offset 0/32 bset u64s 0: checksum error, type none: got should be [ 554.612037][T10170] flagging btree freespace lost data [ 554.612047][T10170] ret fsck_errors_not_fixed [ 554.656665][T10170] bcachefs (loop5): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 554.678636][T10170] bcachefs (loop5): check_topology... done [ 554.685828][T10170] bcachefs (loop5): accounting_read... done [ 554.706454][T10170] bcachefs (loop5): alloc_read... done [ 554.712637][T10170] bcachefs (loop5): snapshots_read... done [ 554.719111][T10170] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 554.728899][T10170] bcachefs (loop5): done starting filesystem [ 554.773608][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.808946][ T9983] Bluetooth: hci4: command tx timeout [ 554.827630][ T968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.881095][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.948602][ T8318] bcachefs (loop5): shutting down [ 555.023809][ T8318] bcachefs (loop5): shutdown complete [ 555.032013][T10097] team0: Port device team_slave_0 added [ 555.151500][ T968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.173411][T10176] loop3: detected capacity change from 0 to 40427 [ 555.199075][T10176] F2FS-fs (loop3): build fault injection type: 0x7 [ 555.257106][T10097] team0: Port device team_slave_1 added [ 555.329044][T10176] F2FS-fs (loop3): invalid crc value [ 555.548380][ T5937] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 555.578411][T10189] loop0: detected capacity change from 0 to 32768 [ 555.580962][T10176] F2FS-fs (loop3): Start checkpoint disabled! [ 555.627980][T10176] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 555.662701][T10176] syz.3.882: attempt to access beyond end of device [ 555.662701][T10176] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 555.701960][T10176] syz.3.882: attempt to access beyond end of device [ 555.701960][T10176] loop3: rw=2049, sector=77960, nr_sectors = 848 limit=40427 [ 555.717261][T10176] syz.3.882: attempt to access beyond end of device [ 555.717261][T10176] loop3: rw=2049, sector=77840, nr_sectors = 120 limit=40427 [ 555.738860][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 555.764945][ T5937] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 555.797152][ T5937] usb 5-1: config 0 has no interface number 0 [ 555.814879][ T5937] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 555.831913][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.840487][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.849155][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.875523][ T5937] usb 5-1: Product: syz [ 555.882626][ T5937] usb 5-1: Manufacturer: syz [ 555.887784][ T5937] usb 5-1: SerialNumber: syz [ 555.895150][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.911285][ T5937] usb 5-1: config 0 descriptor?? [ 555.937954][ T5937] smsc95xx v2.0.0 [ 555.948121][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.964225][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.994718][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.018159][ T13] kworker/u8:1: attempt to access beyond end of device [ 556.018159][ T13] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 556.042872][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc1-next-20250611-syzkaller #0 PREEMPT(full) [ 556.042902][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.042916][ T13] Workqueue: writeback wb_workfn (flush-7:3) [ 556.042951][ T13] Call Trace: [ 556.042960][ T13] [ 556.042969][ T13] dump_stack_lvl+0x189/0x250 [ 556.042995][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.043010][ T13] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 556.043032][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 556.043053][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 556.043075][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 556.043109][ T13] ? f2fs_hw_is_readonly+0x39b/0x470 [ 556.043140][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 556.043172][ T13] f2fs_write_end_io+0x495/0x810 [ 556.043196][ T13] ? blkg_put+0x22/0x240 [ 556.043239][ T13] __submit_merged_bio+0x27a/0x6a0 [ 556.043271][ T13] __submit_merged_write_cond+0x255/0x530 [ 556.043304][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 556.043379][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 556.043401][ T13] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.043448][ T13] ? rcu_is_watching+0x15/0xb0 [ 556.043577][ T13] ? unwind_next_frame+0xa5/0x2390 [ 556.043602][ T13] ? unwind_next_frame+0x19ae/0x2390 [ 556.043631][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 556.043657][ T13] do_writepages+0x32b/0x550 [ 556.043693][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 556.043711][ T13] ? writeback_sb_inodes+0x384/0x1010 [ 556.043750][ T13] __writeback_single_inode+0x145/0xff0 [ 556.043780][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 556.043809][ T13] writeback_sb_inodes+0x6c7/0x1010 [ 556.043873][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 556.043960][ T13] ? rcu_is_watching+0x15/0xb0 [ 556.043993][ T13] wb_writeback+0x43b/0xaf0 [ 556.044031][ T13] ? queue_io+0x341/0x590 [ 556.044063][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 556.044116][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.044147][ T13] wb_workfn+0x409/0xef0 [ 556.044192][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 556.044225][ T13] ? __lock_acquire+0xab9/0xd20 [ 556.044267][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 556.044303][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.044323][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 556.044348][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 556.044379][ T13] process_scheduled_works+0xade/0x17b0 [ 556.044450][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.044505][ T13] worker_thread+0x8a0/0xda0 [ 556.044563][ T13] kthread+0x711/0x8a0 [ 556.044589][ T13] ? __pfx_worker_thread+0x10/0x10 [ 556.044607][ T13] ? __pfx_kthread+0x10/0x10 [ 556.044633][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.044653][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.044675][ T13] ? __pfx_kthread+0x10/0x10 [ 556.044699][ T13] ret_from_fork+0x3f9/0x770 [ 556.044731][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 556.044768][ T13] ? __switch_to_asm+0x39/0x70 [ 556.044787][ T13] ? __switch_to_asm+0x33/0x70 [ 556.044804][ T13] ? __pfx_kthread+0x10/0x10 [ 556.044829][ T13] ret_from_fork_asm+0x1a/0x30 [ 556.044868][ T13] [ 556.044877][ T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 556.169895][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 556.225787][T10197] loop4: detected capacity change from 0 to 2048 [ 556.373906][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 556.537638][T10097] hsr_slave_0: entered promiscuous mode [ 556.556297][T10097] hsr_slave_1: entered promiscuous mode [ 556.586630][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 556.631474][ T5937] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 556.639674][T10189] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 1791,journal_flush_disabled,fsck,fix_errors=no,norecovery,version_upgrade=incompatible [ 556.639674][T10189] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 556.639718][T10189] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 556.639847][T10189] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 556.639985][T10189] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 556.639985][T10189] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 556.640095][T10189] bcachefs (loop0): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap [ 556.640095][T10189] [ 556.684444][T10189] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 556.762830][T10189] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 556.762861][T10189] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 4398046511104: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 556.762878][T10189] loop0 node offset 0/32 bset u64s 0: checksum error, type none: got should be [ 556.762892][T10189] flagging btree freespace lost data [ 556.762902][T10189] ret fsck_errors_not_fixed [ 556.807876][T10189] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 556.826390][T10189] bcachefs (loop0): check_topology... done [ 556.834101][T10189] bcachefs (loop0): accounting_read... done [ 556.875205][T10189] bcachefs (loop0): alloc_read... done [ 556.881375][T10189] bcachefs (loop0): snapshots_read... done [ 556.887883][T10189] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 556.897834][T10189] bcachefs (loop0): done starting filesystem [ 557.658478][ T5937] usb 5-1: USB disconnect, device number 17 [ 558.126887][ T5847] bcachefs (loop0): shutting down [ 558.388507][T10218] netlink: 'syz.3.886': attribute type 25 has an invalid length. [ 558.401821][ T5847] bcachefs (loop0): shutdown complete [ 558.499137][ T968] bridge_slave_1: left allmulticast mode [ 558.525206][ T968] bridge_slave_1: left promiscuous mode [ 558.558669][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.601640][ T968] bridge_slave_0: left allmulticast mode [ 558.637812][ T968] bridge_slave_0: left promiscuous mode [ 558.668687][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.682139][T10223] program syz.3.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.711856][T10223] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 559.496331][T10220] loop4: detected capacity change from 0 to 32768 [ 559.545704][T10220] xfs: Unknown parameter 'biosize' [ 560.345484][ T968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.374308][ T968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.399475][ T968] bond0 (unregistering): Released all slaves [ 560.483127][T10233] loop5: detected capacity change from 0 to 32768 [ 560.618244][T10233] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 561.372475][ T968] tipc: Left network mode [ 561.526304][T10097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 561.544755][T10233] XFS (loop5): Ending clean mount [ 561.562296][T10233] XFS (loop5): Quotacheck needed: Please wait. [ 561.758852][T10097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 561.789263][ T9946] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 561.808192][T10097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 561.867657][T10097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 561.939052][T10233] XFS (loop5): Quotacheck: Done. [ 562.006960][T10255] loop4: detected capacity change from 0 to 8192 [ 562.027363][T10255] vfat: Unknown parameter '/dev/nullb0' [ 562.089434][T10266] Cannot find add_set index 0 as target [ 562.100593][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 562.243733][ T9946] usb 4-1: unable to get BOS descriptor or descriptor too short [ 562.417805][ T9946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 562.617509][ T9946] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 562.631346][ T9946] usb 4-1: config 1 interface 0 has no altsetting 0 [ 562.668589][ T9946] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 562.711028][ T9946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.722683][ T9946] usb 4-1: Product: syz [ 562.722842][ T8318] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 562.726884][ T9946] usb 4-1: Manufacturer: syz [ 562.769371][ T9946] usb 4-1: SerialNumber: syz [ 562.907947][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 563.005225][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 563.138042][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.144868][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.175610][T10253] Cannot find del_set index 0 as target [ 563.198422][ T968] hsr_slave_0: left promiscuous mode [ 563.214782][T10271] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 563.278807][ T968] hsr_slave_1: left promiscuous mode [ 563.285277][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.337298][ T9946] smsusb:smsusb_probe: board id=8, interface number 0 [ 563.348393][ T968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.378744][ T9946] smsusb:smsusb_probe: Device initialized with return code -19 [ 563.391830][T10271] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 563.409387][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.416871][ T968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.547698][ T968] veth1_macvtap: left promiscuous mode [ 563.572560][ T9946] usb 4-1: USB disconnect, device number 9 [ 563.626903][ T968] veth0_macvtap: left promiscuous mode [ 563.644552][ T968] veth1_vlan: left promiscuous mode [ 563.664918][ T968] veth0_vlan: left promiscuous mode [ 566.027358][T10308] overlay: Unknown parameter 'obj_user' [ 566.617832][ T968] team0 (unregistering): Port device team_slave_1 removed [ 566.699524][ T968] team0 (unregistering): Port device team_slave_0 removed [ 567.127994][T10312] loop5: detected capacity change from 0 to 2048 [ 567.136224][T10312] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.267576][T10312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.365706][ T9983] Bluetooth: hci5: adv larger than maximum supported [ 567.365764][ T9983] Bluetooth: hci5: adv larger than maximum supported [ 567.373396][ T9983] Bluetooth: hci5: Unknown advertising packet type: 0x74 [ 567.380196][ T9983] Bluetooth: hci5: Malformed LE Event: 0x0d [ 568.423500][ T8318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.866112][T10332] loop3: detected capacity change from 0 to 2048 [ 568.880759][T10332] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 568.926034][T10332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 569.798974][T10334] loop5: detected capacity change from 0 to 4096 [ 569.828958][T10334] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 569.910655][ T1213] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 570.113111][ T1213] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 570.149513][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.206831][ T1213] usb 4-1: Product: syz [ 570.211462][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 570.233447][ T1213] usb 4-1: Manufacturer: syz [ 570.238114][ T1213] usb 4-1: SerialNumber: syz [ 570.422985][ T1213] usb 4-1: config 0 descriptor?? [ 570.492208][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 570.555107][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.595905][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.650779][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.682571][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 570.716819][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.767054][ T9] usb 1-1: config 0 descriptor?? [ 570.810187][T10344] syzkaller1: entered promiscuous mode [ 570.884544][T10344] syzkaller1: entered allmulticast mode [ 