last executing test programs: 21m38.596235735s ago: executing program 4 (id=31): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4800) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010100000000000000000100000005000100fa"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) 21m38.479501137s ago: executing program 4 (id=33): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8104}], 0x1, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) 21m38.159700181s ago: executing program 32 (id=35): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x3, 0x0, 0x0, @time, {0x0, 0x1f}, {}, @control={0x0, 0x8000, 0x4ee8}}], 0x70) pipe2$watch_queue(&(0x7f0000000140), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 21m35.458338406s ago: executing program 4 (id=43): syz_open_procfs(0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) io_uring_setup(0x4792, &(0x7f00000001c0)={0x0, 0x878f}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 21m34.596980008s ago: executing program 4 (id=44): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000080)={[{@noinit_itable}, {@errors_remount}, {@noauto_da_alloc}, {@lazytime}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x23, 0x46e, &(0x7f0000000e00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x88) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x50f, &(0x7f0000000940)="$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") open_by_handle_at(0xffffffffffffffff, 0x0, 0x202080) capset(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6000010, &(0x7f0000000400)={0xa, 0x4e21, 0x8001, @mcast1, 0x1}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x40000000) 21m32.831595091s ago: executing program 4 (id=51): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) 21m29.972088829s ago: executing program 4 (id=58): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) close(r2) close(r3) 21m29.266734318s ago: executing program 33 (id=58): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) close(r2) close(r3) 21m20.162683398s ago: executing program 34 (id=84): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x5, 0x0, 0x4, 0x0, 0x8]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd27, 0x4000, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x26, 0x37}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000081}, 0x22000004) 17m27.026659513s ago: executing program 2 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 17m24.645413945s ago: executing program 2 (id=898): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0x4896, &(0x7f0000000240), 0x3, 0x43b, &(0x7f00000008c0)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) accept(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000180)=0x80) r1 = socket(0x2, 0x3, 0xff) shutdown(r1, 0x1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @remote}, 0x10) sendmsg$netlink(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140000001800000000000000fedb07250400fe809bfe4624821f8e4efa86d2f4e620353302e513bc994ac4f25cf3f2935893470b05a2c823ce0e2a94c62b4f84e780013ab8d4b5a6f62511ce272bd71a7055e2e2c000"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x820) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x3, 0x5}}, 0x30) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff0200000000000000000001ffaaaaaa0000"], 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) lchown(&(0x7f0000000200)='./file0\x00', r3, 0x0) 17m23.667856897s ago: executing program 2 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071141500000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 17m21.464976736s ago: executing program 2 (id=909): dup2(0xffffffffffffffff, 0xffffffffffffffff) io_setup(0x5, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xf, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0xb, 0x460, &(0x7f0000001380)="$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") bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1364825, &(0x7f0000000140)='usrjquota=') setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0xd, 0x0, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) 17m19.101530237s ago: executing program 2 (id=913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0x30}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r5, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08000100ac1414aa080004007f00000108000400e00000021400"], 0x70}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x60, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000000}}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x60}}, 0x0) 17m18.846179871s ago: executing program 2 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = syz_open_dev$video(&(0x7f0000000400), 0x58, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000440)={0x311, "d57127ef8edd513563fc0cf1559e7b86cb0879a29c6841de6e12eefd36edaae9", 0x2}) 17m18.542370675s ago: executing program 35 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = syz_open_dev$video(&(0x7f0000000400), 0x58, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000440)={0x311, "d57127ef8edd513563fc0cf1559e7b86cb0879a29c6841de6e12eefd36edaae9", 0x2}) 13m13.786152382s