last executing test programs: 7m30.230840591s ago: executing program 4 (id=74): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x87}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8001, 0x81}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, [], [], 'geneve1\x00', 'gre0\x00', {0xff}}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2c8) 7m30.071826282s ago: executing program 4 (id=75): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4f8}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r4, 0x4bfa, 0x10000000000004) 7m28.383953979s ago: executing program 4 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, 0x1000f) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) 7m27.237016523s ago: executing program 4 (id=79): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48cf, &(0x7f0000000540)={[{@shortname_winnt}, {}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 7m26.864031768s ago: executing program 4 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000d00)={0x2e8, 0x19, 0x2, 0x70bd2d, 0x25dfdbfe, {0x19}, [@nested={0x28f, 0x29, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x8}, @nested={0x190, 0xd8, 0x0, 0x1, [@nested={0x10, 0x14c, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='-]*.\x00'}]}, @generic="834413160456d8b5857943f920ebfbec5a807f15bec52c6eb20de85926bc694506a21b478a84f1aa8430d723cf14bb9f69d9d9db378c5b79b03a59de867cc64a6640fcdd13a469cdd609b614356f29311fd730047f5c7591557eebebceecdcd361a85a6649f01c46dc7fe5c713cca8122054119a78aeb6007c87cbc96f8b44a6cd5988d0c0ac1d0fda008aee7e2f74039555e2422c7e6b3a931f4060fa816c", @generic="9c39dfae0fa04ff193116cdb55ac444c5efcf13aed1ae2a6c20f7a5e11ff541828176d89a3801acff431aa3a996ac470bf5b868be4c6f5fbaa720deca226f0211ec08e699912b7dfab05d82fdd72c0dd05b010062e7c16ea82d30422f6c01f671fafd004aca9ba2bbd7fe5096667a5412b069e212039424d3ba1eef07c5142b52f3a42612e9e49ca5b5c967044af8d1904fd4dee9aa154a6c273c5bbeecd610d22b1e929c89117c0f2a1fc9cc7", @nested={0x2e, 0xcf, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @fd=r0}, @generic="5ed7883e9003cf998625333e5840a2f897bd9dbab092ee5cb390", @nested={0x4, 0xe}, @nested={0x4, 0x14}, @generic]}]}, @nested={0x4, 0xec}, @generic="63757233995fd22d9fab30dbe6adad307057aae2d47d579d2976037b958b27ee748b1654bd82f19447b5038f8bc204f823f331591a2790427e0dedab3fceb2e7724cad580a642001da3f772d414fa9ec8b77079dc6f60741c47cd872f4920341560aee6eac27cfecf54b59656a44520bce0b976140eb1dc751f8253ead05985c39ae257fb735424af9610dced2a3e705519c7b80c371088868a4f9ae54dc2c0b7bbcb455c6b900bc12afe1ba0a1cb57e4d162f", @generic="3344bd16a04f4b45a5641e390b23a77a97d6a94968eb11152b7047b8", @generic="746afebdc8499fe729c83726b839a8a1b310e6e7f608f36f1e819623b720d335"]}, @generic="ac5b005e8983e2755100198782d564f46a269a84187b6942df3729cff2e8af23ac2584147e8b9f6700599fd369c747fc50100577f2d62c318dcf0a07a53720fc2f9cfcbf"]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40000085}, 0x41) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) 7m25.983502533s ago: executing program 4 (id=85): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 7m22.77527429s ago: executing program 32 (id=85): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3m28.440915538s ago: executing program 1 (id=765): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)={[{@lazytime}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}], [{@obj_type={'obj_type', 0x3d, 'jL\xd8d\xc2\x00\x00\x00'}}, {@uid_gt}, {@pcr={'pcr', 0x3d, 0x3f}}, {@uid_eq}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}, 0x9b, 0x4fc, &(0x7f0000000140)="$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") openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x85) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) r5 = dup3(r4, r3, 0x0) connect$unix(r5, &(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, 0x0, 0xc5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 3m27.192461156s ago: executing program 1 (id=767): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000a000200aabaaaaaaabb0000080009"], 0x30}}, 0x80) 3m24.580647154s ago: executing program 1 (id=772): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="b9000000000000", @ANYRES64], 0xb8) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000029c0)={0x288, 0xffffffffffffffda, 0x0, [{{0x6, 0x1, 0xe, 0x1, 0x7, 0x20000, {0x4, 0xd355, 0x8, 0x6, 0x5, 0x2, 0x9, 0x20000, 0x6, 0xc000, 0x6}}, {0x4, 0x100000001, 0x0, 0x8}}, {{0x6, 0x2, 0x0, 0x9, 0x8, 0x8000, {0x3, 0x80000001, 0x5, 0x80000000, 0x2, 0x4, 0x5, 0x8, 0xa05, 0x6000, 0x9, 0x0, 0x0, 0x6, 0x1}}, {0x3, 0x4, 0x5, 0xfffffffe, 'wfdno'}}, {{0x6, 0x2, 0xcb28, 0x4, 0x5, 0x5, {0x1, 0x4, 0xe33, 0xaf6, 0x5, 0x0, 0x7, 0x4, 0x1, 0xa000, 0x7, 0x0, 0x0, 0xdbb9, 0x1}}, {0x5, 0x8, 0x2, 0x5f14, '\x98}'}}, {{0x2, 0x1, 0xfffffffffffffff8, 0x1, 0x2, 0x3, {0x2, 0x73a, 0x0, 0xffff, 0x0, 0xf, 0x2, 0x7, 0xfffff801, 0xa000, 0xfff, 0x0, 0x0, 0x8, 0x7b4}}, {0x5, 0x7fff, 0x1, 0x0, '\x00'}}]}, 0x288) 3m24.194223542s ago: executing program 1 (id=773): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6f5, &(0x7f0000000880)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000459000/0x7000)=nil) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x404c810}, 0x4010) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 3m22.480513725s ago: executing program 1 (id=775): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x18) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180), 0x0) 3m20.844363798s ago: executing program 1 (id=779): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 3m20.125664101s ago: executing program 33 (id=779): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 17.789221728s ago: executing program 2 (id=1240): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x2e0, 0x138, 0xa0, 0x2e0, 0x138, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x72, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e22}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffffff, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xc, 0x3}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x8}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @empty}}}, {{@ip={@rand_addr=0x64010102, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 15.599040056s ago: executing program 2 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 13.549752728s ago: executing program 3 (id=1247): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x10003, 0x3, 0x1, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r7}, 0x47) 11.389846543s ago: executing program 6 (id=1255): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc2ed000e, &(0x7f00000000c0), 0xfe, 0x463, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(0x0, 0x0) r0 = open(0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3ff293750a0d03fd968f962874ee9855b08db619a0fb9b11006c3167"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioperm(0x0, 0x2, 0x3) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r6 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x96) 10.80539292s ago: executing program 0 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x74}}, 0x0) 9.963888005s ago: executing program 0 (id=1257): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 9.930370723s ago: executing program 2 (id=1258): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x7a, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x5, 0xf7, 0xf9, 0x8a, 0x6, [], [{{0x9, 0x5, 0x9, 0x4, 0x20, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4a, 0xa91}, @generic={0x14, 0x1, "f50510c401aaa61fd1a25de655743dd9c64a"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x0, 0x1, 0xe}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0xa, 0x0, 0x6}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xf4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x2}]}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x7, 0x2, 0x1}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r7, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, 0x0) setns(r1, 0x24020000) 9.488078544s ago: executing program 0 (id=1260): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8941b19eafc7cf74) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet6_buf(r9, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x81, 0xf80, &(0x7f0000000700)="85653f453420ca7d5107cac3b1c61de0a1009492a7c67d538843c3f5ba1f143fc6f1cd155f7653e1393744f396a94d8d0becf9445701326980185d6f5cc0c2ee263914da7695c86440305aa84ad2ff0c61d29e1218e6659aedbc1cea7416b5b4a991455d2534207f281a52670d763fdb36af099158c93f565c3ec3a6eddd7ee3974954d0d20fa5635c69037286a94ddd6f1a231625bcc29bdb05b5e8fef40e9a6a30de284e26f47210a18f5b1063528c16d560d916a6c811c1bae078daa7534d43906981300cd79bddf1b6c4bb873604d671da76de5d729fcd8bd703e97bde4721558c2a43dc7d5b6208acdcd8f82f3bba8753d4136b76471bd0d8d31a9f1596a15e0e18e14005249610e97f6bf581db1a50871d65742514336bc9e1fcee7dd958da853a56757f38a1009a8f81886992d594388aa4815b168d966b71b50f87b4a6ef57b5c8b1e0ce840c244d052ddf45923a7843883431b9bc43785c0e07a24459fe47642a251f6181f8c679e6bd568213f1df3cdd59dd9bd3c6131865f11570fe242d6551dc3201eaa3705cf9096561fce1273b3b767f0ea0657acf84783f609186b63533973d5b495b5bf5e66364d035214286f56748e275d2b4df9def6e844e69ba0958a9762a9c7e278811b2cda2c1abf4530cb5c3283a8bb8024bc3ed59524c6d5283bba208769540eb9f433d7a759ca5bab28ede3f39742350b9900e94c19407394b600510d553163392189c3cd831cb014260b48ed47e15fe8f89dc4e13933bf66f00d3570158130f73d641db28ddaa3dbd06fc777bc059ab7138cb7e72120e0c45135d4bff8d68dd33cebc410f116fc8bec4317e59ed5fdf7be27b64aad180ac6453b283c187072a232be84445ed91ef2ba779a7a445ee8199fafc1c74e0073fb3313a16d317b9aac2b37e215cf76984668446b2194712cd1cbcf78c9a10bc9dd104dbc03ffb0dc4a28484a0332f98cf1b99322b176546cf0c9b180e627a7e67bb16e671fdc739c255ddcba53457fb12d39700d2695f2414668f9665ec167bc763b2191f913efe3eab99a05c737662930f46567d0e2b7d3fdfaedda8ab53c4f4e0a700efe0c8cf34b30b1c2569216d1ddf1471c7cab5ccf0dae565dfcc42b2fb0d19fb92808b42d086c68eb3c0ed0a1954e19fa1e3d85bfd8a521d6230b407ed193a625f7f289c31a3a1738505c5e62177bb5b791bd861827d48655ea01d2a5009c4e8c78e426ccad4fcbe96b532eee5208967e6ee8a680319a005411ecb28e764aadf1aa83fd46f09028cd2b0ac6babc10f48c8ad3e886fb949672410b3ac31364753cabe3e9518fafc0189c7135445d202bd9703b8571ccc44c9de9f7b94c3f43afab423dddf2c8c621e2b0042b75cc198b1b93710e09fb36b4dc9c962bc4def0598eb76d9bb1e1dccf092461351b63de3c1ba850c0d82b6ebf932e32aab962b4da19fd9692164a3447f13c9eddaba5c298a76c195a86d2421906a8f242bc5c7553f0d45f23edda3a888278bc195bfb1d142361d398d8e94731fe0ff2d408ed5f6e9163623c3fb41c8cd92fed66fba7cf8799bd3a37855c1b13634190cfe32817dcc31cd320bf39a1a843d8f6c1f6cb1bd53bd45a341fc54b14bd129f1295de6f4e1693e0299dcd95a7c2d1fc909e5ee61215bdb01ea46a7d580ffe4bfb9b0bf1f5a4756151cbc3e768b77357f7b6bf568c5acb81d1d10fb7661ac5b47c0b89885857e1f0ae27a47b5890fcb316abf6a6de29ff9115f7826897f920c07816b8dfcae84d1f1baa252328caac033e723d136b8b23288a7d8db15598ba302b122ba18a300b593d1af073b8c2d627bf9c6305d79b9041f392d00bb53e18e485495d0429a873efb57fd4aefc6c5c18a37ff5cc728a86d6a06a56c390d743d0688f972cbf0d4741b77392735d0935662c150d42b74f841b463a3a91e7078e6c3cb4f627de75964a3d72b61ded7a056872ade46f34497e69922e5d900fa518042682c86ac4fd3488874c7c3e2650bbe330b7d3f8696c44199ff232ff7bcace227b6221f50c0a08378338ee81b5a86c4cbe1316c1a98761fb7979a04a3d42b9560d0852fde3054ee25e8f20db90c16de4a2de142006b7309870dfb1b4cf6a7daf418cf694a888adfce81687ab35b303f77b3437ad6c45cc35a6074ecba569d5e6d641e6b240177f0c8a1a1d4dc9f209ef748832578b0a6b80caf9ef4d0192ca8f73eee012a119c97e34bc6901ee7532345a5162d81fcd1981e9b0b6997b890277ed72604f5b29e82288924715dcb53888fbcc6dc338576e1819e2e252167b3bd01f9ec9e75cb4d62631906e728313a65c07d2778ecf3a9ee0c10fb4cf24966c4824cf23385008a892577c58d62278512160119fdc9e26d0dd617083be3c36439ffc1e074299ccde8049540ecfc89bb8351e2331b99ec9444fbcdf4401e507492c3fd63ae394b65a82aab32b589e16498b4cd8242839b75f730213ca4588a360807a813d62369a975a264e756977a1670e3d906308aa5648cca15293dfbb240eff8277262d41d1a71e0179eeb77318c1cdad85a8631d0b9950ed89c183589fa675eb0e008aaf7cfb19b87f6537ddfe55d13b6a95be4ca0baef65b724f0fb1f35ba4b13312dc06cec253c1ee3df64279c30fa2a85dbca8e52729016439cbe86e5639b177de80333a09b230a569b14fca2fb6c8294a172ecf6c9b9019c23b09c083ba564e6a137432a5460a5aea13b70bf0fb81a9ba5c2d6df490cbe4fe9ad6658b9b0f74e5ee9e5788840f3e3d0b7619c7fb4f960ce821de814ba73e5f5c75707e4ea144b003f250371b272fd317bfa7fbbda24456f2d032feca108532afda61a600e1532e9256e4fe6cf7e41f0964496a1485e7996ce8ab4375c694de12445d3d2706f957f12b29dcbf58fd449881770