570.906637][T10097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.044069][T10097] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.084944][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.092212][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.117495][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.124876][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.313904][T10097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 571.324823][T10097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 571.555781][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 571.562496][T10354] loop5: detected capacity change from 0 to 2048 [ 571.562863][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 571.620136][ T9] usb 1-1: USB disconnect, device number 9 [ 571.924711][T10360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.936541][T10360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.992684][T10354] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 572.160867][ T1213] usb 4-1: Firmware version (0.0) predates our first public release. [ 572.249464][ T1213] usb 4-1: Please update to version 0.2 or newer [ 572.303767][T10364] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 573.062196][T10371] overlayfs: missing 'lowerdir' [ 573.363133][ T24] usb 4-1: USB disconnect, device number 10 [ 574.273342][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.458737][T10386] loop5: detected capacity change from 0 to 128 [ 574.466384][T10386] EXT4-fs (loop5): Test dummy encryption mode enabled [ 574.499951][T10386] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 574.519011][T10386] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 576.028039][T10417] xt_policy: output policy not valid in PREROUTING and INPUT [ 577.164467][T10097] veth0_vlan: entered promiscuous mode [ 577.251467][T10097] veth1_vlan: entered promiscuous mode [ 577.269355][ T5989] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 577.357769][T10097] veth0_macvtap: entered promiscuous mode [ 577.372702][T10424] loop4: detected capacity change from 0 to 2048 [ 577.402912][T10097] veth1_macvtap: entered promiscuous mode [ 577.460756][T10424] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 577.466281][T10097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.488372][ T5989] usb 4-1: Using ep0 maxpacket: 16 [ 577.504265][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.534311][T10097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.546669][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.591333][T10428] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 577.600098][T10097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.608343][ T5989] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.652936][T10097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.664205][T10097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.687397][ T5989] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 577.687602][T10097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.857336][T10430] overlayfs: missing 'lowerdir' [ 577.857558][ T8318] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.871877][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.879617][ T5989] usb 4-1: config 0 descriptor?? [ 578.630460][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.687598][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.790105][ T5989] usbhid 4-1:0.0: can't add hid device: -71 [ 578.796265][ T5989] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 578.848401][ T5989] usb 4-1: USB disconnect, device number 11 [ 578.939177][T10440] loop4: detected capacity change from 0 to 2048 [ 578.979893][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.987868][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.077764][T10440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.170322][T10454] FAULT_INJECTION: forcing a failure. [ 580.170322][T10454] name failslab, interval 1, probability 0, space 0, times 0 [ 580.210666][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.3.933 Not tainted 6.16.0-rc1-next-20250611-syzkaller #0 PREEMPT(full) [ 580.210695][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.210707][T10454] Call Trace: [ 580.210715][T10454] [ 580.210724][T10454] dump_stack_lvl+0x189/0x250 [ 580.210749][T10454] ? __pfx____ratelimit+0x10/0x10 [ 580.210775][T10454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.210802][T10454] ? __pfx__printk+0x10/0x10 [ 580.210831][T10454] ? ref_tracker_alloc+0x318/0x460 [ 580.210855][T10454] should_fail_ex+0x414/0x560 [ 580.210889][T10454] should_failslab+0xa8/0x100 [ 580.210912][T10454] kmem_cache_alloc_noprof+0x73/0x3c0 [ 580.210941][T10454] ? skb_clone+0x212/0x3a0 [ 580.210969][T10454] skb_clone+0x212/0x3a0 [ 580.210995][T10454] __netlink_deliver_tap+0x404/0x850 [ 580.211030][T10454] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.211050][T10454] netlink_deliver_tap+0x19c/0x1b0 [ 580.211071][T10454] netlink_unicast+0x72f/0x8d0 [ 580.211112][T10454] netlink_sendmsg+0x805/0xb30 [ 580.211143][T10454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.211166][T10454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 580.211195][T10454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.211220][T10454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.211241][T10454] __sock_sendmsg+0x21c/0x270 [ 580.211271][T10454] ____sys_sendmsg+0x505/0x830 [ 580.211297][T10454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.211329][T10454] ? import_iovec+0x74/0xa0 [ 580.211356][T10454] ___sys_sendmsg+0x21f/0x2a0 [ 580.211380][T10454] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.211443][T10454] ? __fget_files+0x2a/0x420 [ 580.211464][T10454] ? __fget_files+0x3a0/0x420 [ 580.211497][T10454] __x64_sys_sendmsg+0x19b/0x260 [ 580.211522][T10454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.211553][T10454] ? __pfx_ksys_write+0x10/0x10 [ 580.211580][T10454] ? rcu_is_watching+0x15/0xb0 [ 580.211604][T10454] ? do_syscall_64+0xbe/0x3b0 [ 580.211634][T10454] do_syscall_64+0xfa/0x3b0 [ 580.211662][T10454] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.211685][T10454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.211705][T10454] ? clear_bhb_loop+0x60/0xb0 [ 580.211730][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.211748][T10454] RIP: 0033:0x7fbb3218e929 [ 580.211767][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.211791][T10454] RSP: 002b:00007fbb32f65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.211813][T10454] RAX: ffffffffffffffda RBX: 00007fbb323b5fa0 RCX: 00007fbb3218e929 [ 580.211828][T10454] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 580.211840][T10454] RBP: 00007fbb32f65090 R08: 0000000000000000 R09: 0000000000000000 [ 580.211853][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.211864][T10454] R13: 0000000000000000 R14: 00007fbb323b5fa0 R15: 00007fff8741b728 [ 580.211898][T10454] [ 580.628410][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 580.778464][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 580.786576][ T9] usb 5-1: config 8 has an invalid interface number: 208 but max is 0 [ 580.795351][ T9] usb 5-1: config 8 has no interface number 0 [ 580.802024][ T9] usb 5-1: config 8 interface 208 has no altsetting 0 [ 580.811961][ T9] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=59.d1 [ 580.822208][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.831047][ T9] usb 5-1: Product: syz [ 580.835363][ T9] usb 5-1: Manufacturer: syz [ 580.840345][ T9] usb 5-1: SerialNumber: syz [ 582.017809][ T5989] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 582.038229][T10469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.935'. [ 582.107946][ T9] usbhid 5-1:8.208: couldn't find an input interrupt endpoint [ 582.515267][ T9] usb 5-1: USB disconnect, device number 18 [ 582.538616][ T5989] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 582.555897][ T5989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.639271][ T5989] usb 6-1: config 0 has no interface number 0 [ 582.671341][ T5989] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 582.701044][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.261011][ T5989] usb 6-1: Product: syz [ 583.275540][ T5989] usb 6-1: Manufacturer: syz [ 583.285679][ T5989] usb 6-1: SerialNumber: syz [ 583.316882][ T5989] usb 6-1: config 0 descriptor?? [ 583.327090][ T5989] hub 6-1:0.31: bad descriptor, ignoring hub [ 583.343686][ T5989] hub 6-1:0.31: probe with driver hub failed with error -5 [ 583.359147][ T5989] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 583.365829][ T5989] usb 6-1: No valid video chain found. [ 583.407198][T10457] delete_channel: no stack [ 583.824154][T10486] program //( is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.621854][T10486] netlink: 212408 bytes leftover after parsing attributes in process `//('. [ 584.636029][T10486] netlink: zone id is out of range [ 584.644697][T10486] netlink: zone id is out of range [ 584.652547][T10486] netlink: zone id is out of range [ 584.664289][T10488] loop0: detected capacity change from 0 to 2048 [ 584.671461][T10486] netlink: get zone limit has 8 unknown bytes [ 584.679033][T10494] loop6: detected capacity change from 0 to 1024 [ 584.801261][ T5989] usb 6-1: USB disconnect, device number 3 [ 584.888701][T10488] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 584.952628][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 585.549427][T10494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.704547][T10502] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 585.939027][T10504] overlayfs: missing 'lowerdir' [ 586.317159][T10494] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 588.952993][T10097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.139189][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 590.383990][T10558] loop6: detected capacity change from 0 to 32768 [ 590.451994][ T5937] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 590.452799][T10558] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 590.468165][T10558] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 590.608497][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 590.652537][ T5937] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 590.711706][T10558] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 590.718541][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.742317][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 590.761652][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 590.789678][ T5937] usb 1-1: config 0 descriptor?? [ 591.193443][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 431ms [ 591.242732][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 591.249337][T10558] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 591.251849][ T5937] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x5 [ 591.648193][ T5937] koneplus 0003:1E7D:2E22.0004: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 591.649506][T10584] netlink: 56 bytes leftover after parsing attributes in process `syz.5.959'. [ 592.014597][ T5937] usb 1-1: USB disconnect, device number 10 [ 592.348042][T10585] fido_id[10585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 592.464432][T10553] loop4: detected capacity change from 0 to 40427 [ 592.519833][T10553] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 592.590242][T10553] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 592.805963][T10553] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4) [ 594.091004][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 594.195365][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.963'. [ 594.299035][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 594.416479][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.738364][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.832081][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 594.888478][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 594.939086][ T9] usb 5-1: Product: syz [ 594.943323][ T9] usb 5-1: Manufacturer: syz [ 595.041560][ T9] hub 5-1:4.0: USB hub found [ 595.392979][T10594] loop0: detected capacity change from 0 to 32768 [ 595.425283][ T9] hub 5-1:4.0: 2 ports detected [ 595.704458][T10594] read_mapping_page failed! [ 595.996767][T10594] jfs_mount: Failed to read AGGREGATE_I [ 596.018496][T10594] Mount JFS Failure: -5 [ 596.648593][ T9] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 596.655558][ T9] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 597.520480][T10634] loop6: detected capacity change from 0 to 128 [ 597.527808][T10634] omfs: Bad value for 'umask' [ 597.631150][ T24] usb 5-1: USB disconnect, device number 19 [ 598.406349][T10656] netlink: 30 bytes leftover after parsing attributes in process `syz.6.977'. [ 598.565906][ C1] sd 0:0:1:0: [sda] tag#2069 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 598.576402][ C1] sd 0:0:1:0: [sda] tag#2069 CDB: Write(6) 0a 10 00 00 ff ff ff ff 00 00 00 00 [ 598.600077][T10657] 9pnet_fd: Insufficient options for proto=fd [ 599.399245][T10637] loop5: detected capacity change from 0 to 32768 [ 602.203968][T10700] loop4: detected capacity change from 0 to 2048 [ 602.294186][T10700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.514907][T10705] loop6: detected capacity change from 0 to 512 [ 602.526133][T10700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 602.644531][T10705] EXT4-fs: Ignoring removed oldalloc option [ 602.708362][T10705] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 602.915782][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.991'. [ 603.728524][T10705] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.990: invalid indirect mapped block 4294967295 (level 0) [ 603.852572][T10705] EXT4-fs (loop6): Remounting filesystem read-only [ 603.865848][T10705] EXT4-fs (loop6): 1 orphan inode deleted [ 603.948505][T10705] EXT4-fs (loop6): 1 truncate cleaned up [ 603.977092][T10705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.199150][T10705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.217728][T10729] loop4: detected capacity change from 0 to 1024 [ 605.239097][T10705] batadv_slave_0: entered promiscuous mode [ 605.375298][ T3438] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 605.651608][T10729] hfsplus: request for non-existent node 16777216 in B*Tree [ 605.660811][T10097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.672261][T10738] syzkaller1: entered promiscuous mode [ 605.689369][T10738] syzkaller1: entered allmulticast mode [ 605.697960][T10729] hfsplus: request for non-existent node 16777216 in B*Tree [ 605.755096][T10740] loop3: detected capacity change from 0 to 1024 [ 606.428228][T10736] hfsplus: request for non-existent node 16777216 in B*Tree [ 606.464513][T10736] hfsplus: request for