bd12a948cfa4b3dd2097b1b42bfa3c7eced5f0838b685bfde7d00e656244c6744953ff2e1741e0057be97a2434a25b9d976e220f4e46fa9da305fd626ab3ff16b0ee82b09d738c92923c8ada89493a0e6282d0ecd5e3498adc8cad641d8eb86669ebcd7f08f27ec47b850257582def7c16ea4ca545bb4c5b3b8612138a98f2d0528d083d067e40d51405174f2a3a4df89c822859f6cfaaf967eb43d41caee5ef44861eca76a647fd826b33460a5be331bc0e7ee0cd73683419b518f679197da31fc751a31a4ace15d481774211c7d832948b0d5c9577d5a5876909ee75a34ed78a819de1d11ff64ba157432c7e26d9e492cf5f9103639d0afd8b6b29168cdc7af1f5a219243856f25aab4981c940d143b0935d8cdd860f3687e3b30a424233b7bb96fa18bd42c7def00baa43fe15a556feca816164b1d94a2bca6ed3abe60969db27d12ab9948fb73ef599cd2d8eb2fea93814a0027f2aaa940c2b325da21b07abe82b43f9d17c9a78665e30ccad353e5167fc582e85fd888cfafa4a355673c0a771700ae1e6763bc0f2bb130ea9dead2b75ce360d635a760122e8e6a351c68ee2c707f42475222d998e2ed0829394597a6c0406cdba56e3209cc1ce6af6fedeae4e932053ba7a31ed2b413ca70511a95874be02da6d6512768a20187d9276e7faaf26a31f7c471ea235a8e39bebfc089871cffcdbb6887e8c954b23d3efc349999c202e23114bb1b5717150e06d84c1651630b248594bd8b4cd987b0db3b09d2dd4e8bcb9e0b5ebe79036ddf7f86ca3b5c0d9e34e2b82be9e7e4d9ada32bc56af4d34282fff7610a685084007e1c9dbda3abd403d7c324bbcced9d355350f70114270d454c65c4b3245c0473c8a10e9dd9c7bb6bc55df646a76dbc07593217e825096139a1e8b6971f72f2eec80f41b2ec980be41ec841931be6515c70db08f9bae265ba99a05fcb29c0d723fdd502901c3a3dde76e000eaa46e24c6f3b09fe4547db0d094c7ed26832e429fc5a6305b8fae3e8eba015b5b80f3edbd5a9e5743650b1b4712b3289179dc95a52bb8b136a23091d62ca75af09e609c59271cb408ea74c369323b41ae9cfeb557fc7218f48187ceda18b555566de67ea6a5e109498b6b95afd166f105a2c0fba32e5f655182b318e248f863d54e17ebc8146dfe72553b2bb0334673405e1aacbc1b4174f15fede379bccfa63ac01ae2edce46cbbc18c43e188946e9ce6f650a3242688b0036edf5e6a53fcd43ee55012997041dc80d7b529097424cf6014cac9d62aea104913b20ad57358b723d0dacb14e5eacf32fff43a52d1a3c31ecb8b82a47a0c69b7a05e38dac434aa08ddce5b144ae4fc113d07adbf540878750877aef994796b66419ff992f6c4fbdd527d1970701b1a873905d5cf51dbd6a873123d85a45700e9f496bf27dba143bc00846cac194a7dda72273d9294e80f2d28c68c5936db45ac92be19f0fa06d4a7bb8e564c6ea5dfcdeb38d0981bbd3280b81b1eff7c07690946b993b86238e59a8a448d4cb9cdf1044ece50fa7bae2862fdd50a988d5f6868f5409e619bb2f3d951058ebb850da0db361cf158d78ebfe51d529e8c51a5c1c2023e9c3ac46d235a8f615e66e4b3a694ec1b993f104fe46465c3581af614079d5acaf3449c22b34dadbfa50c9271896d8d4be1fa4b840f4c3c20d2bcdeb1c4f9f04031a6951d5081e8aed0c7a3ea1dac2884a2ff271f66ffc924fae53524c2988cf3b3f38eb872ff40d8ed321b130bbc0c653a081e6036f2fc8169aa748b39e407f757c2537b0d850d88d94b4623e2af105030592dc853dfb972b44a0c424c318e500eab92a392461f7525c76335109d879fb7566fcc7f179bd57aa0bf745ecab1c41470bdd17541bf93e0c8d4e03db9cb0b3aceeafb507353d49748c7cd38141d6c311b701aa80e7cb3778c63cdee1fa53be3b225a6acb3b4a68545dd0455c95823be8cae3cf58e5d07ccfcacf64e888b5d3bb2a9d4c74f6a39a4345d39dbd1c67a4028b55d94d5e322449eeaed495b5005de37abc038a4e879716913d187884bc4d7bee4bf2000fa6afdb7298a83414de1d8c615220446e29bd2f74063fd7c7b76ff06fbfb4e5c4fdbbe6b3701a59a4da60d38185e1887ca0aaf182c3b5c2f7e073aad60d59417cdc7964f9533ce39e8325a29661689d900903d5347afeb92fd492b048dd7d121ae14970f3ef85389393c0f62a41b18aabdbe6eca40ce9b623d7122be1b6b99c184b555eabbd9fb97d09793764c8479e853fd19951fd5da22508a2306603ea75107c080a08335a7aa4b4afed6037f47d0c4f91cae57b97a70cdbf2cddc8fa5e58421af2e3ebacd240f228cbda39e0cdbda97bf748f4060f85421f05adeb9f7f4183f7866e025e4e1a902764bbc6ddb092aaedbad1fe53464eabee7769eaaf9999aa67350666c4bccda54d1dbf4da4944d6398e75f6ceb5c858fea2c9d33388c93a830f2b7baf6f8e99814b60f46d06fb42f97e6b48f3eaf006540fa996adb9bc6376f073199b598e96b500176316021c048a07475015a3dbe8a19e8ef46b6a86277e157e14d654c0427a0484223f4c79a56a909dc23f190e08cfd2f9e1b270a6973aaf089dd4c7aa7c76789411e526e9652fe5fca65f5bdf38f2859f6e15a1987713d385fb90284ea7290d350deb40e60d3bc1a8cf2df7", 0x4}) socket$key(0xf, 0x3, 0x2) 8.682624761s ago: executing program 5 (id=1261): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) bind$inet(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581219f"], 0x0) 7.448369739s ago: executing program 3 (id=1262): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 7.270825313s ago: executing program 6 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_usb_connect(0x5, 0x164, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e0100000824060725518827e7c8c1", @ANYBLOB="78d32997202368e069fbb57a28cf46a1a5"], 0x0) 7.124225389s ago: executing program 3 (id=1264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) 6.888478518s ago: executing program 5 (id=1265): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) 6.022593523s ago: executing program 3 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 6.022363322s ago: executing program 6 (id=1267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x74}}, 0x0) 5.703412882s ago: executing program 2 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 5.622833311s ago: executing program 6 (id=1269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000)) 5.186381804s ago: executing program 0 (id=1270): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 4.3820502s ago: executing program 6 (id=1271): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)={[{@lazytime}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}], [{@obj_type={'obj_type', 0x3d, 'jL\xd8d\xc2\x00\x00\x00'}}, {@uid_gt}, {@pcr={'pcr', 0x3d, 0x3f}}, {@uid_eq}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}, 0x9b, 0x4fc, &(0x7f0000000140)="$eJzs3U1rHOcdAPD/jLR+lSuZ9uAa6praRXJb70pWbYse3BdKezK0dS+91FallRBaaYV2ZVvCtDL9AIVS2kKh0FMvgXyAQPBHCAFDcg9JSAiJnRx8SLxh32Rb3pVkvNIa7e8Ho3meZ2b0f/677Ow+M8NMAD3rdESciYjHlUrlXEQMNtrTxvSDamW9vt7DB3emqlMSlcq1T5OIpN5WXWXkqf95tL5JHIqI3/064k/J83FLq2vzk4VCfrlRz5UXlnKl1bXzcwuTs/nZ/OL4+NilicsTFydGO5LnQERc+eWH//zb/3915c0f3Xrv+scjf04a7RFP8ui0euqZ2mvR1B8Ry7sRrAv6Gvlkmg0t3msAAF4dzd/534uIczEYfbVfcwAAAMB+UvnpQHzZF1EBAAAA9q20dg1skmYb1wEMRJpms/VreL8VR9JCsVT+4UxxZXG6fq3sUGTSmblCfrRxrfBQZJJqfaxWflK/sKk+HhHHI+Ifg4dr9exUsTDd7YMfAAAA0COObhr/fzFYH/8DAAAA+8xQtzsAAAAA7DrjfwAAANj/jP8BAABgX/vN1avVqdJ8/vX0zdWV+eLN89P50nx2YWUqO1VcXsrOFouztXv2LbT5NxsPDSwUi0s/jsWV27lyvlTOlVbXri8UVxbL1+eeeQQ2AAAAsIeOf/feu0lErP/kcG2qOtDtTgF7ov9FVv5g9/oB7L2+bncA6JoX+v4H9pVMtzsAdF0SEf/dYnnbi3fe2p3+AAAAnTf87dbn/9Ntjw2sp3vURWCXOP4Hvcv5f+hdzv9D78pEXxjIQ29Ltln+8uf/K5UX6hAAANBxA7UpSbONc/4DkabZbMSx2mMBMsnMXCE/GhHfiIh3BjMHq/Wx2pbJtmMGAAAAAAAAAAAAAAAAAAAAAAAAAKCuUkmiAgAAAOxrEelHSeP5X8ODZwc2Hx84kDwarM0j4tZ/rv3r9mS5vDxWbf9so73870b7hW4cwQAAAAA2a47Tm+N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOikhw/uTDWnvYz7yc8jYqhV/P44VJsfikxEHPk8if6ntksioq8D8dfvRsQv/tgiflLtVgw1etEq/uFOxT/RKv+t46cRcbQD8aGX3avuf37W6vOXxunafPPn7+DGtv0diN9+/5du7P/62ux/ju0wxsn7r+faxr8bcbK/9f6nGT9pE//MDuPf+P3aWrtllf9FDLf8/kmeiZUrLyzlSqtr5+cWJmfzs/nF8fGxSxOXJy5OjOZm5gr5xt+WMf7+nTceb5X/kTbxh7bJ/+wO8//q/u0H36wXM63ij5xp/f6faBM/bXz3fb9Rri4fbpbX6+WnnXrt7VNb5T/dJv/t3v+RHeZ/7rd/fX+HqwIAe6C0ujY/WSjkl3u68FKvRvVn0SuRhcJ2hUpj8NZs+cumdZKI9Vekq10vND8Tj7qzYwIAADru+THwTtzYvQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98T+w5Z312tar8+euxcyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA3fR0AAP//HxDPXg==") openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x85) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x1) r4 = dup3(r3, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, 0x0, 0xc5) syz_clone(0x8280, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 4.367846867s ago: executing program 0 (id=1272): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x10003, 0x3, 0x1, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r7}, 0x47) 3.277705564s ago: executing program 6 (id=1273): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x804, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0xffffffff, 0x1ff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.277400573s ago: executing program 5 (id=1274): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000012c0)={0x7, 0xffffffffffffffff, 'id0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21045e, &(0x7f0000001400), 0x1, 0x4fa, &(0x7f00000005c0)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') 3.09894323s ago: executing program 5 (id=1275): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) bind$inet(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581219f"], 0x0) 1.859191547s ago: executing program 3 (id=1276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) 1.782919626s ago: executing program 2 (id=1277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000080), &(0x7f0000000680)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1.522410074s ago: executing program 2 (id=1278): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fc49de2}]}]}, 0x20}}, 0x200000c0) 705.91606ms ago: executing program 5 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x74}}, 0x0) 577.04266ms ago: executing program 3 (id=1280): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8941b19eafc7cf74) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet6_buf(r9, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) socket$key(0xf, 0x3, 0x2) 332.475421ms ago: executing program 5 (id=1281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000)) 0s ago: executing program 0 (id=1282): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 88.124765][ T5818] cgroup: Unknown subsys name 'net' [ 88.255209][ T5818] cgroup: Unknown subsys name 'cpuset' [ 88.265547][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.093876][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.592075][ T2151] cfg80211: failed to load regulatory.db [ 93.212640][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.232161][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.232996][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.242038][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.256265][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.256308][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.264832][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.273768][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.280829][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.293404][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.300028][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.303011][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.309156][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.316530][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.324623][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.338882][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.341607][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.349277][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.355979][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.363687][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.371544][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.387518][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.396922][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.398970][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.451827][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.077176][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 94.266296][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 94.296999][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 94.397239][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 94.454925][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 94.552304][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.561453][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.569022][ T5832] bridge_slave_0: entered allmulticast mode [ 94.577490][ T5832] bridge_slave_0: entered promiscuous mode [ 94.614617][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.622419][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.630210][ T5829] bridge_slave_0: entered allmulticast mode [ 94.639115][ T5829] bridge_slave_0: entered promiscuous mode [ 94.649683][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.659539][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.670534][ T5832] bridge_slave_1: entered allmulticast mode [ 94.679296][ T5832] bridge_slave_1: entered promiscuous mode [ 94.723679][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.731381][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.739228][ T5829] bridge_slave_1: entered allmulticast mode [ 94.747475][ T5829] bridge_slave_1: entered promiscuous mode [ 94.843228][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.851524][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.859049][ T5830] bridge_slave_0: entered allmulticast mode [ 94.867145][ T5830] bridge_slave_0: entered promiscuous mode [ 94.877167][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.884901][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.892676][ T5830] bridge_slave_1: entered allmulticast mode [ 94.900936][ T5830] bridge_slave_1: entered promiscuous mode [ 94.931867][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.980231][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.993986][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.019966][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.027584][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.036479][ T5844] bridge_slave_0: entered allmulticast mode [ 95.044118][ T5844] bridge_slave_0: entered promiscuous mode [ 95.072397][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.097359][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.130604][ T5832] team0: Port device team_slave_0 added [ 95.138097][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.147512][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.160116][ T5844] bridge_slave_1: entered allmulticast mode [ 95.167484][ T5844] bridge_slave_1: entered promiscuous mode [ 95.195608][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.233300][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.240817][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.248914][ T5831] bridge_slave_0: entered allmulticast mode [ 95.256846][ T5831] bridge_slave_0: entered promiscuous mode [ 95.301937][ T5832] team0: Port device team_slave_1 added [ 95.317226][ T5829] team0: Port device team_slave_0 added [ 95.344140][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.368588][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.376435][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.390143][ T5831] bridge_slave_1: entered allmulticast mode [ 95.397470][ T5831] bridge_slave_1: entered promiscuous mode [ 95.436516][ T5829] team0: Port device team_slave_1 added [ 95.450946][ T5150] Bluetooth: hci3: command tx timeout [ 95.451065][ T5840] Bluetooth: hci0: command tx timeout [ 95.456910][ T5150] Bluetooth: hci1: command tx timeout [ 95.468206][ T5843] Bluetooth: hci2: command tx timeout [ 95.482762][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.513058][ T5830] team0: Port device team_slave_0 added [ 95.530327][ T5843] Bluetooth: hci4: command tx timeout [ 95.539726][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.547479][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.575961][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.632656][ T5830] team0: Port device team_slave_1 added [ 95.654744][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.662573][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.691731][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.713966][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.721709][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.749031][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.763924][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.771434][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.801250][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.816305][ T5844] team0: Port device team_slave_0 added [ 95.826744][ T5844] team0: Port device team_slave_1 added [ 95.851088][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.865879][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.931964][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.939182][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.966818][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.010048][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.017414][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.045172][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.057616][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.067496][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.094954][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.171615][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.178847][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.207406][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.233940][ T5831] team0: Port device team_slave_0 added [ 96.249789][ T5832] hsr_slave_0: entered promiscuous mode [ 96.256828][ T5832] hsr_slave_1: entered promiscuous mode [ 96.270502][ T5829] hsr_slave_0: entered promiscuous mode [ 96.277520][ T5829] hsr_slave_1: entered promiscuous mode [ 96.284847][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.293099][ T5829] Cannot create hsr debugfs directory [ 96.353911][ T5831] team0: Port device team_slave_1 added [ 96.438819][ T5844] hsr_slave_0: entered promiscuous mode [ 96.446023][ T5844] hsr_slave_1: entered promiscuous mode [ 96.453950][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.461709][ T5844] Cannot create hsr debugfs directory [ 96.493547][ T5830] hsr_slave_0: entered promiscuous mode [ 96.501088][ T5830] hsr_slave_1: entered promiscuous mode [ 96.507513][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.515432][ T5830] Cannot create hsr debugfs directory [ 96.569518][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.576863][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.605240][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.666961][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.674068][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.702654][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.928610][ T5831] hsr_slave_0: entered promiscuous mode [ 96.935648][ T5831] hsr_slave_1: entered promiscuous mode [ 96.942239][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.950220][ T5831] Cannot create hsr debugfs directory [ 97.309200][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.324649][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.354174][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.385102][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.457698][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.480515][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.493526][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.520655][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.531215][ T5833] Bluetooth: hci0: command tx timeout [ 97.531224][ T5840] Bluetooth: hci3: command tx timeout [ 97.542357][ T5150] Bluetooth: hci1: command tx timeout [ 97.546957][ T5843] Bluetooth: hci2: command tx timeout [ 97.610741][ T5843] Bluetooth: hci4: command tx timeout [ 97.651413][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.669717][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.686846][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.697616][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.836901][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.864144][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.875565][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.889118][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.938831][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.003128][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.040574][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.048284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.060560][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.076766][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.113047][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.121524][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.131900][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.147458][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.173495][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.272895][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.303421][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.339662][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.347311][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.409748][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.417238][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.434525][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.515633][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.523448][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.541071][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.548351][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.624736][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.768004][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.787346][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.813537][ T3950] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.821112][ T3950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.853521][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.933560][ T3950] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.941664][ T3950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.043581][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.125937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.133378][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.165322][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.172726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.231742][ T5832] veth0_vlan: entered promiscuous mode [ 99.283420][ T5832] veth1_vlan: entered promiscuous mode [ 99.468316][ T5832] veth0_macvtap: entered promiscuous mode [ 99.494454][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.528641][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.574685][ T5832] veth1_macvtap: entered promiscuous mode [ 99.615223][ T5843] Bluetooth: hci2: command tx timeout [ 99.620812][ T5843] Bluetooth: hci3: command tx timeout [ 99.626443][ T5843] Bluetooth: hci1: command tx timeout [ 99.628471][ T5150] Bluetooth: hci0: command tx timeout [ 99.693135][ T5150] Bluetooth: hci4: command tx timeout [ 99.786813][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.827825][ T5829] veth0_vlan: entered promiscuous mode [ 99.901185][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.929775][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.956514][ T5829] veth1_vlan: entered promiscuous mode [ 100.015922][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.035904][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.066924][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.083095][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.171428][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.228950][ T5830] veth0_vlan: entered promiscuous mode [ 100.307978][ T5830] veth1_vlan: entered promiscuous mode [ 100.316126][ T5829] veth0_macvtap: entered promiscuous mode [ 100.336083][ T5844] veth0_vlan: entered promiscuous mode [ 100.395689][ T5829] veth1_macvtap: entered promiscuous mode [ 100.407350][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.428882][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.447186][ T5844] veth1_vlan: entered promiscuous mode [ 100.508598][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.518688][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.537377][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.566537][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.588813][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.598782][ T5831] veth0_vlan: entered promiscuous mode [ 100.607862][ T5830] veth0_macvtap: entered promiscuous mode [ 100.624808][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.658465][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.668360][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.668672][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.679628][ T5831] veth1_vlan: entered promiscuous mode [ 100.709624][ T5830] veth1_macvtap: entered promiscuous mode [ 100.725486][ T5844] veth0_macvtap: entered promiscuous mode [ 100.758734][ T5844] veth1_macvtap: entered promiscuous mode [ 100.856933][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.938385][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.985632][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.996505][ T5831] veth0_macvtap: entered promiscuous mode [ 101.009468][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.019198][ T5952] loop2: detected capacity change from 0 to 256 [ 101.069611][ T4587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.095184][ T5952] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 101.100414][ T4587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.161501][ T5831] veth1_macvtap: entered promiscuous mode [ 101.193351][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.205153][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.213588][ T4587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.231498][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.268211][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.325044][ T4587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342700][ T4587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.409426][ T4587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.432054][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.468966][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.485035][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.495514][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.536050][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.550855][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.570066][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.574544][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.690484][ T5150] Bluetooth: hci0: command tx timeout [ 101.690507][ T5833] Bluetooth: hci1: command tx timeout [ 101.690548][ T5833] Bluetooth: hci3: command tx timeout [ 101.696071][ T5150] Bluetooth: hci2: command tx timeout [ 101.770875][ T5150] Bluetooth: hci4: command tx timeout [ 101.850772][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.858872][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.916014][ T4587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.950066][ T4587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.099478][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.119013][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.160868][ T5956] loop2: detected capacity change from 0 to 32768 [ 102.179745][ T5956] ======================================================= [ 102.179745][ T5956] WARNING: The mand mount option has been deprecated and [ 102.179745][ T5956] and is ignored by this kernel. Remove the mand [ 102.179745][ T5956] option from the mount to silence this warning. [ 102.179745][ T5956] ======================================================= [ 102.197525][ T4587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.256614][ T4587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.366564][ T5962] Cannot find set identified by id 2 to match [ 102.386035][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.437347][ T5956] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 102.446126][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.566814][ T5956] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.645263][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.698406][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.925863][ T5956] syz.2.8 (5956) used greatest stack depth: 18568 bytes left [ 103.202160][ T5973] loop3: detected capacity change from 0 to 256 [ 103.267079][ T5832] ocfs2: Unmounting device (7,2) on (node local) [ 103.928671][ T5965] loop0: detected capacity change from 0 to 32768 [ 104.007754][ T5965] (syz.0.1,5965,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.079317][ T5965] (syz.0.1,5965,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.096988][ T5983] loop3: detected capacity change from 0 to 512 [ 104.188824][ T5965] (syz.0.1,5965,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 104.284036][ T5965] JBD2: Ignoring recovery information on journal [ 104.341815][ T5983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.356463][ T5968] loop1: detected capacity change from 0 to 40427 [ 104.439624][ T5968] F2FS-fs (loop1): build fault injection type: 0x7 [ 104.440020][ T5983] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.487077][ T5965] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.511682][ T5968] F2FS-fs (loop1): invalid crc value [ 104.711844][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.765606][ T5975] loop4: detected capacity change from 0 to 32768 [ 104.824268][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 104.888580][ T5975] [ 104.888580][ T5975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.888580][ T5975] [ 104.958248][ T5968] F2FS-fs (loop1): Start checkpoint disabled! [ 104.988487][ T5975] ERROR: (device loop4): diWrite: ixpxd invalid [ 104.988487][ T5975] [ 105.043971][ T5975] ERROR: (device loop4): txCommit: [ 105.043971][ T5975] [ 105.054370][ T5968] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 105.153140][ T5968] syz.1.11: attempt to access beyond end of device [ 105.153140][ T5968] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.234544][ T5996] syz.1.11: attempt to access beyond end of device [ 105.234544][ T5996] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 105.255979][ T5844] [ 105.255979][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.255979][ T5844] [ 105.351882][ T5844] [ 105.351882][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.351882][ T5844] [ 105.560544][ T12] kworker/u8:0: attempt to access beyond end of device [ 105.560544][ T12] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 105.619253][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 105.619286][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.619299][ T12] Workqueue: writeback wb_workfn (flush-7:1) [ 105.619333][ T12] Call Trace: [ 105.619342][ T12] [ 105.619350][ T12] dump_stack_lvl+0x189/0x250 [ 105.619387][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.619411][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 105.619434][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 105.619463][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 105.619483][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.619506][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 105.619535][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 105.619569][ T12] f2fs_write_end_io+0x495/0x810 [ 105.619585][ T12] ? blkg_put+0x22/0x240 [ 105.619630][ T12] __submit_merged_bio+0x27a/0x6a0 [ 105.619665][ T12] __submit_merged_write_cond+0x255/0x530 [ 105.619699][ T12] f2fs_write_data_pages+0x261d/0x3000 [ 105.619776][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.619823][ T12] ? unwind_next_frame+0xa5/0x2390 [ 105.619874][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 105.619915][ T12] ? __lock_acquire+0xab9/0xd20 [ 105.619942][ T12] ? __lock_acquire+0xab9/0xd20 [ 105.619982][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.620010][ T12] do_writepages+0x32b/0x550 [ 105.620043][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 105.620068][ T12] ? writeback_sb_inodes+0x384/0x1010 [ 105.620104][ T12] __writeback_single_inode+0x145/0xff0 [ 105.620130][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 105.620155][ T12] writeback_sb_inodes+0x6c7/0x1010 [ 105.620211][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 105.620283][ T12] ? rcu_is_watching+0x15/0xb0 [ 105.620321][ T12] wb_writeback+0x43b/0xaf0 [ 105.620357][ T12] ? queue_io+0x361/0x590 [ 105.620384][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 105.620419][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.620445][ T12] wb_workfn+0x409/0xef0 [ 105.620484][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 105.620512][ T12] ? __lock_acquire+0xab9/0xd20 [ 105.620546][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 105.620580][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 105.620603][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 105.620629][ T12] process_scheduled_works+0xade/0x17b0 [ 105.620688][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.620744][ T12] worker_thread+0x8a0/0xda0 [ 105.620801][ T12] kthread+0x711/0x8a0 [ 105.620825][ T12] ? __pfx_worker_thread+0x10/0x10 [ 105.620850][ T12] ? __pfx_kthread+0x10/0x10 [ 105.620872][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.620890][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.620910][ T12] ? __pfx_kthread+0x10/0x10 [ 105.620931][ T12] ret_from_fork+0x3fc/0x770 [ 105.620960][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 105.620990][ T12] ? __switch_to_asm+0x39/0x70 [ 105.621007][ T12] ? __switch_to_asm+0x33/0x70 [ 105.621022][ T12] ? __pfx_kthread+0x10/0x10 [ 105.621043][ T12] ret_from_fork_asm+0x1a/0x30 [ 105.621080][ T12] [ 105.960782][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 105.986355][ T5982] loop2: detected capacity change from 0 to 32768 [ 106.772142][ T5982] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 106.772176][ T5982] allowing incompatible features above 0.0: (unknown version) [ 106.772188][ T5982] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 106.839792][ T5982] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 106.969164][ T5982] bcachefs (loop2): initializing new filesystem [ 107.054716][ T5982] bcachefs (loop2): going read-write [ 107.099137][ T5982] bcachefs (loop2): bch2_copygc_start(): error creating copygc thread EINTR [ 107.135307][ T5982] bcachefs (loop2): __bch2_fs_read_write(): error error starting copygc thread EINTR [ 107.187678][ T5982] bcachefs (loop2): going read-only [ 107.221851][ T5982] bcachefs (loop2): finished waiting for writes to stop [ 107.229670][ T5982] bcachefs (loop2): flushing journal and stopping allocators, journal seq 0 [ 107.271376][ T5982] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 0 [ 107.390604][ T5982] bcachefs (loop2): unclean shutdown complete, journal seq 1 [ 107.441910][ T5982] bcachefs (loop2): done going read-only, filesystem not clean [ 107.449567][ T5982] bcachefs (loop2): bch2_fs_initialize(): error EINTR [ 107.509362][ T5982] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 107.572418][ T5982] bcachefs (loop2): shutting down [ 107.635352][ T6028] loop0: detected capacity change from 0 to 1024 [ 107.718032][ T5982] bcachefs (loop2): shutdown complete [ 108.955040][ T6036] loop0: detected capacity change from 0 to 64 [ 109.039288][ T6036] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 109.168514][ T6022] loop4: detected capacity change from 0 to 32768 [ 109.448507][ T6039] loop0: detected capacity change from 0 to 128 [ 109.531119][ T6039] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 109.537753][ T6034] loop1: detected capacity change from 0 to 32768 [ 109.570310][ T6039] FAT-fs (loop0): Filesystem has been set read-only [ 109.697120][ T6027] loop3: detected capacity change from 0 to 40427 [ 109.783312][ T6027] F2FS-fs (loop3): heap/no_heap options were deprecated [ 109.808767][ T6027] F2FS-fs (loop3): build fault injection rate: 19 [ 109.815734][ T6027] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 109.849451][ T6027] F2FS-fs (loop3): invalid crc value [ 109.895597][ T6034] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.897616][ T6027] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 110.850069][ T6022] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 110.850318][ T6022] bcachefs (loop4): shutdown complete [ 110.912071][ T6034] XFS (loop1): Ending clean mount [ 111.064059][ T6034] XFS (loop1): Quotacheck needed: Please wait. [ 111.074014][ T6027] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 112.161654][ T6034] XFS (loop1): Quotacheck: Done. [ 112.204988][ T5829] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.424868][ T5982] bcachefs: bch2_fs_get_tree() error: EINTR [ 113.008517][ T6065] loop2: detected capacity change from 0 to 128 [ 113.011043][ T6061] loop0: detected capacity change from 0 to 32768 [ 113.033897][ T6065] EXT4-fs: Ignoring removed nobh option [ 113.114275][ T6065] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.137448][ T6065] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.166900][ T6061] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 113.348828][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.535893][ T6022] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 113.624820][ T6075] loop2: detected capacity change from 0 to 128 [ 113.792667][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 114.170351][ T6063] loop1: detected capacity change from 0 to 32768 [ 115.072760][ T6084] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.380072][ T6063] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 115.380104][ T6063] allowing incompatible features above 0.0: (unknown version) [ 115.380117][ T6063] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 115.513960][ T6063] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 115.527038][ T6063] bcachefs (loop1): initializing new filesystem [ 115.558144][ T6063] bcachefs (loop1): going read-write [ 115.570214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.630241][ T6063] bcachefs (loop1): marking superblocks [ 115.638204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 115.651462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.759681][ T6063] bcachefs (loop1): initializing freespace [ 115.784549][ T6063] bcachefs (loop1): done initializing freespace [ 115.807673][ T6063] bcachefs (loop1): reading snapshots table [ 115.838107][ T6063] bcachefs (loop1): reading snapshots done [ 115.863586][ T6063] bcachefs (loop1): done starting filesystem [ 116.040177][ T6063] syz.1.33 (6063) used greatest stack depth: 17400 bytes left [ 116.073192][ T5829] bcachefs (loop1): shutting down [ 116.079228][ T5829] bcachefs (loop1): going read-only [ 116.140034][ T5829] bcachefs (loop1): finished waiting for writes to stop [ 116.200611][ T5829] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 116.336794][ T5829] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 116.365616][ T5829] bcachefs (loop1): clean shutdown complete, journal seq 12 [ 116.376927][ T5829] bcachefs (loop1): marking filesystem clean [ 116.535953][ T5829] bcachefs (loop1): shutdown complete [ 117.145562][ T6103] loop4: detected capacity change from 0 to 32768 [ 117.945102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.660698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 118.714504][ T6103] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 118.714539][ T6103] allowing incompatible features above 0.0: (unknown version) [ 118.714552][ T6103] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 118.810794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.844065][ T6126] loop2: detected capacity change from 0 to 32768 [ 118.858343][ T6103] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 118.934252][ T6103] bcachefs (loop4): initializing new filesystem [ 118.977616][ T6126] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.988062][ T6103] bcachefs (loop4): going read-write [ 119.029083][ T6103] bcachefs (loop4): marking superblocks [ 119.153249][ T6103] bcachefs (loop4): initializing freespace [ 119.202747][ T6103] bcachefs (loop4): done initializing freespace [ 119.213690][ T6103] bcachefs (loop4): reading snapshots table [ 119.220795][ T6103] bcachefs (loop4): reading snapshots done [ 119.292337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 119.301736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 119.311363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 119.320485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 119.547045][ T6103] bcachefs (loop4): done starting filesystem [ 119.989759][ T6126] XFS (loop2): Ending clean mount [ 120.050957][ T6126] XFS (loop2): Quotacheck needed: Please wait. [ 120.345180][ T6126] XFS (loop2): Quotacheck: Done. [ 120.353858][ T5844] bcachefs (loop4): shutting down [ 120.365313][ T5844] bcachefs (loop4): going read-only [ 120.381086][ T5844] bcachefs (loop4): finished waiting for writes to stop [ 120.486218][ T5844] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 121.167922][ T5832] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.190398][ T5844] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 121.257318][ T5844] bcachefs (loop4): clean shutdown complete, journal seq 15 [ 121.321039][ T5844] bcachefs (loop4): marking filesystem clean [ 121.343078][ T6178] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET) [ 121.454987][ T5844] bcachefs (loop4): shutdown complete [ 122.195003][ T6176] loop1: detected capacity change from 0 to 32768 [ 122.268927][ T6176] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.495552][ T6176] XFS (loop1): Ending clean mount [ 122.525897][ T6176] XFS (loop1): Quotacheck needed: Please wait. [ 122.657250][ T6176] XFS (loop1): Quotacheck: Done. [ 122.774902][ T6183] loop0: detected capacity change from 0 to 40427 [ 122.794777][ T6183] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 122.819776][ T6183] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 122.837492][ T6180] loop3: detected capacity change from 0 to 32768 [ 122.883343][ T5829] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.906972][ T6183] F2FS-fs (loop0): invalid crc value [ 122.966882][ T6180] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.188955][ T6180] XFS (loop3): Ending clean mount [ 123.243734][ T6180] XFS (loop3): Quotacheck needed: Please wait. [ 123.299569][ T1098] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 123.322549][ T1098] XFS (loop3): Unmount and run xfs_repair [ 123.323368][ T6186] loop2: detected capacity change from 0 to 32768 [ 123.333555][ T6183] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 123.343656][ T1098] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 123.351836][ T1098] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 123.361135][ T6183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.397462][ T1098] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 123.400574][ T6186] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.426069][ T1098] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 123.468100][ T1098] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 123.530567][ T1098] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 123.574431][ T1098] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 123.647943][ T6186] XFS (loop2): Ending clean mount [ 123.696360][ T1098] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 123.870841][ T1098] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.034735][ T1098] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 124.315997][ T6180] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 124.784433][ T6222] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 124.834646][ T6222] XFS (loop3): Unmount and run xfs_repair [ 124.843530][ T6222] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 124.885299][ T6222] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 124.933116][ T6222] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 124.968856][ T6222] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 125.019931][ T6222] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 125.074036][ T6222] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.146338][ T6222] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.176892][ T6222] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.198921][ T6222] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.260501][ T6222] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 125.335610][ T6222] XFS (loop3): page discard on page ffffea00014887c0, inode 0x2446, pos 2048. [ 125.379239][ T5950] loop3: writeback error on inode 9286, offset 0, sector 18692 [ 125.550670][ T5831] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.815305][ T5831] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 128.419076][ T6253] loop4: detected capacity change from 0 to 128 [ 128.878449][ T5832] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.231518][ T6031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.562546][ T6031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.693366][ T6031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.074337][ T6031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.542418][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.765908][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.210058][ T6294] futex_wake_op: syz.1.92 tries to shift op by -1; fix this program [ 135.129388][ T6031] bridge_slave_1: left allmulticast mode [ 135.140164][ T6031] bridge_slave_1: left promiscuous mode [ 135.181480][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.252786][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.319016][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.352683][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.690531][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.801964][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.061308][ T6031] bridge_slave_0: left allmulticast mode [ 136.067171][ T6031] bridge_slave_0: left promiscuous mode [ 136.082087][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.361281][ T6315] loop3: detected capacity change from 0 to 4096 [ 137.373737][ T6316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.532994][ T6315] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 137.879188][ T5833] Bluetooth: hci4: command tx timeout [ 138.156116][ T6315] overlayfs: missing 'lowerdir' [ 138.287213][ T6293] sctp: failed to load transform for md5: -2 [ 139.143656][ T6311] loop1: detected capacity change from 0 to 32768 [ 139.196665][ T6311] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.255458][ T6311] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 139.256995][ T6311] XFS (loop1): log mount failed [ 139.846933][ T6323] loop2: detected capacity change from 0 to 32768 [ 139.936740][ T6343] netlink: 'syz.0.102': attribute type 5 has an invalid length. [ 140.048071][ T5833] Bluetooth: hci4: command tx timeout [ 140.074352][ T6323] XFS (loop2): Invalid device [.], error=-15 [ 140.720192][ T6346] loop3: detected capacity change from 0 to 1024 [ 142.089920][ T5833] Bluetooth: hci4: command tx timeout [ 143.348585][ T6372] loop3: detected capacity change from 0 to 1024 [ 144.171744][ T5833] Bluetooth: hci4: command tx timeout [ 144.317806][ T6380] fuse: Unknown parameter 'use00000000000000000000' [ 144.353215][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.425489][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.531827][ T6031] bond0 (unregistering): Released all slaves [ 146.331807][ T6410] fuse: Unknown parameter 'user_i00000000000000000000' [ 149.832096][ T6454] loop3: detected capacity change from 0 to 256 [ 149.938554][ T6454] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 150.438390][ T6031] hsr_slave_0: left promiscuous mode [ 151.277184][ T6031] hsr_slave_1: left promiscuous mode [ 151.312131][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.352148][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.379161][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.406386][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.731212][ T6031] veth1_macvtap: left promiscuous mode [ 151.779197][ T6031] veth0_macvtap: left promiscuous mode [ 151.877977][ T6031] veth1_vlan: left promiscuous mode [ 151.961781][ T6031] veth0_vlan: left promiscuous mode [ 152.851230][ T6481] loop0: detected capacity change from 0 to 512 [ 152.989642][ T6481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.060171][ T6481] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.162909][ T6481] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.251631][ T6481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.104626][ T6501] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.616057][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 156.670206][ T6507] loop1: detected capacity change from 0 to 32768 [ 156.741405][ T6521] loop2: detected capacity change from 0 to 2048 [ 156.792774][ T6507] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.815985][ T6525] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.832129][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 157.125240][ T6507] XFS (loop1): Ending clean mount [ 157.204459][ T6507] XFS (loop1): Quotacheck needed: Please wait. [ 157.317893][ T6507] XFS (loop1): Quotacheck: Done. [ 157.409371][ T30] audit: type=1804 audit(1750698745.062:2): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.154" name="/newroot/33/file0/file1" dev="loop1" ino=9286 res=1 errno=0 [ 157.507413][ T5829] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.438373][ T6298] chnl_net:caif_netlink_parms(): no params data found [ 159.518992][ T6566] ubi31: attaching mtd0 [ 159.534787][ T6566] ubi31: scanning is finished [ 159.560088][ T6566] ubi31: empty MTD device detected [ 