non-existent node 16777216 in B*Tree [ 606.534677][ T68] hfsplus: b-tree write err: -5, ino 4 [ 606.656959][ T6992] hfsplus: request for non-existent node 16777216 in B*Tree [ 606.778471][ T6992] hfsplus: request for non-existent node 16777216 in B*Tree [ 607.135580][T10758] loop0: detected capacity change from 0 to 2048 [ 607.315569][T10763] input: syz0 as /devices/virtual/input/input9 [ 607.416364][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 608.888728][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 609.138396][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 609.554082][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1004'. [ 610.790625][T10781] loop6: detected capacity change from 0 to 2048 [ 610.856849][T10781] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 611.111232][T10786] loop5: detected capacity change from 0 to 32768 [ 611.118654][T10786] XFS: attr2 mount option is deprecated. [ 611.128083][T10777] delete_channel: no stack [ 611.208399][T10793] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 611.227906][T10786] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 611.408360][T10800] overlayfs: missing 'lowerdir' [ 611.581891][T10786] XFS (loop5): Ending clean mount [ 611.601076][T10786] XFS (loop5): Quotacheck needed: Please wait. [ 612.012186][T10786] XFS (loop5): Quotacheck: Done. [ 612.919180][T10804] could not allocate digest TFM handle poly1305 [ 613.130292][ T8318] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 613.286138][T10809] netlink: 'syz.3.1009': attribute type 1 has an invalid length. [ 613.396898][T10815] FAULT_INJECTION: forcing a failure. [ 613.396898][T10815] name failslab, interval 1, probability 0, space 0, times 0 [ 613.487129][T10815] CPU: 0 UID: 0 PID: 10815 Comm: syz.6.1010 Not tainted 6.16.0-rc1-next-20250611-syzkaller #0 PREEMPT(full) [ 613.487158][T10815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 613.487170][T10815] Call Trace: [ 613.487178][T10815] [ 613.487187][T10815] dump_stack_lvl+0x189/0x250 [ 613.487212][T10815] ? __pfx____ratelimit+0x10/0x10 [ 613.487236][T10815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.487255][T10815] ? __pfx__printk+0x10/0x10 [ 613.487285][T10815] ? ref_tracker_alloc+0x318/0x460 [ 613.487308][T10815] should_fail_ex+0x414/0x560 [ 613.487342][T10815] should_failslab+0xa8/0x100 [ 613.487365][T10815] kmem_cache_alloc_noprof+0x73/0x3c0 [ 613.487393][T10815] ? skb_clone+0x212/0x3a0 [ 613.487420][T10815] skb_clone+0x212/0x3a0 [ 613.487445][T10815] __netlink_deliver_tap+0x404/0x850 [ 613.487489][T10815] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.487511][T10815] netlink_deliver_tap+0x19c/0x1b0 [ 613.487532][T10815] netlink_unicast+0x72f/0x8d0 [ 613.487574][T10815] netlink_sendmsg+0x805/0xb30 [ 613.487604][T10815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.487629][T10815] ? aa_sock_msg_perm+0xf1/0x1d0 [ 613.487657][T10815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.487681][T10815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.487702][T10815] __sock_sendmsg+0x21c/0x270 [ 613.487731][T10815] ____sys_sendmsg+0x505/0x830 [ 613.487758][T10815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.487790][T10815] ? import_iovec+0x74/0xa0 [ 613.487818][T10815] ___sys_sendmsg+0x21f/0x2a0 [ 613.487842][T10815] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.487905][T10815] ? __fget_files+0x2a/0x420 [ 613.487926][T10815] ? __fget_files+0x3a0/0x420 [ 613.487959][T10815] __x64_sys_sendmsg+0x19b/0x260 [ 613.487983][T10815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.488016][T10815] ? __pfx_ksys_write+0x10/0x10 [ 613.488042][T10815] ? rcu_is_watching+0x15/0xb0 [ 613.488066][T10815] ? do_syscall_64+0xbe/0x3b0 [ 613.488095][T10815] do_syscall_64+0xfa/0x3b0 [ 613.488119][T10815] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.488141][T10815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.488160][T10815] ? clear_bhb_loop+0x60/0xb0 [ 613.488184][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.488202][T10815] RIP: 0033:0x7f20afd8e929 [ 613.488221][T10815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.488241][T10815] RSP: 002b:00007f20b0b76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.488262][T10815] RAX: ffffffffffffffda RBX: 00007f20affb5fa0 RCX: 00007f20afd8e929 [ 613.488275][T10815] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 613.488286][T10815] RBP: 00007f20b0b76090 R08: 0000000000000000 R09: 0000000000000000 [ 613.488298][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.488309][T10815] R13: 0000000000000000 R14: 00007f20affb5fa0 R15: 00007ffde1216408 [ 613.488338][T10815] [ 613.850878][T10809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.996853][T10816] ip6erspan0: entered promiscuous mode [ 614.117533][T10816] bond1: (slave ip6erspan0): making interface the new active one [ 614.138659][T10816] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 614.293183][T10831] loop5: detected capacity change from 0 to 2048 [ 614.988859][T10831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.243896][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 617.220839][T10850] delete_channel: no stack [ 617.290776][T10859] loop5: detected capacity change from 0 to 2048 [ 617.362865][T10859] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 617.455752][T10863] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 617.513302][T10869] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 617.532091][T10867] sp0: Synchronizing with TNC [ 617.697179][T10859] overlayfs: missing 'lowerdir' [ 618.116968][T10881] loop6: detected capacity change from 0 to 1024 [ 618.169541][T10881] ext4: Unknown parameter 'obj_type' [ 618.408226][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 618.540456][ T30] audit: type=1326 audit(1749648310.011:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbde78e929 code=0x7ffc0000 [ 618.937215][ T30] audit: type=1326 audit(1749648310.011:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbde78e929 code=0x7ffc0000 [ 618.961889][ T30] audit: type=1326 audit(1749648310.011:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbde78e929 code=0x7ffc0000 [ 618.984517][ T30] audit: type=1326 audit(1749648310.011:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbde78e929 code=0x7ffc0000 [ 619.028615][ T30] audit: type=1326 audit(1749648310.051:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbde78e929 code=0x7ffc0000 [ 619.146303][ T30] audit: type=1326 audit(1749648310.061:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbbde78e929 code=0x7ffc0000 [ 619.253073][ T30] audit: type=1326 audit(1749648310.061:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbde78e963 code=0x7ffc0000 [ 619.296607][T10888] syzkaller1: entered promiscuous mode [ 619.354833][T10888] syzkaller1: entered allmulticast mode [ 620.075016][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 620.080275][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1027'. [ 621.530061][T10907] loop5: detected capacity change from 0 to 128 [ 621.640299][T10904] loop0: detected capacity change from 0 to 1024 [ 621.692136][T10907] EXT4-fs (loop5): Test dummy encryption mode enabled [ 621.795157][T10907] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 621.884373][T10904] hfsplus: b-tree write err: -5, ino 4 [ 621.931968][T10907] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 622.903506][T10924] loop3: detected capacity change from 0 to 512 [ 622.924994][T10924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.017405][T10924] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 623.079098][T10924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0003] [ 623.102536][T10924] EXT4-fs (loop3): orphan cleanup on readonly fs [ 623.113131][T10924] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.1033: attempt to clear invalid blocks 1024 len 1 [ 623.151969][T10924] EXT4-fs (loop3): Remounting filesystem read-only [ 623.284897][T10924] EXT4-fs (loop3): 1 truncate cleaned up [ 623.299858][T10924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 623.779363][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 624.387488][T10945] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1037'. [ 624.465461][T10945] loop6: detected capacity change from 0 to 1024 [ 625.017650][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.025744][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.053655][T10945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.172196][ T8318] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 625.238402][ T30] audit: type=1326 audit(1749648316.821:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10949 comm="syz.0.1038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e8038e929 code=0x0 [ 625.435197][T10097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.537132][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 627.836768][T10983] loop0: detected capacity change from 0 to 2048 [ 627.948974][ T5903] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 627.954278][ T5903] loop0: partition table partially beyond EOD, truncated [ 628.022648][ T5903] loop0: p2 start 4278190080 is beyond EOD, truncated [ 628.069872][ T5903] loop0: p4 size 8192 extends beyond EOD, truncated [ 628.120715][ T5903] loop0: p6 size 8192 extends beyond EOD, truncated [ 628.268661][T10983] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 628.273983][T10983] loop0: partition table partially beyond EOD, truncated [ 628.291999][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 628.306049][T10983] loop0: p2 start 4278190080 is beyond EOD, truncated [ 628.312637][T10989] loop4: detected capacity change from 0 to 2048 [ 628.320384][T10983] loop0: p4 size 8192 extends beyond EOD, truncated [ 628.328939][T10989] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 628.334699][T10983] loop0: p6 size 8192 extends beyond EOD, [ 628.434672][T10996] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 628.448747][T10983] truncated [ 628.500268][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 628.517922][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.533839][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 628.543231][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.035168][T11001] overlayfs: missing 'lowerdir' [ 629.123212][ T9] usb 1-1: config 0 descriptor?? [ 629.587113][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 629.687988][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 629.731138][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 629.766334][ T9] usb 1-1: USB disconnect, device number 11 [ 630.494998][T11019] FAULT_INJECTION: forcing a failure. [ 630.494998][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 630.508130][T11019] CPU: 1 UID: 0 PID: 11019 Comm: syz.4.1056 Not tainted 6.16.0-rc1-next-20250611-syzkaller #0 PREEMPT(full) [ 630.508160][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.508171][T11019] Call Trace: [ 630.508179][T11019] [ 630.508187][T11019] dump_stack_lvl+0x189/0x250 [ 630.508219][T11019] ? __pfx____ratelimit+0x10/0x10 [ 630.508249][T11019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.508268][T11019] ? __pfx__printk+0x10/0x10 [ 630.508294][T11019] ? __pfx___might_resched+0x10/0x10 [ 630.508322][T11019] ? fs_reclaim_acquire+0x7d/0x100 [ 630.508351][T11019] should_fail_ex+0x414/0x560 [ 630.508383][T11019] should_failslab+0xa8/0x100 [ 630.508406][T11019] kmem_cache_alloc_noprof+0x73/0x3c0 [ 630.508432][T11019] ? alloc_empty_file+0x55/0x1d0 [ 630.508460][T11019] alloc_empty_file+0x55/0x1d0 [ 630.508483][T11019] alloc_file_pseudo+0x13d/0x210 [ 630.508510][T11019] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 630.508550][T11019] __shmem_file_setup+0x284/0x300 [ 630.508582][T11019] __se_sys_memfd_create+0x308/0x780 [ 630.508611][T11019] do_syscall_64+0xfa/0x3b0 [ 630.508634][T11019] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.508657][T11019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.508675][T11019] ? clear_bhb_loop+0x60/0xb0 [ 630.508698][T11019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.508716][T11019] RIP: 0033:0x7fbbde78e929 [ 630.508734][T11019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.508750][T11019] RSP: 002b:00007fbbdf513e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 630.508771][T11019] RAX: ffffffffffffffda RBX: 0000000000005974 RCX: 00007fbbde78e929 [ 630.508785][T11019] RDX: 00007fbbdf513ef0 RSI: 0000000000000000 RDI: 00007fbbde8114cc [ 630.508797][T11019] RBP: 0000200000005ec0 R08: 00007fbbdf513bb7 R09: 00007fbbdf513e40 [ 630.508810][T11019] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 630.508822][T11019] R13: 00007fbbdf513ef0 R14: 00007fbbdf513eb0 R15: 0000200000000400 [ 630.508854][T11019] [ 630.739728][T11015] loop6: detected capacity change from 0 to 2048 [ 630.812558][T11015] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 631.445580][T11026] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 632.330515][T11030] overlayfs: missing 'lowerdir' [ 632.642175][T11033] loop3: detected capacity change from 0 to 2048 [ 632.705382][T11033] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 632.961756][T11039] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 633.048859][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 633.799323][T11033] overlayfs: missing 'lowerdir' [ 633.858040][T11047] loop6: detected capacity change from 0 to 1024 [ 634.212099][T11047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.309679][T11058] loop5: detected capacity change from 0 to 128 [ 634.320836][T11058] omfs: Bad value for 'umask' [ 635.087581][T10097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.231114][T11065] loop3: detected capacity change from 0 to 2048 [ 635.394787][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 635.459324][ T6025] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 635.495347][ T6025] loop3: partition table partially beyond EOD, truncated [ 635.514249][ T6025] loop3: p2 start 4278190080 is beyond EOD, truncated [ 635.747271][T11078] loop0: detected capacity change from 0 to 256 [ 636.041205][ T6025] loop3: p4 size 8192 extends beyond EOD, truncated [ 636.323571][ T6025] loop3: p6 size 8192 extends beyond EOD, truncated [ 636.404102][T11065] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 636.423088][T11065] loop3: partition table partially beyond EOD, truncated [ 636.471929][T11065] loop3: p2 start 4278190080 is beyond EOD, truncated [ 636.763732][T11065] loop3: p4 size 8192 extends beyond EOD, truncated [ 636.885753][T11065] loop3: p6 size 8192 extends beyond EOD, truncated [ 637.906112][T11093] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1073'. [ 639.089265][T11095] delete_channel: no stack [ 639.495886][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 