159.694782][ T6571] loop3: detected capacity change from 0 to 512 [ 159.766135][ T6571] EXT4-fs: Ignoring removed i_version option [ 160.482361][ T6571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.818655][ T6566] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 160.836598][ T6566] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 160.849961][ T6566] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 160.867422][ T6566] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 160.887711][ T6566] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 160.897842][ T6566] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 161.052489][ T6566] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2734392496 [ 161.169936][ T6566] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 161.211219][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.218497][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.247867][ T6581] ubi31: background thread "ubi_bgt31d" started, PID 6581 [ 161.283071][ T6298] bridge_slave_0: entered allmulticast mode [ 161.299154][ T6298] bridge_slave_0: entered promiscuous mode [ 161.321057][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.342264][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.349473][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.410309][ T6298] bridge_slave_1: entered allmulticast mode [ 161.418457][ T6298] bridge_slave_1: entered promiscuous mode [ 161.758037][ T6298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.839497][ T6298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.908794][ T6600] loop3: detected capacity change from 0 to 1024 [ 162.116089][ T6298] team0: Port device team_slave_0 added [ 162.154175][ T6298] team0: Port device team_slave_1 added [ 162.401387][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.408645][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.533631][ T6298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.558103][ T6606] loop3: detected capacity change from 0 to 256 [ 162.587070][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.642624][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.679530][ T6606] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 162.713563][ T6298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.443783][ T6298] hsr_slave_0: entered promiscuous mode [ 164.471679][ T6298] hsr_slave_1: entered promiscuous mode [ 164.493291][ T6298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.514031][ T6298] Cannot create hsr debugfs directory [ 166.208738][ T6647] loop3: detected capacity change from 0 to 16 [ 166.379874][ T6647] erofs (device loop3): mounted with root inode @ nid 36. [ 167.161127][ T6298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.207722][ T6298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.235844][ T6298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.513102][ T6298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.334736][ T6639] loop1: detected capacity change from 0 to 32768 [ 168.448935][ T6639] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.464704][ T6670] fuse: Unknown parameter 'user_id00000000000000000000' [ 168.552489][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 168.706594][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.762643][ T6298] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.813630][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.821310][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.867661][ T6639] XFS (loop1): Ending clean mount [ 168.875336][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.882588][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.907409][ T6639] XFS (loop1): Quotacheck needed: Please wait. [ 168.921584][ T6639] XFS (loop1): Quotacheck: Unsuccessful (Error -12): Disabling quotas. [ 168.942720][ T6639] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.960037][ T6639] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 169.040117][ T6298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.053809][ T6298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.236973][ T6690] ubi: mtd0 is already attached to ubi31 [ 171.878079][ T6298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.393660][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 173.740782][ T6736] fuse: Bad value for 'fd' [ 175.517725][ T6298] veth0_vlan: entered promiscuous mode [ 175.535085][ T6298] veth1_vlan: entered promiscuous mode [ 175.632456][ T6298] veth0_macvtap: entered promiscuous mode [ 175.681088][ T6298] veth1_macvtap: entered promiscuous mode [ 176.387631][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.432381][ T6769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.515147][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.648002][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 176.669470][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.743671][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.856908][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.902379][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.154304][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.173122][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.298327][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.338814][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.477024][ T6769] warning: `syz.3.220' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.478681][ T6762] loop1: detected capacity change from 0 to 32768 [ 177.800586][ T6762] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.837098][ T6762] XFS (loop1): Ending clean mount [ 178.893241][ T6762] XFS (loop1): Quotacheck needed: Please wait. [ 179.508328][ T6762] XFS (loop1): Quotacheck: Done. [ 180.236956][ T5829] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.359470][ T6831] loop5: detected capacity change from 0 to 2048 [ 181.405939][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 182.186326][ T6837] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.417086][ T6837] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 182.614903][ T6837] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 183.774730][ T6837] Remounting filesystem read-only [ 190.358796][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 193.180878][ T6915] loop3: detected capacity change from 0 to 2048 [ 193.885168][ T6926] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.328261][ T6926] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 194.360213][ T6926] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 194.386789][ T6926] Remounting filesystem read-only [ 195.020648][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.101243][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.206353][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 199.437617][ T6999] loop1: detected capacity change from 0 to 2048 [ 200.415115][ T7010] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.546970][ T7010] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 200.581419][ T7010] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 200.619366][ T7010] Remounting filesystem read-only [ 202.801886][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 205.652856][ T7066] Zero length message leads to an empty skb [ 212.975505][ T7141] futex_wake_op: syz.3.306 tries to shift op by -1; fix this program [ 217.612261][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 217.620022][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 217.621292][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 217.628597][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 239.676085][ T7407] capability: warning: `syz.1.373' uses 32-bit capabilities (legacy support in use) [ 249.253096][ T7534] futex_wake_op: syz.0.405 tries to shift op by -1; fix this program [ 251.540920][ T7556] capability: warning: `syz.3.411' uses deprecated v2 capabilities in a way that may be insecure [ 252.262964][ T7579] futex_wake_op: syz.1.418 tries to shift op by -1; fix this program [ 256.148163][ T7587] overlayfs: failed to resolve './file0/../file0': -2 [ 256.420568][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.427323][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.529948][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 271.840965][ T7784] veth0_to_bond: entered allmulticast mode [ 273.259310][ T5843] Bluetooth: hci0: unexpected event for opcode 0x100c [ 276.702576][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 279.740226][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 285.024177][ T7948] futex_wake_op: syz.5.518 tries to shift op by -1; fix this program [ 295.573778][ T8041] No such timeout policy "syz0" [ 302.475669][ T8114] No such timeout policy "syz0" [ 307.010870][ T8155] fuse: Bad value for 'fd' [ 307.246673][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 311.141597][ T8194] No such timeout policy "syz0" [ 318.633821][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.640872][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.266560][ T8382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.662'. [ 334.850559][ T8462] mmap: syz.1.689 (8462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 344.302800][ T30] audit: type=1326 audit(1750698931.952:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a16b2ab19 code=0x7ffc0000 [ 344.412762][ T30] audit: type=1326 audit(1750698931.962:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a16b2ab19 code=0x7ffc0000 [ 344.469593][ T30] audit: type=1326 audit(1750698931.962:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a16b2ab19 code=0x7ffc0000 [ 344.524356][ T30] audit: type=1326 audit(1750698931.962:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a16b2ab19 code=0x7ffc0000 [ 344.598389][ T30] audit: type=1326 audit(1750698931.962:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16b8e929 code=0x7ffc0000 [ 344.900725][ T30] audit: type=1326 audit(1750698931.962:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a16b2ab19 code=0x7ffc0000 [ 344.927060][ T30] audit: type=1326 audit(1750698931.962:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16b8e929 code=0x7ffc0000 [ 345.722207][ T30] audit: type=1326 audit(1750698931.982:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a16b2ab19 code=0x7ffc0000 [ 345.827373][ T30] audit: type=1326 audit(1750698931.982:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a16b2ab19 code=0x7ffc0000 [ 346.100061][ T30] audit: type=1326 audit(1750698931.982:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16b8e929 code=0x7ffc0000 [ 350.187534][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 350.187558][ T30] audit: type=1326 audit(1750698937.842:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69bdd8e929 code=0x0 [ 359.982730][ T8650] netlink: 'syz.3.747': attribute type 5 has an invalid length. [ 362.968224][ T8674] netlink: 60 bytes leftover after parsing attributes in process `syz.5.753'. [ 367.131384][ T8704] netlink: 'syz.0.761': attribute type 5 has an invalid length. [ 373.683181][ T8745] netlink: 'syz.2.776': attribute type 5 has an invalid length. [ 374.647897][ T5829] syz-executor (5829) used greatest stack depth: 16952 bytes left [ 374.859105][ T8639] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.231983][ T8639] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.505333][ T8639] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.660445][ T8766] syz_tun: entered allmulticast mode [ 377.930961][ T8639] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.192930][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.204707][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.214537][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.225174][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.235965][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.302407][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.309260][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.230594][ T8639] bridge_slave_1: left allmulticast mode [ 380.255460][ T8639] bridge_slave_1: left promiscuous mode [ 380.280208][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.329980][ T5843] Bluetooth: hci0: command tx timeout [ 380.344439][ T8639] bridge_slave_0: left allmulticast mode [ 380.375380][ T8639] bridge_slave_0: left promiscuous mode [ 380.474338][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.411923][ T5843] Bluetooth: hci0: command tx timeout [ 384.489890][ T5843] Bluetooth: hci0: command tx timeout [ 385.090669][ T8639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.117639][ T8639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.176324][ T8639] bond0 (unregistering): Released all slaves [ 385.480559][ T8830] netlink: 'syz.2.802': attribute type 3 has an invalid length. [ 385.491996][ T8830] netlink: 'syz.2.802': attribute type 3 has an invalid length. [ 386.622465][ T5843] Bluetooth: hci0: command tx timeout [ 387.484960][ T8790] chnl_net:caif_netlink_parms(): no params data found [ 388.403812][ T8778] syz_tun: left allmulticast mode [ 391.303213][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.429008][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.454384][ T8790] bridge_slave_0: entered allmulticast mode [ 391.472554][ T8790] bridge_slave_0: entered promiscuous mode [ 391.497930][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.561426][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.592442][ T8790] bridge_slave_1: entered allmulticast mode [ 391.734038][ T8790] bridge_slave_1: entered promiscuous mode [ 391.786858][ T8639] hsr_slave_0: left promiscuous mode [ 391.822627][ T8639] hsr_slave_1: left promiscuous mode [ 391.832642][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.875025][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.912967][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.942480][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.021881][ T8639] veth1_macvtap: left promiscuous mode [ 392.157079][ T8639] veth0_macvtap: left promiscuous mode [ 392.165487][ T8639] veth1_vlan: left promiscuous mode [ 392.173657][ T8639] veth0_vlan: left promiscuous mode [ 397.943850][ T8639] team0 (unregistering): Port device team_slave_1 removed [ 398.054311][ T8639] team0 (unregistering): Port device team_slave_0 removed [ 399.131838][ T8790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.165927][ T8790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.180442][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 399.648391][ T8790] team0: Port device team_slave_0 added [ 399.735539][ T8790] team0: Port device team_slave_1 added [ 400.952256][ T8790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.959521][ T8790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.988872][ T8790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.382059][ T8790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.469235][ T8790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.638567][ T8790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.367572][ T8790] hsr_slave_0: entered promiscuous mode [ 402.404615][ T8790] hsr_slave_1: entered promiscuous mode [ 402.428917][ T8790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.452327][ T8790] Cannot create hsr debugfs directory [ 404.281916][ T8790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 404.605139][ T8790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 404.696878][ T8790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 405.040612][ T8790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 406.246198][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.889187][ T8790] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.028959][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.037719][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.149670][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.157374][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.266966][ T8790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.361296][ T8790] veth0_vlan: entered promiscuous mode [ 410.381422][ T8790] veth1_vlan: entered promiscuous mode [ 411.017371][ T8790] veth0_macvtap: entered promiscuous mode [ 411.055132][ T9125] No such timeout policy "syz0" [ 411.116276][ T8790] veth1_macvtap: entered promiscuous mode [ 411.234199][ T8790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.285834][ T8790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.373356][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.237673][ T6322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.402476][ T6322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.455217][ T6322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.882162][ T6320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.920555][ T6320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.216298][ T6319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.243935][ T6319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.197058][ T9243] loop6: detected capacity change from 0 to 2048 [ 423.222405][ T9243] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.256034][ T9243] EXT4-fs: Ignoring removed nobh option [ 423.339624][ T9243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.848242][ T8790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.245652][ T9268] loop6: detected capacity change from 0 to 512 [ 424.261244][ T9268] ext3: Bad value for 'resgid' [ 424.338858][ T9268] ext3: Bad value for 'resgid' [ 425.724261][ T9287] loop6: detected capacity change from 0 to 2048 [ 425.806767][ T9287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.449638][ T9295] loop6: detected capacity change from 0 to 2048 [ 426.564265][ T9295] EXT4-fs: Ignoring removed mblk_io_submit option [ 426.663484][ T9295] EXT4-fs: Ignoring removed nobh option [ 426.868235][ T9295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.069226][ T8790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.072043][ T9320] loop6: detected capacity change from 0 to 8192 [ 430.229140][ T30] audit: type=1800 audit(1750699017.882:169): pid=9320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.904" name="bus" dev="loop6" ino=1048613 res=0 errno=0 [ 430.621833][ T9330] loop6: detected capacity change from 0 to 512 [ 430.661234][ T9330] ext3: Bad value for 'resgid' [ 430.666276][ T9330] ext3: Bad value for 'resgid' [ 439.500996][ T9405] xt_hashlimit: size too large, truncated to 1048576 [ 440.742518][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.748967][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.923661][ T9501] xt_TPROXY: Can be used only with -p tcp or -p udp [ 448.592236][ T9524] loop6: detected capacity change from 0 to 2048 [ 448.621351][ T9524] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.628266][ T9524] EXT4-fs: Ignoring removed nobh option [ 448.687928][ T9524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.821232][ T9524] overlayfs: missing 'lowerdir' [ 448.997002][ T8790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.686946][ T9538] xt_TPROXY: Can be used only with -p tcp or -p udp [ 450.196867][ T9548] loop6: detected capacity change from 0 to 512 [ 450.236371][ T9548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 450.251145][ T9548] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.955: Unimplemented hash flags: 0x0001 [ 450.264638][ T9548] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.955: Corrupt directory, running e2fsck is recommended [ 450.278746][ T9548] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.955: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 450.857014][ T8790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.037451][ T9581] overlayfs: missing 'lowerdir' [ 453.356052][ T9593] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.848975][ T30] audit: type=1326 audit(1750699041.502:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a058e929 code=0x7ffc0000 [ 453.943529][ T30] audit: type=1326 audit(1750699041.532:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a058e929 code=0x7ffc0000 [ 454.200831][ T30] audit: type=1326 audit(1750699041.542:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f47a058e929 code=0x7ffc0000 [ 454.335360][ T30] audit: type=1326 audit(1750699041.542:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a058e929 code=0x7ffc0000 [ 454.423630][ T30] audit: type=1326 audit(1750699041.542:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a058e929 code=0x7ffc0000 [ 454.565122][ T30] audit: type=1326 audit(1750699041.552:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f47a058e929 code=0x7ffc0000 [ 454.589988][ T30] audit: type=1326 audit(1750699041.812:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a058e929 code=0x7ffc0000 [ 454.614363][ T30] audit: type=1326 audit(1750699041.812:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a058e929 code=0x7ffc0000 [ 457.838382][ T9646] loop6: detected capacity change from 0 to 2048 [ 457.895778][ T9646] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.929339][ T9646] EXT4-fs: Ignoring removed nobh option [ 458.305120][ T9646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.891538][ T9646] overlayfs: missing 'lowerdir' [ 459.231489][ T9657] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 460.219853][ T9657] EXT4-fs (loop6): Remounting filesystem read-only [ 460.283846][ T8790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.846286][ T9689] loop6: detected capacity change from 0 to 1024 [ 462.035000][ T9689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.343029][ T8790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.825756][ T9726] overlayfs: missing 'lowerdir' [ 467.171914][ T9747] overlayfs: missing 'lowerdir' [ 469.266056][ T9775] overlayfs: missing 'lowerdir' [ 476.428853][ T9838] overlayfs: missing 'lowerdir' [ 479.278833][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 481.219303][ T5946] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 482.278048][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.900692][ T9884] overlayfs: missing 'lowerdir' [ 483.002481][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.023333][ T5946] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 483.036221][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.059014][ T5946] usb 7-1: config 0 descriptor?? [ 483.937195][ T5946] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 5/7 [ 483.988654][ T5946] cp2112 0003:10C4:EA90.0001: parse failed [ 484.009047][ T5946] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22 [ 484.120073][ T5946] usb 7-1: USB disconnect, device number 2 [ 485.883296][ T9929] loop6: detected capacity change from 0 to 512 [ 485.915752][ T9929] EXT4-fs: Ignoring removed i_version option [ 486.146841][ T9929] EXT4-fs: Ignoring removed nobh option [ 486.159200][ T9929] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 486.181784][ T9929] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 486.205850][ T9929] EXT4-fs (loop6): 1 truncate cleaned up [ 486.232203][ T9929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.394437][ T8790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.419866][ T9939] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1039'. [ 487.530436][ T9941] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1040'. [ 487.665769][ T9943] loop6: detected capacity change from 0 to 2048 [ 487.689927][ T30] audit: type=1326 audit(1750699075.332:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bcd8e929 code=0x7ffc0000 [ 487.717520][ T9943] EXT4-fs: Ignoring removed mblk_io_submit option [ 487.745273][ T9943] EXT4-fs: Ignoring removed nobh option [ 487.752961][ T30] audit: type=1326 audit(1750699075.332:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bcd8e929 code=0x7ffc0000 [ 487.938159][ T9943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.994465][ T30] audit: type=1326 audit(1750699075.382:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f26bcd8e929 code=0x7ffc0000 [ 488.113871][ T9943] overlayfs: missing 'lowerdir' [ 488.249600][ T8790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.653277][ T9989] overlayfs: missing 'lowerdir' [ 497.867925][T10032] overlayfs: failed to resolve './file0/../file0': -2 [ 497.983301][T10037] loop6: detected capacity change from 0 to 16 [ 498.080660][T10037] erofs (device loop6): mounted with root inode @ nid 36. [ 500.971515][T10072] overlayfs: failed to resolve './file0/../file0': -2 [ 501.983714][T10093] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1089'. [ 502.182771][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.199806][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.946927][T10106] overlayfs: failed to clone