639.572669][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 639.594509][ T7414] udevd[7414]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 639.733037][T11116] loop5: detected capacity change from 0 to 2048 [ 639.749248][T11116] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 639.908012][T11116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 640.176198][ T5986] udevd[5986]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 640.280886][T11119] loop4: detected capacity change from 0 to 512 [ 640.301649][ T6025] udevd[6025]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 640.340994][T11119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.358616][T11119] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.186949][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.421082][T11141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1086'. [ 642.438513][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1085'. [ 642.724870][T11145] loop4: detected capacity change from 0 to 2048 [ 642.787683][T11145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.903047][T11152] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1087'. [ 643.032675][T11154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 644.890479][T11168] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 645.059606][T11176] sp0: Synchronizing with TNC [ 645.238081][T11151] loop3: detected capacity change from 0 to 32768 [ 645.355150][T11151] ERROR: (device loop3): diNewExt: no free extents [ 645.355150][T11151] [ 645.456145][T11151] ialloc: diAlloc returned -5! [ 645.803501][ T5842] non-latin1 character 0x2e66 found in JFS file name [ 645.831379][ T5842] mount with iocharset=utf8 to access [ 646.047754][T11196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1099'. [ 646.147484][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 646.434287][T11208] loop0: detected capacity change from 0 to 2048 [ 647.036735][T11208] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 647.178438][T11214] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 647.787778][T11217] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1103'. [ 647.797555][T11208] overlayfs: missing 'lowerdir' [ 647.881904][ T3438] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.897097][T11219] loop4: detected capacity change from 0 to 128 [ 648.827562][ T3438] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.127055][ T3438] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.173026][T11234] loop4: detected capacity change from 0 to 2048 [ 649.246311][T11234] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 649.397090][ T3438] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.282753][T11251] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 650.515281][T11241] loop6: detected capacity change from 0 to 131072 [ 650.529870][T11241] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 650.538015][T11241] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 650.550219][T11241] F2FS-fs (loop6): invalid crc value [ 650.766885][T11241] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 650.773984][T11241] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 650.844637][T11260] overlayfs: missing 'lowerdir' [ 651.423249][ T30] audit: type=1800 audit(1749648343.021:263): pid=11241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1109" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 651.593457][ T3438] bridge_slave_1: left allmulticast mode [ 651.619003][ T3438] bridge_slave_1: left promiscuous mode [ 651.676629][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.688962][T11268] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1113'. [ 651.767077][T11270] loop0: detected capacity change from 0 to 128 [ 651.782354][ T3438] bridge_slave_0: left allmulticast mode [ 651.820747][T11270] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 651.835413][ T3438] bridge_slave_0: left promiscuous mode [ 651.868786][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.916733][T11270] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 652.064832][T11270] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 652.346347][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 652.953892][ T3438] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 653.427720][ T3438] team0: Port device bridge0 removed [ 653.793452][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.812330][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.857911][ T3438] bond0 (unregistering): Released all slaves [ 653.972866][ T5847] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 654.180119][ T3438] bond1 (unregistering): Released all slaves [ 654.345557][T11310] loop0: detected capacity change from 0 to 2048 [ 654.448931][T11310] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 654.616988][T11320] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 654.828909][T11323] overlayfs: missing 'lowerdir' [ 655.377267][T11328] loop5: detected capacity change from 0 to 64 [ 655.455119][T11328] hfs: unable to locate alternate MDB [ 655.482656][T11328] hfs: continuing without an alternate MDB [ 655.605737][T11328] overlay: filesystem on ./bus not supported [ 655.677503][T11334] hfs: walked past end of dir [ 655.832322][ T3438] hsr_slave_0: left promiscuous mode [ 655.847932][ T3438] hsr_slave_1: left promiscuous mode [ 655.863807][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.884083][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.907570][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.916663][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.021603][ T3438] veth1_macvtap: left promiscuous mode [ 656.027395][ T3438] veth0_macvtap: left promiscuous mode [ 656.048721][ T3438] veth1_vlan: left promiscuous mode [ 656.054693][ T3438] veth0_vlan: left promiscuous mode [ 656.444877][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1135'. [ 657.084261][T11358] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1139'. [ 658.989162][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 659.050490][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 659.835730][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1140'. [ 659.929865][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 661.977891][T11414] loop5: detected capacity change from 0 to 8 [ 662.167486][T11415] SQUASHFS error: Failed to read block 0x260685: -5 [ 662.382573][T11415] SQUASHFS error: Unable to read metadata cache entry [260685] [ 662.456151][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1155'. [ 662.560918][T11415] SQUASHFS error: Unable to read directory block [260685:0] [ 663.158091][T11428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1156'. [ 663.237659][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 663.255842][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 663.268559][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 663.288488][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 663.299617][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 663.884312][T11439] loop0: detected capacity change from 0 to 4096 [ 663.928168][T11439] ntfs3: Bad value for 'uid' [ 663.983823][T11439] ntfs3: Bad value for 'uid' [ 664.028393][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1159'. [ 665.154581][T11429] chnl_net:caif_netlink_parms(): no params data found [ 665.188732][ T5937] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 665.443810][ T9983] Bluetooth: hci0: command tx timeout [ 665.507612][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.521908][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.855166][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.159752][ T5937] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.215335][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.270223][ T5937] usb 1-1: config 0 descriptor?? [ 666.423220][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1167'. [ 666.425123][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.654575][T11429] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.665172][T11429] bridge_slave_0: entered allmulticast mode [ 666.678872][T11429] bridge_slave_0: entered promiscuous mode [ 666.708036][T11429] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.716346][T11429] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.723737][T11429] bridge_slave_1: entered allmulticast mode [ 666.733131][T11429] bridge_slave_1: entered promiscuous mode [ 666.965346][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 667.718799][ T9983] Bluetooth: hci0: command tx timeout [ 668.452827][ T5937] usbhid 1-1:0.0: can't add hid device: -71 [ 668.469247][ T5937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 668.515370][ T5937] usb 1-1: USB disconnect, device number 12 [ 669.250676][T11500] loop4: detected capacity change from 0 to 32768 [ 669.281194][T11500] XFS: attr2 mount option is deprecated. [ 669.677919][ T3438] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 669.733093][T11500] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 669.761046][ T9983] Bluetooth: hci0: command tx timeout [ 669.800661][T11500] XFS (loop4): Ending clean mount [ 669.807833][T11500] XFS (loop4): Quotacheck needed: Please wait. [ 669.830536][T11429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.866686][T11429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.908162][T11500] XFS (loop4): Quotacheck: Done. [ 670.410797][T11517] could not allocate digest TFM handle poly1305 [ 670.660342][ T5837] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 670.772015][T11429] team0: Port device team_slave_0 added [ 670.803665][T11429] team0: Port device team_slave_1 added [ 671.046381][T11528] overlay: Bad value for 'upperdir' [ 671.253070][T11429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.278918][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.352888][T11429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.369549][T11528] loop4: detected capacity change from 0 to 4096 [ 671.396524][T11429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.426014][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.468561][T11429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.838516][ T9983] Bluetooth: hci0: command tx timeout [ 672.572308][T11429] hsr_slave_0: entered promiscuous mode [ 672.609665][T11429] hsr_slave_1: entered promiscuous mode [ 672.629095][T11429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.690352][T11429] Cannot create hsr debugfs directory [ 673.697323][T11560] loop0: detected capacity change from 0 to 64 [ 673.850939][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 674.776306][T11577] loop0: detected capacity change from 0 to 2048 [ 674.810944][T11577] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 674.940690][T11575] loop4: detected capacity change from 0 to 32768 [ 674.947820][T11575] XFS: attr2 mount option is deprecated. [ 674.998496][T11575] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 675.050974][T11575] XFS (loop4): Ending clean mount [ 675.057961][T11575] XFS (loop4): Quotacheck needed: Please wait. [ 675.089697][T11429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 675.107090][T11587] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 675.135864][T11429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 675.176284][T11575] XFS (loop4): Quotacheck: Done. [ 675.807892][T11574] could not allocate digest TFM handle poly1305 [ 676.682404][T11598] loop5: detected capacity change from 0 to 128 [ 676.689555][T11598] omfs: Bad value for 'umask' [ 676.883344][T11429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 676.942928][ T5837] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 677.038426][T11429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 677.566582][T11614] xt_policy: output policy not valid in PREROUTING and INPUT [ 678.140150][T11429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.441907][T11620] netlink: 'syz.0.1190': attribute type 10 has an invalid length. [ 678.443945][T11429] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.469175][T11621] loop4: detected capacity change from 0 to 512 [ 679.181706][T11429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 679.210124][T11625] loop4: detected capacity change from 0 to 32768 [ 679.220117][T11625] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1187 (11625) [ 679.233175][T11429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 679.257463][T11625] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 679.268037][T11625] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 679.277387][T11625] BTRFS info (device loop4): disk space caching is enabled [ 679.285439][T11625] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 679.303289][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.310536][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.363421][T11631] loop0: detected capacity change from 0 to 256 [ 679.372667][T11631] exfat: Deprecated parameter 'utf8' [ 679.379017][T11631] exfat: Deprecated parameter 'utf8' [ 679.384567][T11631] exfat: Deprecated parameter 'utf8' [ 679.406423][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.413713][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.530869][ T1145] BTRFS warning (device loop4): checksum verify failed on logical 5287936 mirror 1 wanted 0x0000005f found 0x10870a5f level 0 [ 679.551526][T11625] BTRFS warning (device loop4): failed to read root (objectid=4): -5 [ 679.614969][T11625] BTRFS error (device loop4): open_ctree failed: -5 [ 679.689183][T11631] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 679.861784][T11647] loop5: detected capacity change from 0 to 2048 [ 679.998475][ T6007] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 679.999364][T11631] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 680.057644][ T6007] loop5: partition table partially beyond EOD, truncated [ 680.068296][T11631] exFAT-fs (loop0): Filesystem has been set read-only [ 680.089213][T11655] input: syz0 as /devices/virtual/input/input14 [ 680.171957][ T6007] loop5: p2 start 4278190080 is beyond EOD, truncated [ 680.207487][ T6007] loop5: p4 size 8192 extends beyond EOD, truncated [ 680.218990][ T6117] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 680.292340][ T6007] loop5: p6 size 8192 extends beyond EOD, truncated [ 680.423042][ T6117] usb 6-1: device descriptor read/64, error -71 [ 680.504253][T11429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.571665][T11647] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 680.597692][T11647] loop5: partition table partially beyond EOD, truncated [ 680.630668][T11647] loop5: p2 start 4278190080 is beyond EOD, truncated [ 680.680128][T11647] loop5: p4 size 8192 extends beyond EOD, truncated [ 680.749274][T11647] loop5: p6 size 8192 