upperpath [ 504.151552][T10120] overlayfs: failed to resolve './file0/../file0': -2 [ 504.252951][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 505.905639][T10153] overlayfs: failed to resolve './file0/../file0': -2 [ 508.140411][T10183] overlayfs: failed to clone upperpath [ 509.809514][T10195] overlayfs: failed to resolve './file0/../file0': -2 [ 510.818116][T10220] netlink: 'syz.2.1126': attribute type 5 has an invalid length. [ 511.560795][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'. [ 513.356002][T10243] futex_wake_op: syz.3.1135 tries to shift op by -1; fix this program [ 513.894570][T10246] overlayfs: failed to resolve './file0/../file0': -2 [ 514.484221][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1140'. [ 518.556061][T10285] netlink: 'syz.0.1148': attribute type 5 has an invalid length. [ 519.181156][T10287] overlayfs: failed to resolve './file0/../file0': -2 [ 520.109336][T10299] xt_NFQUEUE: number of total queues is 0 [ 520.163977][T10299] 9pnet_fd: Insufficient options for proto=fd [ 520.570019][T10303] futex_wake_op: syz.0.1154 tries to shift op by -1; fix this program [ 523.866759][T10329] overlayfs: failed to resolve './file0/../file0': -2 [ 524.106983][T10334] netlink: 'syz.2.1162': attribute type 5 has an invalid length. [ 530.382607][T10381] futex_wake_op: syz.2.1171 tries to shift op by -1; fix this program [ 530.815432][T10385] netlink: 'syz.0.1177': attribute type 5 has an invalid length. [ 534.776464][T10409] bridge: RTM_NEWNEIGH with invalid ether address [ 548.128479][T10505] veth1_macvtap: left promiscuous mode [ 548.134747][T10505] macsec0: entered promiscuous mode [ 548.141036][T10505] macsec0: entered allmulticast mode [ 552.272571][T10540] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1226'. [ 553.391949][T10545] xt_TPROXY: Can be used only with -p tcp or -p udp [ 554.658302][T10560] futex_wake_op: syz.0.1231 tries to shift op by -1; fix this program [ 557.951305][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 559.190440][T10597] xt_TPROXY: Can be used only with -p tcp or -p udp [ 560.454628][T10603] syz_tun: entered allmulticast mode [ 562.037333][T10615] syz_tun: left allmulticast mode [ 562.408911][T10613] futex_wake_op: syz.2.1244 tries to shift op by -1; fix this program [ 563.617808][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.626987][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.770906][T10648] No such timeout policy "syz0" [ 565.781414][T10649] syz_tun: entered allmulticast mode [ 565.944288][T10646] syz_tun: left allmulticast mode [ 570.568768][T10694] futex_wake_op: syz.2.1268 tries to shift op by -1; fix this program [ 571.023379][T10696] syz_tun: entered allmulticast mode [ 571.103905][T10695] syz_tun: left allmulticast mode [ 575.994066][T10736] syz_tun: entered allmulticast mode [ 576.300524][ C1] ------------[ cut here ]------------ [ 576.306985][ C1] WARNING: net/ipv4/ipmr.c:2302 at ip_mr_output+0xbb1/0xe70, CPU#1: swapper/1/0 [ 576.316444][ C1] Modules linked in: [ 576.320768][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 576.332392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.342817][ C1] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 576.348309][ C1] Code: df e9 63 f6 ff ff e8 7e a7 be f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 fa 09 4c ff e9 45 f6 ff ff e8 60 a7 be f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 52 a7 be f7 90 0f 0b 90 42 80 3c 2b 00 [ 576.368198][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010246 [ 576.374422][ C1] RAX: ffffffff8a012580 RBX: ffff88807521d780 RCX: ffff88801d295a00 [ 576.382625][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.390641][ C1] RBP: ffffc90000a08a10 R08: ffff88801d295a00 R09: 0000000000000004 [ 576.399087][ C1] R10: 0000000000000003 R11: ffffffff8a0119d0 R12: 0000000000000010 [ 576.407117][ C1] R13: dffffc0000000000 R14: ffff888073e94200 R15: 0000000000000000 [ 576.415258][ C1] FS: 0000000000000000(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 576.424352][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.431514][ C1] CR2: 000000110c3e08d9 CR3: 00000000762ec000 CR4: 00000000003526f0 [ 576.439645][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 576.447666][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 576.455970][ C1] Call Trace: [ 576.459299][ C1] [ 576.462472][ C1] ? __pfx_dst_output+0x10/0x10 [ 576.467450][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 576.472937][ C1] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 576.479519][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 576.484900][ C1] ? skb_dst+0x4f/0xd0 [ 576.489083][ C1] ? dst_output+0x177/0x1c0 [ 576.493625][ C1] igmp_send_report+0x89e/0xdb0 [ 576.498501][ C1] ? __pfx_igmp_send_report+0x10/0x10 [ 576.504097][ C1] ? do_raw_spin_lock+0x121/0x290 [ 576.509130][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 576.514897][ C1] igmp_timer_expire+0x204/0x510 [ 576.519963][ C1] call_timer_fn+0x17b/0x5f0 [ 576.525212][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 576.530895][ C1] ? call_timer_fn+0xbe/0x5f0 [ 576.536382][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 576.542032][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.547367][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.552604][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 576.558372][ C1] __run_timer_base+0x61a/0x860 [ 576.563387][ C1] ? ktime_get+0x3e/0x1f0 [ 576.567951][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 576.573377][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 576.580110][ C1] run_timer_softirq+0xb7/0x180 [ 576.585168][ C1] handle_softirqs+0x283/0x870 [ 576.590476][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 576.595869][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 576.601486][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 576.606823][ C1] __irq_exit_rcu+0xca/0x1f0 [ 576.611481][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 576.617042][ C1] irq_exit_rcu+0x9/0x30 [ 576.621470][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 576.627409][ C1] [ 576.630495][ C1] [ 576.633632][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.640101][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 576.645986][ C1] Code: 43 dd 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b5 1a 00 f3 0f 1e fa fb f4 18 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 576.666802][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 576.673147][ C1] RAX: b923c37bfc7e9a00 RBX: ffffffff8196d6a8 RCX: b923c37bfc7e9a00 [ 576.681395][ C1] RDX: 0000000000000001 RSI: ffffffff8d991910 RDI: ffffffff8be322c0 [ 576.689786][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f1b R09: 1ffff110170e65e3 [ 576.698401][ C1] R10: dffffc0000000000 R11: ffffed10170e65e4 R12: ffffffff8fa18cf0 [ 576.706839][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a52b40 [ 576.715532][ C1] ? do_idle+0x1e8/0x510 [ 576.720194][ C1] default_idle+0x13/0x20 [ 576.724699][ C1] default_idle_call+0x74/0xb0 [ 576.729463][ C1] do_idle+0x1e8/0x510 [ 576.734060][ C1] ? __pfx_do_idle+0x10/0x10 [ 576.739064][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.744520][ C1] cpu_startup_entry+0x44/0x60 [ 576.749507][ C1] start_secondary+0x101/0x110 [ 576.754509][ C1] common_startup_64+0x13e/0x147 [ 576.759532][ C1] [ 576.763107][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 576.770683][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 576.781896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.792968][ C1] Call Trace: [ 576.796309][ C1] [ 576.799322][ C1] dump_stack_lvl+0x99/0x250 [ 576.804370][ C1] ? __asan_memcpy+0x40/0x70 [ 576.809175][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.814950][ C1] ? __pfx__printk+0x10/0x10 [ 576.819571][ C1] panic+0x2db/0x790 [ 576.823525][ C1] ? __pfx_panic+0x10/0x10 [ 576.828262][ C1] ? common_startup_64+0x13e/0x147 [ 576.833772][ C1] __warn+0x334/0x4c0 [ 576.837945][ C1] ? ip_mr_output+0xbb1/0xe70 [ 576.842812][ C1] ? ip_mr_output+0xbb1/0xe70 [ 576.847669][ C1] report_bug+0x2be/0x4f0 [ 576.852172][ C1] ? ip_mr_output+0xbb1/0xe70 [ 576.857105][ C1] ? ip_mr_output+0xbb1/0xe70 [ 576.861952][ C1] ? ip_mr_output+0xbb3/0xe70 [ 576.866729][ C1] handle_bug+0x84/0x160 [ 576.871074][ C1] exc_invalid_op+0x1a/0x50 [ 576.875680][ C1] asm_exc_invalid_op+0x1a/0x20 [ 576.880551][ C1] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 576.886154][ C1] Code: df e9 63 f6 ff ff e8 7e a7 be f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 fa 09 4c ff e9 45 f6 ff ff e8 60 a7 be f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 52 a7 be f7 90 0f 0b 90 42 80 3c 2b 00 [ 576.906948][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010246 [ 576.913314][ C1] RAX: ffffffff8a012580 RBX: ffff88807521d780 RCX: ffff88801d295a00 [ 576.922353][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.931669][ C1] RBP: ffffc90000a08a10 R08: ffff88801d295a00 R09: 0000000000000004 [ 576.940674][ C1] R10: 0000000000000003 R11: ffffffff8a0119d0 R12: 0000000000000010 [ 576.949406][ C1] R13: dffffc0000000000 R14: ffff888073e94200 R15: 0000000000000000 [ 576.957809][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 576.963400][ C1] ? ip_mr_output+0xbb0/0xe70 [ 576.968230][ C1] ? __pfx_dst_output+0x10/0x10 [ 576.973585][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 576.979184][ C1] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 576.985400][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 576.991626][ C1] ? skb_dst+0x4f/0xd0 [ 576.995730][ C1] ? dst_output+0x177/0x1c0 [ 577.000408][ C1] igmp_send_report+0x89e/0xdb0 [ 577.006184][ C1] ? __pfx_igmp_send_report+0x10/0x10 [ 577.011766][ C1] ? do_raw_spin_lock+0x121/0x290 [ 577.017086][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 577.022656][ C1] igmp_timer_expire+0x204/0x510 [ 577.027753][ C1] call_timer_fn+0x17b/0x5f0 [ 577.033204][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 577.039153][ C1] ? call_timer_fn+0xbe/0x5f0 [ 577.043863][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 577.049124][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.054451][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.059864][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 577.065433][ C1] __run_timer_base+0x61a/0x860 [ 577.070464][ C1] ? ktime_get+0x3e/0x1f0 [ 577.074822][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 577.080334][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 577.086949][ C1] run_timer_softirq+0xb7/0x180 [ 577.091815][ C1] handle_softirqs+0x283/0x870 [ 577.096936][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 577.102077][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 577.107950][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 577.113455][ C1] __irq_exit_rcu+0xca/0x1f0 [ 577.118625][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 577.124188][ C1] irq_exit_rcu+0x9/0x30 [ 577.129430][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 577.136878][ C1] [ 577.140234][ C1] [ 577.143641][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 577.150466][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 577.156940][ C1] Code: 43 dd 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b5 1a 00 f3 0f 1e fa fb f4 18 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 577.178244][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 577.184515][ C1] RAX: b923c37bfc7e9a00 RBX: ffffffff8196d6a8 RCX: b923c37bfc7e9a00 [ 577.193034][ C1] RDX: 0000000000000001 RSI: ffffffff8d991910 RDI: ffffffff8be322c0 [ 577.201116][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f1b R09: 1ffff110170e65e3 [ 577.209281][ C1] R10: dffffc0000000000 R11: ffffed10170e65e4 R12: ffffffff8fa18cf0 [ 577.217366][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a52b40 [ 577.225359][ C1] ? do_idle+0x1e8/0x510 [ 577.230009][ C1] default_idle+0x13/0x20 [ 577.234472][ C1] default_idle_call+0x74/0xb0 [ 577.239461][ C1] do_idle+0x1e8/0x510 [ 577.243575][ C1] ? __pfx_do_idle+0x10/0x10 [ 577.248197][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.253411][ C1] cpu_startup_entry+0x44/0x60 [ 577.258260][ C1] start_secondary+0x101/0x110 [ 577.263231][ C1] common_startup_64+0x13e/0x147 [ 577.268480][ C1] [ 577.272018][ C1] Kernel Offset: disabled [ 577.276391][ C1] Rebooting in 86400 seconds..