extends beyond EOD, truncated [ 680.819608][T11668] xt_policy: output policy not valid in PREROUTING and INPUT [ 680.858618][ T6117] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 681.188547][ T6117] usb 6-1: device descriptor read/64, error -71 [ 681.496280][ T6117] usb usb6-port1: attempt power cycle [ 682.085258][T11674] loop0: detected capacity change from 0 to 32768 [ 682.096140][T11674] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1198 (11674) [ 682.130570][T11674] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 682.141462][T11674] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 682.151178][T11674] BTRFS info (device loop0): using free-space-tree [ 682.158179][ T6117] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 682.204517][ T6117] usb 6-1: device descriptor read/8, error -71 [ 682.458493][ T6117] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 682.489035][ T6117] usb 6-1: device descriptor read/8, error -71 [ 682.596510][T11703] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1201'. [ 682.620703][ T6117] usb usb6-port1: unable to enumerate USB device [ 682.814786][ T5847] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 683.064780][ T6162] udevd[6162]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 683.101747][T11429] veth0_vlan: entered promiscuous mode [ 683.176058][T11429] veth1_vlan: entered promiscuous mode [ 683.585490][T11721] loop5: detected capacity change from 0 to 2048 [ 683.613689][T11429] veth0_macvtap: entered promiscuous mode [ 683.722045][T11721] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 683.723409][T11429] veth1_macvtap: entered promiscuous mode [ 683.831546][T11726] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 684.511848][T11728] overlayfs: missing 'lowerdir' [ 684.519434][T11429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.603611][T11429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.675320][T11429] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.748380][T11429] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.775311][T11429] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.816571][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 684.831109][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 684.840786][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 684.842972][T11429] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.851167][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 684.864580][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 685.380416][T11744] loop5: detected capacity change from 0 to 2048 [ 685.463381][ T5986] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 685.492363][ T5986] loop5: partition table partially beyond EOD, truncated [ 685.505292][ T5986] loop5: p2 start 4278190080 is beyond EOD, truncated [ 685.526641][ T5986] loop5: p4 size 8192 extends beyond EOD, truncated [ 685.554409][ T5986] loop5: p6 size 8192 extends beyond EOD, truncated [ 685.633111][T11744] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 685.674142][T11744] loop5: partition table partially beyond EOD, truncated [ 685.758852][T11744] loop5: p2 start 4278190080 is beyond EOD, truncated [ 685.808139][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.821188][T11744] loop5: p4 size 8192 extends beyond EOD, truncated [ 685.853447][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.874528][ T5937] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 685.876561][T11744] loop5: p6 size 8192 extends beyond EOD, truncated [ 685.977931][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 686.004134][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.034439][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.075585][ T5937] usb 6-1: device descriptor read/64, error -71 [ 686.517607][ T5937] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 686.668479][ T5937] usb 6-1: device descriptor read/64, error -71 [ 686.846570][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.873461][ T5937] usb usb6-port1: attempt power cycle [ 686.948986][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.958368][ T5852] Bluetooth: hci2: command tx timeout [ 687.062175][T11735] chnl_net:caif_netlink_parms(): no params data found [ 687.177704][T11759] loop0: detected capacity change from 0 to 32768 [ 687.261798][T11759] btrfs: Deprecated parameter 'usebackuproot' [ 687.279956][T11759] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 687.357393][T11759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1215 (11759) [ 687.449082][ T5937] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 687.483080][T11759] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 687.499361][ T5937] usb 6-1: device descriptor read/8, error -71 [ 687.509738][T11759] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 687.566960][T11759] BTRFS info (device loop0): using free-space-tree [ 687.670967][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.678189][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.702311][T11735] bridge_slave_0: entered allmulticast mode [ 687.717337][T11735] bridge_slave_0: entered promiscuous mode [ 687.758744][ T5937] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 687.841735][T11792] loop7: detected capacity change from 0 to 256 [ 687.926385][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.941359][ T5937] usb 6-1: device descriptor read/8, error -71 [ 687.999156][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.067016][T11735] bridge_slave_1: entered allmulticast mode [ 688.090047][ T5937] usb usb6-port1: unable to enumerate USB device [ 688.198067][T11735] bridge_slave_1: entered promiscuous mode [ 688.759509][T11759] BTRFS info (device loop0): rebuilding free space tree [ 688.873825][ T30] audit: type=1800 audit(1749648380.481:264): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1217" name="file1" dev="loop7" ino=1048623 res=0 errno=0 [ 688.903573][T11792] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2099200) [ 688.911845][T11792] FAT-fs (loop7): Filesystem has been set read-only [ 688.938101][T11792] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097162) [ 689.083160][ T5852] Bluetooth: hci2: command tx timeout [ 689.769802][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.795972][ T5847] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.892451][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.289052][T11821] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1223'. [ 690.354689][T11735] team0: Port device team_slave_0 added [ 690.426823][T11735] team0: Port device team_slave_1 added [ 691.120890][ T5852] Bluetooth: hci2: command tx timeout [ 691.415475][T11832] loop5: detected capacity change from 0 to 2048 [ 691.463182][T11735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.470799][T11834] loop4: detected capacity change from 0 to 2048 [ 691.493600][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.506703][T11834] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 691.952375][T11843] loop0: detected capacity change from 0 to 128 [ 691.959840][T11843] omfs: Bad value for 'umask' [ 692.075783][T11735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.091431][T11735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.098665][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.124927][T11735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.140191][ T6007] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 692.148443][ T6007] loop5: partition table partially beyond EOD, truncated [ 692.253421][T11846] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 692.294257][ T6007] loop5: p2 start 4278190080 is beyond EOD, truncated [ 692.407917][ T6007] loop5: p4 size 8192 extends beyond EOD, truncated [ 692.506094][T11848] overlayfs: missing 'lowerdir' [ 692.576162][ T5989] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 692.951393][ T6007] loop5: p6 size 8192 extends beyond EOD, truncated [ 693.025952][ T5989] usb 6-1: device descriptor read/64, error -71 [ 693.128611][T11832] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 693.155950][T11735] hsr_slave_0: entered promiscuous mode [ 693.189754][T11735] hsr_slave_1: entered promiscuous mode [ 693.196289][T11735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.218331][ T5852] Bluetooth: hci2: command tx timeout [ 693.242017][T11735] Cannot create hsr debugfs directory [ 693.291837][T11832] loop5: partition table partially beyond EOD, truncated [ 693.377858][T11832] loop5: p2 start 4278190080 is beyond EOD, truncated [ 693.404620][T11832] loop5: p4 size 8192 extends beyond EOD, truncated [ 693.423800][T11832] loop5: p6 size 8192 extends beyond EOD, truncated [ 693.482233][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 694.063415][ T5989] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 694.273308][ T5989] usb 6-1: device descriptor read/64, error -71 [ 694.418755][ T5989] usb usb6-port1: attempt power cycle [ 694.661068][T11866] loop7: detected capacity change from 0 to 32768 [ 694.972166][T11866] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1233 (11866) [ 695.021190][T11866] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 695.031715][T11866] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 695.041025][T11866] BTRFS info (device loop7): using free-space-tree [ 695.076280][T11869] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1235'. [ 695.391619][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 695.419192][ T5986] udevd[5986]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 695.465443][ T7414] udevd[7414]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 695.481751][ T6025] udevd[6025]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 695.504687][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 695.679256][T11893] loop0: detected capacity change from 0 to 64 [ 695.691857][T11893] hfs: unable to locate alternate MDB [ 695.691895][T11893] hfs: continuing without an alternate MDB [ 695.744839][T11735] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 695.779628][T11893] overlay: filesystem on ./bus not supported [ 695.787550][T11735] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 695.831562][T11898] hfs: walked past end of dir [ 695.876029][T11735] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 695.912383][T11429] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 696.031693][T11735] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 696.358065][T11917] input: syz0 as /devices/virtual/input/input15 [ 697.161198][T11735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.351258][T11735] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.413313][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.420572][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.749761][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.757033][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.819025][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 698.758818][T11938] loop0: detected capacity change from 0 to 2048 [ 699.032207][ T5903] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 699.058813][ T5903] loop0: partition table partially beyond EOD, truncated [ 699.259920][ T3604] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 699.396713][ T5903] loop0: p2 start 4278190080 is beyond EOD, truncated [ 699.622220][ T5903] loop0: p4 size 8192 extends beyond EOD, truncated [ 699.687300][T11952] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1248'. [ 699.688821][ T3604] usb 1-1: device descriptor read/64, error -71 [ 699.708951][ T5903] loop0: p6 size 8192 extends beyond EOD, truncated [ 699.795737][T11938] loop0: p1 p2 < > p3 < p5 p6 > p4 [ 699.802000][T11938] loop0: partition table partially beyond EOD, truncated [ 699.848031][T11938] loop0: p2 start 4278190080 is beyond EOD, truncated [ 699.875703][T11938] loop0: p4 size 8192 extends beyond EOD, truncated [ 699.942348][T11938] loop0: p6 size 8192 extends beyond EOD, truncated [ 699.980305][ T3604] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 700.374051][T11961] loop7: detected capacity change from 0 to 128 [ 700.381568][T11961] omfs: Bad value for 'umask' [ 700.685513][ T3604] usb 1-1: device descriptor read/64, error -71 [ 700.946352][ T3604] usb usb1-port1: attempt power cycle [ 701.118135][T11735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.361788][ T3604] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 701.384026][T11976] loop7: detected capacity change from 0 to 128 [ 701.393367][T11976] omfs: Bad value for 'umask' [ 701.873417][ T3604] usb 1-1: device descriptor read/8, error -71 [ 703.255129][T11735] veth0_vlan: entered promiscuous mode [ 703.365847][ T5842] jfs_flush_journal: synclist not empty [ 703.378683][T11735] veth1_vlan: entered promiscuous mode [ 703.399050][ T5842] metapage: ffff8880339fb2e8: 00001000 00000000 00003aec 00000000 [ 703.406927][ T5842] metapage: ffff8880339fb2f8: 02739120 ffffc900 5a87a228 ffff8880 [ 703.424567][ T5842] metapage: ffff8880339fb308: 00000004 00000000 00000000 00000000 [ 703.466104][ T5842] metapage: ffff8880339fb318: 733ec000 ffff8880 0000001c 00000000 [ 704.012365][ T5842] metapage: ffff8880339fb328: 00000000 dead4ead ffffffff 00000000 [ 704.184561][ T5842] metapage: ffff8880339fb338: ffffffff ffffffff 99bdade0 ffffffff [ 704.220774][ T5842] metapage: ffff8880339fb348: 9351a340 ffffffff 00000000 00000000 [ 704.342396][ T5842] metapage: ffff8880339fb358: 8bc3ee80 ffffffff 00000300 00000000 [ 704.429449][ T5842] metapage: ffff8880339fb368: 339fb368 ffff8880 339fb368 ffff8880 [ 704.485276][T12017] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1259'. [ 704.494287][ T5842] metapage: ffff8880339fb378: 01ccfb00 ffffea00 614e0000 ffff8880 [ 704.494339][ T5842] metapage: ffff8880339fb388: 00001000 00000000 00000001 00000000 [ 704.494357][ T5842] metapage: ffff8880339fb398: 5a87a000 ffff8880 [ 704.494374][ T5842] page: ffffea0001ccfb00: 00fff3800000422c ffffea0001b1d348 [ 704.494391][ T5842] page: ffffea0001ccfb10: ffffea0001752c88 ffff8880539e0650 [ 704.494407][ T5842] page: ffffea0001ccfb20: 000000000000001c ffff8880339fb2e8 [ 704.494424][ T5842] page: ffffea0001ccfb30: 00000003ffffffff ffff88807d179a00 [ 704.494443][ T5842] tblock:ffffc90002739110: 03040910 00000000 00003aec 00000000 [ 704.494460][ T5842] tblock:ffffc90002739120: 5a87a228 ffff8880 339fb2f8 ffff8880 [ 704.494478][ T5842] tblock:ffffc90002739130: 614e0000 ffff8880 00030001 00000000 [ 704.494495][ T5842] tblock:ffffc90002739140: 00000000 dead4ead ffffffff 00000000 [ 704.494513][ T5842] tblock:ffffc90002739150: ffffffff ffffffff 99bdafe0 ffffffff [ 704.494531][ T5842] tblock:ffffc90002739160: 9351b218 ffffffff 00000000 00000000 [ 704.494549][ T5842] tblock:ffffc90002739170: 8bc40320 ffffffff 00000300 00000000 [ 704.494567][ T5842] tblock:ffffc90002739180: 02739180 ffffc900 02739180 ffffc900 [ 704.494585][ T5842] tblock:ffffc90002739190: 00000001 00000000 00000100 dead0000 [ 704.700366][T11735] veth0_macvtap: entered promiscuous mode [ 704.722429][ T5842] tblock:ffffc900027391a0: 00000122 dead0000 00003cbc 00000000 [ 704.767554][T11735] veth1_macvtap: entered promiscuous mode [ 704.784549][ T5842] tblock:ffffc900027391b0: 29984a00 ffff8880 00000003 00000cbc [ 704.828885][ T5842] tblock:ffffc900027391c0: 00000000 dead4ead ffffffff 00000000 [ 704.895498][ T5842] tblock:ffffc900027391d0: ffffffff ffffffff 99bdafc0 ffffffff [ 704.923278][T11735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.948292][ T5842] tblock:ffffc900027391e0: 00000000 00000000 00000000 00000000 [ 704.955922][ T5842] tblock:ffffc900027391f0: 8bc402e0 ffffffff 00000300 00000000 [ 705.005830][T11735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.008595][ T5842] tblock:ffffc90002739200: 02739200 ffffc900 02739200 ffffc900 [ 705.008621][ T5842] tblock:ffffc90002739210: 539f16a0 ffff8880 00000000 00000000 [ 705.037556][T11735] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.037591][T11735] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.037613][T11735] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.037635][T11735] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.014248][T12033] loop4: detected capacity change from 0 to 128 [ 706.022298][T12033] omfs: Bad value for 'umask' [ 706.321289][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.370106][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.548492][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.571788][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.205089][T12049] xt_connbytes: Forcing CT accounting to be enabled [ 707.212992][T12049] --map-set only usable from mangle table [ 707.224782][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1266'. [ 708.575312][T12059] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1269'. [ 709.399947][T12085] netlink: 'syz.0.1274': attribute type 10 has an invalid length. [ 709.777565][T12092] loop5: detected capacity change from 0 to 128 [ 709.785143][T12092] omfs: Bad value for 'umask' [ 710.615300][T12103] loop4: detected capacity change from 0 to 1024 [ 710.752734][T12103] EXT4-fs: Ignoring removed nobh option [ 710.765688][T12103] EXT4-fs: Ignoring removed bh option [ 710.855819][T12115] --map-set only usable from mangle table [ 710.865531][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1278'. [ 711.638020][T12103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.966564][T12118] loop0: detected capacity change from 0 to 32768 [ 712.000418][T12118] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1280 (12118) [ 712.388670][T12118] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 712.398975][T12118] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 712.407860][T12118] BTRFS info (device loop0): using free-space-tree [ 712.985086][T12149] loop7: detected capacity change from 0 to 2048 [ 713.037654][T12149] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 713.048152][T12106] Bluetooth: MGMT ver 1.23 [ 713.107939][ T5847] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 713.172269][T12154] netlink: 'syz.5.1286': attribute type 10 has an invalid length. [ 713.203606][T12155] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 713.214709][T12154] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.222236][T12154] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.236026][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.389550][T12156] overlayfs: missing 'lowerdir' [ 714.577352][T12170] --map-set only usable from mangle table [ 714.776225][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 714.929329][T12167] loop5: detected capacity change from 0 to 128 [ 714.936423][T12167] omfs: Bad value for 'umask' [ 715.462679][T12184] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1291'. [ 716.707063][T12190] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1289'. [ 717.406557][T12199] xt_policy: output policy not valid in PREROUTING and INPUT [ 718.600961][T12206] loop5: detected capacity change from 0 to 32768 [ 718.620431][T12206] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1296 (12206) [ 718.653830][T12206] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 718.664262][T12206] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 718.673219][T12206] BTRFS info (device loop5): using free-space-tree [ 718.906333][T12219] loop0: detected capacity change from 0 to 2048 [ 718.921478][T12219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 718.966923][T12219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 719.976550][ T8318] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 721.874444][T12262] xt_policy: output policy not valid in PREROUTING and INPUT [ 722.033772][T12265] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1305'. [ 723.025447][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1311'. [ 723.879998][T12280] loop8: detected capacity change from 0 to 2048 [ 723.941059][T12280] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 724.164328][T12287] loop4: detected capacity change from 0 to 32768 [ 724.185474][T12287] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1315 (12287) [ 724.208941][T12287] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 724.219672][T12287] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 724.229334][T12287] BTRFS info (device loop4): using free-space-tree [ 724.278628][T12296] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 724.662782][T12312] overlayfs: missing 'lowerdir' [ 725.310568][ T5837] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 725.568077][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 726.457870][T12326] loop5: detected capacity change from 0 to 512 [ 726.560203][T12326] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.5.1322: corrupted xattr block 95: invalid header [ 726.713358][T12326] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1322: bg 0: block 7: invalid block bitmap [ 726.778454][T12326] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 726.837275][T12326] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #11: comm syz.5.1322: corrupted xattr block 95: invalid header [ 726.984646][T12326] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 727.080604][T12326] EXT4-fs (loop5): 1 orphan inode deleted [ 727.606122][T12346] netlink: 'syz.8.1326': attribute type 10 has an invalid length. [ 727.660226][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.668026][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.676760][T12326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.816143][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.823449][T12346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.831220][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.838473][T12346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.925655][T12346] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 728.352977][T12356] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1328'. [ 729.311169][T12363] loop8: detected capacity change from 0 to 128 [ 729.318625][T12363] omfs: Bad value for 'umask' [ 730.065045][ T8318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.412423][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1333'. [ 731.385502][T12386] loop5: detected capacity change from 0 to 2048 [ 731.406790][T12386] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 731.498515][T12396] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 731.610575][T12401] overlayfs: missing 'lowerdir' [ 731.913803][T12400] loop4: detected capacity change from 0 to 4096 [ 732.924329][T12414] loop8: detected capacity change from 0 to 128 [ 732.949304][T12414] omfs: Bad value for 'umask' [ 732.969336][T12416] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1341'. [ 735.948472][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1352'. [ 736.546827][T12467] xt_policy: output policy not valid in PREROUTING and INPUT [ 737.351605][T12465] loop4: detected capacity change from 0 to 4096 [ 737.838019][T12477] loop5: detected capacity change from 0 to 128 [ 737.847948][T12477] omfs: Bad value for 'umask' [ 738.164459][T12483] netlink: 'syz.7.1357': attribute type 10 has an invalid length. [ 738.269267][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.277220][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.475742][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.483083][T12483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.490781][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.497979][T12483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.670503][T12483] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 739.362569][T12502] loop4: detected capacity change from 0 to 64 [ 739.507098][T12502] hfs: unable to locate alternate MDB [ 739.526174][T12502] hfs: continuing without an alternate MDB [ 739.601388][T12502] hfs: walked past end of dir [ 740.117307][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1366'. [ 741.323365][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 742.525853][T12540] xt_connbytes: Forcing CT accounting to be enabled [ 742.532971][T12540] Cannot find add_set index 0 as target [ 742.544467][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1370'. [ 743.240286][T12546] loop4: detected capacity change from 0 to 164 [ 743.534470][T12551] loop8: detected capacity change from 0 to 128 [ 743.541916][T12551] omfs: Bad value for 'umask' [ 743.875859][T12546] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 743.943606][T12546] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 744.536461][T12562] loop5: detected capacity change from 0 to 128 [ 744.548415][T12562] omfs: Bad value for 'umask' [ 745.625938][T12543] loop7: detected capacity change from 0 to 32768 [ 746.673807][T12543] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop7": -EINTR [ 747.002369][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 747.444134][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.458626][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.979162][T12606] loop4: detected capacity change from 0 to 32768 [ 748.010426][T12606] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1385 (12606) [ 748.103403][T12606] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 748.114210][T12606] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 748.123278][T12606] BTRFS info (device loop4): using free-space-tree [ 748.552590][T12605] delete_channel: no stack [ 748.586300][ T5837] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 751.415008][T12672] loop4: detected capacity change from 0 to 2048 [ 751.429529][T12672] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 751.595090][T12672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 753.326167][T12699] netlink: 'syz.7.1400': attribute type 10 has an invalid length. [ 753.363574][T12699] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.370978][T12699] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.056027][T12711] loop7: detected capacity change from 0 to 128 [ 754.063665][T12711] omfs: Bad value for 'umask' [ 755.013944][T12718] loop4: detected capacity change from 0 to 2048 [ 755.061448][ T5903] loop4: p1 p2 < > p3 < p5 p6 > p4 [ 755.067076][ T5903] loop4: partition table partially beyond EOD, truncated [ 755.113918][ T5903] loop4: p2 start 4278190080 is beyond EOD, truncated [ 755.136620][ T5903] loop4: p4 size 8192 extends beyond EOD, truncated [ 755.176696][ T5903] loop4: p6 size 8192 extends beyond EOD, truncated [ 755.246143][T12718] loop4: p1 p2 < > p3 < p5 p6 > p4 [ 755.260318][T12718] loop4: partition table partially beyond EOD, truncated [ 755.297282][T12718] loop4: p2 start 4278190080 is beyond EOD, truncated [ 755.310376][T12718] loop4: p4 size 8192 extends beyond EOD, truncated [ 755.322414][T12718] loop4: p6 size 8192 extends beyond EOD, truncated [ 755.399719][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 755.568138][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.599667][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 755.666804][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 755.688969][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.719761][ T9] usb 5-1: config 0 descriptor?? [ 755.771263][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 756.082295][T12735] loop7: detected capacity change from 0 to 2048 [ 756.256022][T12735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.312455][T12735] EXT4-fs (loop7): shut down requested (2) [ 756.396352][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 756.414650][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1407'. [ 756.963282][T11429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.595406][T12759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 757.855790][T12158] usb 5-1: USB disconnect, device number 20 [ 758.309444][T12770] loop4: detected capacity change from 0 to 32768 [ 758.318716][T12770] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1411 (12770) [ 758.347139][T12770] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 758.357390][T12770] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 758.366310][T12770] BTRFS info (device loop4): using free-space-tree [ 758.914998][ T5837] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 760.211471][T12796] netlink: 'syz.4.1414': attribute type 10 has an invalid length. [ 760.626884][T12805] netlink: 'syz.7.1418': attribute type 10 has an invalid length. [ 761.052934][T12809] loop5: detected capacity change from 0 to 2048 [ 761.067573][T12809] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 761.612153][T12809] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 762.575358][T12825] --map-set only usable from mangle table [ 762.591930][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'. [ 763.504608][ T9983] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 763.516291][ T9983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 763.525625][ T9983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 763.534168][ T9983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 763.542060][ T9983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 764.138514][ T5842] jfs_flush_journal: synclist not empty [ 764.145900][ T5842] metapage: ffff8880339fb2e8: 00001000 00000000 00003aec 00000000 [ 764.208022][ T5842] metapage: ffff8880339fb2f8: 02739120 ffffc900 5a87a228 ffff8880 [ 764.218711][ T5842] metapage: ffff8880339fb308: 00000004 00000000 00000000 00000000 [ 764.226584][ T5842] metapage: ffff8880339fb318: 733ec000 ffff8880 0000001c 00000000 [ 764.291705][ T5842] metapage: ffff8880339fb328: 00000000 dead4ead ffffffff 00000000 [ 764.333979][ T5842] metapage: ffff8880339fb338: ffffffff ffffffff 99bdade0 ffffffff [ 764.370134][ T5842] metapage: ffff8880339fb348: 9351a340 ffffffff 00000000 00000000 [ 764.389673][ T5842] metapage: ffff8880339fb358: 8bc3ee80 ffffffff 00000300 00000000 [ 764.399280][ T5842] metapage: ffff8880339fb368: 339fb368 ffff8880 339fb368 ffff8880 [ 764.464529][ T5842] metapage: ffff8880339fb378: 01ccfb00 ffffea00 614e0000 ffff8880 [ 764.510251][T12828] chnl_net:caif_netlink_parms(): no params data found [ 764.521151][ T5842] metapage: ffff8880339fb388: 00001000 00000000 00000001 00000000 [ 764.537512][ T5842] metapage: ffff8880339fb398: 5a87a000 ffff8880 [ 764.557579][ T5842] page: ffffea0001ccfb00: 00fff3800000422c ffffea0001b1d348 [ 764.576597][ T5842] page: ffffea0001ccfb10: ffffea0001752c88 ffff8880539e0650 [ 764.596004][ T5842] page: ffffea0001ccfb20: 000000000000001c ffff8880339fb2e8 [ 764.614060][ T5842] page: ffffea0001ccfb30: 00000003ffffffff ffff88807d179a00 [ 764.632139][ T5842] tblock:ffffc90002739110: 03040910 00000000 00003aec 00000000 [ 764.660847][ T5842] tblock:ffffc90002739120: 5a87a228 ffff8880 339fb2f8 ffff8880 [ 764.724726][ T5842] tblock:ffffc90002739130: 614e0000 ffff8880 00030001 00000000 [ 764.847683][ T5842] tblock:ffffc90002739140: 00000000 dead4ead ffffffff 00000000 [ 764.874457][ T5842] tblock:ffffc90002739150: ffffffff ffffffff 99bdafe0 ffffffff [ 764.933520][ T5842] tblock:ffffc90002739160: 9351b218 ffffffff 00000000 00000000 [ 764.976395][ T5842] tblock:ffffc90002739170: 8bc40320 ffffffff 00000300 00000000 [ 765.036305][ T5842] tblock:ffffc90002739180: 02739180 ffffc900 02739180 ffffc900 [ 765.102219][ T5842] tblock:ffffc90002739190: 00000001 00000000 00000100 dead0000 [ 765.210088][ T5842] tblock:ffffc900027391a0: 00000122 dead0000 00003cbc 00000000 [ 765.217824][ T5842] tblock:ffffc900027391b0: 29984a00 ffff8880 00000003 00000cbc [ 765.327475][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 765.348520][ T5852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 765.360131][ T5852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 765.368621][ T5852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 765.379068][ T5852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 765.458403][ T5842] tblock:ffffc900027391c0: 00000000 dead4ead ffffffff 00000000 [ 765.466115][ T5842] tblock:ffffc900027391d0: ffffffff ffffffff 99bdafc0 ffffffff [ 765.477435][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.490624][ T5842] tblock:ffffc900027391e0: 00000000 00000000 00000000 00000000 [ 765.493556][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.579508][T12859] xt_policy: output policy not valid in PREROUTING and INPUT [ 766.456393][T12828] bridge_slave_0: entered allmulticast mode [ 766.463622][T12828] bridge_slave_0: entered promiscuous mode [ 766.481680][ T5842] tblock:ffffc900027391f0: 8bc402e0 ffffffff 00000300 00000000 [ 766.487742][ T5852] Bluetooth: hci6: command tx timeout [ 766.575590][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.598475][ T5842] tblock:ffffc90002739200: 02739200 ffffc900 02739200 ffffc900 [ 766.618375][T12828] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.628947][ T5842] tblock:ffffc90002739210: 539f16a0 ffff8880 00000000 00000000 [ 766.642343][T12828] bridge_slave_1: entered allmulticast mode [ 766.652011][T12828] bridge_slave_1: entered promiscuous mode [ 767.439929][ T5852] Bluetooth: hci7: command tx timeout [ 768.200406][T12860] delete_channel: no stack [ 768.352444][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.559206][ T5852] Bluetooth: hci6: command tx timeout [ 768.629082][T12871] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1436'. [ 768.995187][T12828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.240000][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.295454][T12828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.518309][ T5852] Bluetooth: hci7: command tx timeout [ 769.591687][T12877] netlink: 'syz.5.1438': attribute type 25 has an invalid length. [ 769.600276][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.694562][T12828] team0: Port device team_slave_0 added [ 769.710509][T12828] team0: Port device team_slave_1 added [ 769.893605][T12828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.893629][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.893692][T12828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.014987][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.156617][T12828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.216631][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.286261][T12828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.554553][ T6992] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 770.652054][ T5852] Bluetooth: hci6: command tx timeout [ 771.167874][T12828] hsr_slave_0: entered promiscuous mode [ 771.181047][T12828] hsr_slave_1: entered promiscuous mode [ 771.230460][T12828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.238090][T12828] Cannot create hsr debugfs directory [ 771.599139][ T5852] Bluetooth: hci7: command tx timeout [ 773.588239][ T5852] Bluetooth: hci6: command tx timeout [ 773.778314][ T5852] Bluetooth: hci7: command tx timeout [ 773.839537][T12902] xt_policy: output policy not valid in PREROUTING and INPUT [ 775.068330][T12911] netlink: 'syz.7.1449': attribute type 24 has an invalid length. [ 775.076877][T12916] loop5: detected capacity change from 0 to 128 [ 775.084742][T12916] omfs: Bad value for 'umask' [ 775.522406][ T68] bridge_slave_1: left allmulticast mode [ 775.611518][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1451'. [ 776.157560][ T68] bridge_slave_1: left promiscuous mode [ 776.163701][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.225979][ T68] bridge_slave_0: left allmulticast mode [ 776.238982][ T68] bridge_slave_0: left promiscuous mode [ 776.258641][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.967963][ T68] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 777.320086][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.347197][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.360713][ T68] bond0 (unregistering): Released all slaves [ 777.543517][T12855] chnl_net:caif_netlink_parms(): no params data found [ 778.749489][T12946] --map-set only usable from mangle table [ 778.824168][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 778.942070][T12943] loop5: detected capacity change from 0 to 128 [ 778.949652][T12943] omfs: Bad value for 'umask' [ 779.288777][T12855] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.295990][T12855] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.391322][T12855] bridge_slave_0: entered allmulticast mode [ 779.406621][T12855] bridge_slave_0: entered promiscuous mode [ 779.428109][T12855] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.445961][T12855] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.453491][T12855] bridge_slave_1: entered allmulticast mode [ 779.463465][T12855] bridge_slave_1: entered promiscuous mode [ 779.491271][T12956] netlink: 'syz.5.1459': attribute type 24 has an invalid length. [ 779.626285][ T68] hsr_slave_0: left promiscuous mode [ 779.664411][ T68] hsr_slave_1: left promiscuous mode [ 779.672301][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.697443][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.719491][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.748684][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.861288][ T68] veth1_macvtap: left promiscuous mode [ 779.866914][ T68] veth0_macvtap: left promiscuous mode [ 779.888072][ T68] veth1_vlan: left promiscuous mode [ 779.914039][ T68] veth0_vlan: left promiscuous mode [ 781.134629][ T68] team0 (unregistering): Port device batadv1 removed [ 781.393563][T12966] loop4: detected capacity change from 0 to 32768 [ 781.430716][T12966] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1462 (12966) [ 781.503596][T12966] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 781.523255][T12966] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 781.533205][T12966] BTRFS info (device loop4): using free-space-tree [ 781.940701][T12988] loop7: detected capacity change from 0 to 128 [ 781.948110][T12988] omfs: Bad value for 'umask' [ 782.566307][T13004] loop7: detected capacity change from 0 to 64 [ 782.844263][ T5837] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 783.346195][T13011] netlink: 'syz.4.1469': attribute type 24 has an invalid length. [ 783.958844][ T68] team0 (unregistering): Port device team_slave_1 removed [ 784.051430][ T68] team0 (unregistering): Port device team_slave_0 removed [ 785.070059][ T9946] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 785.131218][T13020] loop5: detected capacity change from 0 to 1024 [ 785.244751][ T9946] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 785.288330][ T9946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.299014][T13020] netlink: 'syz.5.1472': attribute type 11 has an invalid length. [ 785.320810][T13020] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1472'. [ 785.336062][ T9946] usb 5-1: config 0 has no interface number 0 [ 785.365486][T12855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.378334][ T9946] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 785.387435][ T9946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.453561][T12855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.468638][ T9946] usb 5-1: Product: syz [ 785.473557][ T9946] usb 5-1: Manufacturer: syz [ 785.516588][ T9946] usb 5-1: SerialNumber: syz [ 785.606552][ T9946] usb 5-1: config 0 descriptor?? [ 785.675756][T11798] hfsplus: b-tree write err: -5, ino 4 [ 785.688760][ T9946] hub 5-1:0.31: bad descriptor, ignoring hub [ 785.708520][ T9946] hub 5-1:0.31: probe with driver hub failed with error -5 [ 785.750992][ T9946] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 785.760218][ T9946] usb 5-1: No valid video chain found. [ 785.786694][T12828] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 785.892158][T12855] team0: Port device team_slave_0 added [ 785.944437][T12855] team0: Port device team_slave_1 added [ 786.062355][T12828] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 786.244725][T12855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.261955][T12855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.292500][T12855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.324240][T12828] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 786.369157][T12855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.392067][T12855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.418290][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.451284][T12855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.479596][T12828] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 786.791436][T12855] hsr_slave_0: entered promiscuous mode [ 786.820599][T12855] hsr_slave_1: entered promiscuous mode [ 786.851650][T12855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.874751][T12855] Cannot create hsr debugfs directory [ 787.679286][ T9946] usb 5-1: USB disconnect, device number 21 [ 787.984973][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.386166][T13067] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1479'. [ 788.880316][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.956554][T13071] loop7: detected capacity change from 0 to 64 [ 788.992102][T13071] hfs: unable to locate alternate MDB [ 789.023208][T13071] hfs: continuing without an alternate MDB [ 789.180505][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.433174][T13082] loop7: detected capacity change from 0 to 256 [ 789.475005][T13082] vfat: Unknown parameter 'checkTstrict' [ 789.511967][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.437918][T12828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.481399][ T9983] Bluetooth: hci0: command 0x0406 tx timeout [ 791.126278][T12828] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.319662][ T68] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.411781][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.419095][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.485182][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.492442][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.657507][ T68] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.672631][T13104] loop7: detected capacity change from 0 to 2048 [ 791.771148][T13104] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 791.879651][T13110] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 791.882212][ T68] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.093274][T13114] netlink: 'syz.5.1488': attribute type 24 has an invalid length. [ 792.146515][T13117] overlayfs: missing 'lowerdir' [ 792.231704][ T68] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.518823][T13124] vivid-000: disconnect [ 792.654268][T13122] loop5: detected capacity change from 0 to 2048 [ 792.729944][ T5903] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 792.749786][ T5903] loop5: partition table partially beyond EOD, truncated [ 792.799799][ T5903] loop5: p2 start 4278190080 is beyond EOD, truncated [ 792.830291][ T5903] loop5: p4 size 8192 extends beyond EOD, truncated [ 792.897479][ T5903] loop5: p6 size 8192 extends beyond EOD, truncated [ 792.990204][T13122] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 792.998597][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 793.035342][T13122] loop5: partition table partially beyond EOD, truncated [ 793.079519][T13122] loop5: p2 start 4278190080 is beyond EOD, truncated [ 793.119991][T13122] loop5: p4 size 8192 extends beyond EOD, truncated [ 793.170779][T13122] loop5: p6 size 8192 extends beyond EOD, truncated [ 793.201838][T13123] vivid-000: reconnect [ 793.217500][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.247351][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 793.265415][T12828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.294518][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 793.337489][ T68] bridge_slave_1: left allmulticast mode [ 793.359330][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.390412][ T68] bridge_slave_1: left promiscuous mode [ 793.396343][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.452395][ T9] usb 6-1: config 0 descriptor?? [ 793.575697][T13135] loop4: detected capacity change from 0 to 64 [ 793.576952][ T68] bridge_slave_0: left allmulticast mode [ 793.588448][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 793.609529][T13135] hfs: unable to locate alternate MDB [ 793.614977][T13135] hfs: continuing without an alternate MDB [ 793.629276][ T68] bridge_slave_0: left promiscuous mode [ 793.656236][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.782050][ T68] bridge_slave_1: left allmulticast mode [ 793.787766][ T68] bridge_slave_1: left promiscuous mode [ 793.834764][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.913024][ T68] bridge_slave_0: left allmulticast mode [ 793.963167][ T68] bridge_slave_0: left promiscuous mode [ 794.003378][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.058067][T13138] loop4: detected capacity change from 0 to 1024 [ 794.128409][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1489'. [ 794.813565][ T30] audit: type=1326 audit(1749648486.421:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13137 comm="syz.4.1492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbde78e929 code=0x0 [ 794.954858][T13139] loop4: detected capacity change from 0 to 256 [ 794.967428][T13139] exfat: Unknown parameter 'ÿÿ' [ 795.180065][T13139] loop4: detected capacity change from 0 to 8192 [ 795.253014][ T6025] loop4: AHDI p1 p2 [ 795.269009][ T6025] loop4: p1 size 2164260863 extends beyond EOD, truncated [ 795.304248][T13139] loop4: AHDI p1 p2 [ 795.308811][T13139] loop4: p1 size 2164260863 extends beyond EOD, truncated [ 795.543872][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.724942][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.843189][ T68] bond0 (unregistering): Released all slaves [ 796.242036][ T6025] udevd[6025]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 796.258818][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 796.323264][ T6025] udevd[6025]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 796.337416][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 796.617304][T13141] loop7: detected capacity change from 0 to 32768 [ 796.669582][T13141] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1493 (13141) [ 796.703067][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 797.291673][T13141] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 797.328401][T13141] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 797.337316][T13141] BTRFS info (device loop7): using free-space-tree [ 797.446623][ T68] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 797.527225][T13141] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1493'. [ 797.562383][T13141] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1493'. [ 797.774570][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.787590][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.800300][ T68] bond0 (unregistering): Released all slaves [ 798.655040][ T5989] usb 6-1: USB disconnect, device number 15 [ 798.753791][T11429] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 798.762479][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 799.895079][T13188] loop5: detected capacity change from 0 to 64 [ 799.919184][ T31] INFO: task jfsCommit:113 blocked for more than 143 seconds. [ 799.932906][ T31] Not tainted 6.16.0-rc1-next-20250611-syzkaller #0 [ 800.074066][T13188] hfs: unable to locate alternate MDB [ 800.082991][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.117052][T13188] hfs: continuing without an alternate MDB [ 800.188213][ T31] task:jfsCommit state:D stack:26920 pid:113 tgid:113 ppid:2 task_flags:0x200040 flags:0x00004000 [ 800.315215][ T31] Call Trace: [ 800.368212][ T31] [ 800.398207][ T31] __schedule+0x16f5/0x4d00 [ 800.403067][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.408097][ T31] ? schedule+0x165/0x360 [ 800.458914][ T31] ? __pfx___schedule+0x10/0x10 [ 800.463905][ T31] ? schedule+0x91/0x360 [ 800.488653][ T31] schedule+0x165/0x360 [ 800.498232][ T31] io_schedule+0x80/0xd0 [ 800.502563][ T31] lock_metapage+0x1f3/0x400 [ 800.507200][ T31] ? lock_metapage+0x10b/0x400 [ 800.531117][ T31] ? __pfx_lock_metapage+0x10/0x10 [ 800.536341][ T31] ? __pfx_default_wake_function+0x10/0x10 [ 800.555213][ T31] ? do_read_cache_folio+0x4c6/0x590 [ 800.588597][ T31] ? __pfx_metapage_read_folio+0x10/0x10 [ 800.594416][ T31] __get_metapage+0x497/0xde0 [ 800.614443][ T31] diIAGRead+0xce/0x140 [ 800.623298][ T31] diFree+0x983/0x2c40 [ 800.627478][ T31] ? __pfx_diFree+0x10/0x10 [ 800.632091][ T31] ? __dquot_initialize+0x218/0xcb0 [ 800.638418][ T31] ? jfs_free_zero_link+0x33a/0x4a0 [ 800.643670][ T31] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 800.658308][ T31] jfs_evict_inode+0x331/0x440 [ 800.663225][ T31] ? evict+0x4f8/0x9c0 [ 800.667360][ T31] ? __pfx_jfs_evict_inode+0x10/0x10 [ 800.688229][ T31] evict+0x504/0x9c0 [ 800.692215][ T31] ? __pfx_evict+0x10/0x10 [ 800.696662][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 800.725569][ T31] ? _raw_spin_unlock+0x28/0x50 [ 800.735705][ T31] ? iput+0x6d8/0x9d0 [ 800.740138][ T31] jfs_lazycommit+0x43f/0xa90 [ 800.744873][ T31] ? __pfx_jfs_lazycommit+0x10/0x10 [ 800.762104][ T31] ? __pfx_default_wake_function+0x10/0x10 [ 800.768095][ T31] ? __kthread_parkme+0x7b/0x200 [ 800.773159][ T31] ? __kthread_parkme+0x1a1/0x200 [ 800.778562][ T31] kthread+0x711/0x8a0 [ 800.782698][ T31] ? __pfx_jfs_lazycommit+0x10/0x10 [ 800.794006][ T31] ? __pfx_kthread+0x10/0x10 [ 800.799598][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.804859][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.813783][ T31] ? __pfx_kthread+0x10/0x10 [ 800.828552][ T31] ret_from_fork+0x3f9/0x770 [ 800.838419][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 800.848711][ T31] ? __switch_to_asm+0x39/0x70 [ 800.853534][ T31] ? __switch_to_asm+0x33/0x70 [ 800.865657][ T31] ? __pfx_kthread+0x10/0x10 [ 800.872484][ T31] ret_from_fork_asm+0x1a/0x30 [ 800.877314][ T31] [ 800.905112][ T31] [ 800.905112][ T31] Showing all locks held in the system: [ 801.003147][ T31] 1 lock held by pool_workqueue_/3: [ 801.012667][ T31] #0: ffffffff8e1448f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 801.038732][ T31] 1 lock held by khungtaskd/31: [ 801.043652][ T31] #0: ffffffff8e13ede0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 801.069703][ T31] 4 locks held by kworker/1:1/43: [ 801.083115][ T31] 6 locks held by kworker/u8:4/68: [ 801.096369][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 801.126741][ T31] #1: ffffc9000211fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 801.141025][ T31] #2: ffffffff8f5069d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 801.159928][ T31] #3: ffffffff8f5135c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 801.172594][ T31] #4: ffff88806b5d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1ab/0x13c0 [ 801.184176][ T31] #5: ffffffff8e1448f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 801.195603][ T31] 2 locks held by jfsCommit/113: [ 801.202967][ T31] #0: ffff8880575e8920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diFree+0x29f/0x2c40 [ 801.213470][ T31] #1: ffff8880539e2618 (&jfs_ip->rdwrlock/1){.+.+}-{4:4}, at: diFree+0x2bd/0x2c40 [ 801.225909][ T31] 2 locks held by getty/5604: [ 801.231946][ T31] #0: ffff88803065f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 801.242012][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 801.252447][ T31] 3 locks held by kworker/u8:14/6992: [ 801.257853][ T31] #0: ffff88802fe47948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 801.270049][ T31] #1: ffffc9000b237bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 801.283408][ T31] #2: ffffffff8f5135c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 801.296557][ T31] 1 lock held by syz-executor/12828: [ 801.302133][ T31] #0: ffffffff8f5135c8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 801.311890][ T31] 7 locks held by syz-executor/12855: [ 801.317321][ T31] #0: ffff88802f370428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 801.326608][ T31] #1: ffff88805da35888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 801.337638][ T31] #2: ffff888140b533c8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 801.348052][ T31] #3: ffffffff8edadb88 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 801.362753][ T31] #4: ffff88807add90e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 801.372350][ T31] #5: ffff88807addc250 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xc1/0xb70 [ 801.382863][ T31] #6: ffffffff8f5135c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 801.392752][ T31] 1 lock held by rm/13201: [ 801.397275][ T31] [ 801.436728][ T31] ============================================= [ 801.436728][ T31] [ 801.446102][ T31] NMI backtrace for cpu 0 [ 801.446120][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-next-20250611-syzkaller #0 PREEMPT(full) [ 801.446142][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.446154][ T31] Call Trace: [ 801.446162][ T31] [ 801.446171][ T31] dump_stack_lvl+0x189/0x250 [ 801.446191][ T31] ? __wake_up_klogd+0xd9/0x110 [ 801.446216][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.446233][ T31] ? __pfx__printk+0x10/0x10 [ 801.446267][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 801.446291][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 801.446308][ T31] ? _printk+0xcf/0x120 [ 801.446333][ T31] ? __pfx__printk+0x10/0x10 [ 801.446356][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 801.446384][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 801.446408][ T31] watchdog+0xfee/0x1030 [ 801.446436][ T31] ? watchdog+0x1de/0x1030 [ 801.446469][ T31] kthread+0x711/0x8a0 [ 801.446494][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.446519][ T31] ? __pfx_kthread+0x10/0x10 [ 801.446543][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.446565][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.446585][ T31] ? __pfx_kthread+0x10/0x10 [ 801.446607][ T31] ret_from_fork+0x3f9/0x770 [ 801.446636][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 801.446669][ T31] ? __switch_to_asm+0x39/0x70 [ 801.446687][ T31] ? __switch_to_asm+0x33/0x70 [ 801.446704][ T31] ? __pfx_kthread+0x10/0x10 [ 801.446727][ T31] ret_from_fork_asm+0x1a/0x30 [ 801.446762][ T31] [ 801.446770][ T31] Sending NMI from CPU 0 to CPUs 1: [ 801.607910][ C1] NMI backtrace for cpu 1 [ 801.607927][ C1] CPU: 1 UID: 0 PID: 3452 Comm: kworker/u8:9 Not tainted 6.16.0-rc1-next-20250611-syzkaller #0 PREEMPT(full) [ 801.607947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.607956][ C1] Workqueue: events_unbound toggle_allocation_gate [ 801.607977][ C1] RIP: 0010:_raw_spin_unlock+0x5/0x50 [ 801.607996][ C1] Code: 89 df 5b 41 5e e9 fb 1b 34 f6 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 <48> 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9a 88 33 f6 48 89 df e8 f2 [ 801.608009][ C1] RSP: 0018:ffffc9000be776d0 EFLAGS: 00000293 [ 801.608022][ C1] RAX: ffffffff81672fb3 RBX: 0000000000000000 RCX: ffff888031175a00 [ 801.608033][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801a47b060 [ 801.608043][ C1] RBP: ffffc9000be77830 R08: ffffffff8fa142f7 R09: 1ffffffff1f4285e [ 801.608054][ C1] R10: dffffc0000000000 R11: fffffbfff1f4285f R12: dffffc0000000000 [ 801.608064][ C1] R13: ffff88801a47c558 R14: 0000000000000200 R15: ffffffff82190ade [ 801.608075][ C1] FS: 0000000000000000(0000) GS:ffff888125d45000(0000) knlGS:0000000000000000 [ 801.608088][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.608099][ C1] CR2: 00007fdd9badb6b0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 801.608115][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 801.608124][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 801.608133][ C1] Call Trace: [ 801.608139][ C1] [ 801.608147][ C1] __text_poke+0x7b1/0xa10 [ 801.608173][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 801.608200][ C1] ? kmem_cache_alloc_node_noprof+0x8e/0x3c0 [ 801.608222][ C1] ? __pfx___text_poke+0x10/0x10 [ 801.608236][ C1] ? rcu_is_watching+0x15/0xb0 [ 801.608249][ C1] ? trace_contention_end+0x39/0x120 [ 801.608270][ C1] smp_text_poke_batch_finish+0x8af/0x1100 [ 801.608291][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 801.608309][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 801.608332][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 801.608350][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 801.608368][ C1] static_key_disable+0x1a/0x20 [ 801.608382][ C1] toggle_allocation_gate+0x1a1/0x240 [ 801.608397][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 801.608411][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 801.608431][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 801.608452][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 801.608473][ C1] process_scheduled_works+0xade/0x17b0 [ 801.608504][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 801.608532][ C1] worker_thread+0x8a0/0xda0 [ 801.608555][ C1] kthread+0x711/0x8a0 [ 801.608573][ C1] ? __pfx_worker_thread+0x10/0x10 [ 801.608586][ C1] ? __pfx_kthread+0x10/0x10 [ 801.608603][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.608618][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.608635][ C1] ? __pfx_kthread+0x10/0x10 [ 801.608651][ C1] ret_from_fork+0x3f9/0x770 [ 801.608671][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 801.608693][ C1] ? __switch_to_asm+0x39/0x70 [ 801.608708][ C1] ? __switch_to_asm+0x33/0x70 [ 801.608721][ C1] ? __pfx_kthread+0x10/0x10 [ 801.608737][ C1] ret_from_fork_asm+0x1a/0x30 [ 801.608759][ C1] [ 801.618384][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 801.618401][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-next-20250611-syzkaller #0 PREEMPT(full) [ 801.618422][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.618432][ T31] Call Trace: [ 801.618440][ T31] [ 801.618448][ T31] dump_stack_lvl+0x99/0x250 [ 801.618469][ T31] ? __asan_memcpy+0x40/0x70 [ 801.618492][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.618509][ T31] ? __pfx__printk+0x10/0x10 [ 801.618540][ T31] panic+0x2db/0x790 [ 801.618569][ T31] ? __pfx_panic+0x10/0x10 [ 801.618592][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 801.618608][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 801.618629][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 801.618652][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 801.618676][ T31] watchdog+0x102d/0x1030 [ 801.618702][ T31] ? watchdog+0x1de/0x1030 [ 801.618732][ T31] kthread+0x711/0x8a0 [ 801.618754][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.618775][ T31] ? __pfx_kthread+0x10/0x10 [ 801.618796][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.618815][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.618834][ T31] ? __pfx_kthread+0x10/0x10 [ 801.618854][ T31] ret_from_fork+0x3f9/0x770 [ 801.618899][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 801.618935][ T31] ? __switch_to_asm+0x39/0x70 [ 801.618952][ T31] ? __switch_to_asm+0x33/0x70 [ 801.618969][ T31] ? __pfx_kthread+0x10/0x10 [ 801.618989][ T31] ret_from_fork_asm+0x1a/0x30 [ 801.619021][ T31] [ 802.081419][ T31] Kernel Offset: disabled [ 802.085825][ T31] Rebooting in 86400 seconds..