ago: executing program 3 (id=1583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m6.970663729s ago: executing program 3 (id=1592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) setresuid(0x0, 0xee01, 0xee00) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) 13m5.35696193s ago: executing program 3 (id=1597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 13m2.97220893s ago: executing program 3 (id=1601): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x15, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6tnl0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) 13m2.711797973s ago: executing program 3 (id=1605): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2a, r2}) 13m2.711261553s ago: executing program 3 (id=1606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 12m46.907029575s ago: executing program 36 (id=1606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 9m45.081879992s ago: executing program 7 (id=2002): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fgetxattr(r0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x400}}, 0x14}}, 0x0) creat(&(0x7f0000001b00)='./file1\x00', 0x1a1) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) 9m41.816602944s ago: executing program 7 (id=2018): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m40.57091038s ago: executing program 7 (id=2009): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) 9m40.226067384s ago: executing program 7 (id=2011): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) 9m36.128109686s ago: executing program 7 (id=2026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x2, 'vlan0\x00', {}, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 9m33.870315336s ago: executing program 7 (id=2030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) 9m17.868876229s ago: executing program 37 (id=2030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) 4m21.377186869s ago: executing program 1 (id=2694): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000600)={0x0, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71b9399c8d590c79cfaf41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x60, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, r4, 0x0, 0x6, 0x13, 0x4, 0x2, 0x0, 0x932, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xb}, @sack={0x5, 0xa, [0x5, 0x5]}, @mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x16, @broadcast, 0x1, "268906521317d041"}, @sack={0x5, 0xe, [0x9, 0x7f, 0x1]}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$netlink(0x10, 0x3, 0x0) 4m20.196081524s ago: executing program 1 (id=2695): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0xfffffffffffffff9, 0x2, 0x8001, 0x2, [0x7, 0x12ae1acd, 0x7, 0x28]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(0x0, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3}) 4m17.39122545s ago: executing program 1 (id=2701): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@nobarrier}, {@nouid32}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f00000043c0)=ANY=[], 0x1, 0x1a0, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knv4QqUXGoYAMWzwuV5K7q4BScIuTAoYtg0NDGppio6WWwpQUXKUi1/4JOdVRBJxEF5+ogOOi5dJNmKA5OEsnlieDf0Oc13Oe+H7h7Hr6tqBtlgD/7a/NUSDgc5jOCBqZk1Ck1yjdm/mlyaxRcNvOmyecmJ6OV1duNdru5XLhUIP9fAfxKun9V9JITir5QQb7ur8035GbIoEJHLYTkaxQf49Tpek+Y1BMcv4HDwN3kiqIrbg2OlHqde6VoZfXcUqex2Fxs3gmC2Yvl8+XyhaB0a6ndLL9GvEeieMo6XkgmJOetk6rzcEcfYkYQr6ViR4p90nW2dpyzp2f6KG+PATneu30y33WroOY4Q/b68PJVjgnPcEKma+QUmuSgKnJVvRJff9G/U3OfRtu4217YuKaypLcrspcVf5eU6xMUfWaHq+EoH9iImY6pxmzH7P5gSt4OTxnvVT8YPl+Y6SSnIM39Rq+37Kfho+iQwA0J8jCR/E4l98rDO/ONCb6NXyzLsizLsizLsqwD4G8AAAD//3xPYw0=") openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x34}}, 0x0) 4m14.246399699s ago: executing program 1 (id=2706): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(0x0, 0xd, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r3, 0x0) syz_extract_tcp_res(0x0, 0x5, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @empty, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x600, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 4m10.610976046s ago: executing program 5 (id=2712): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000580)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r4, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r5, 0x3ff}}, 0x10) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x2d, 0x0, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x130, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x108, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4m9.918240155s ago: executing program 5 (id=2713): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fallocate(r0, 0x0, 0x10000, 0x20000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) fallocate(r0, 0x8, 0x0, 0x2000) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="63616368655f73747261746567793d64697361626c65fdd4642c757365725f78617474722c6461783d616c776179732c6461782c63616368655f73747261746567793d64697361626c65642c61636c"], 0x5, 0x1b1, &(0x7f00000000c0)="$eJzsmM1LG0EYxp+Z3WxIT+21FFpooOmhm91NWwql0Jxy6KXQD/EiBrOG6MZIsgcTEOLRk3+Df4J4Fw9evQleVRC8ePS8MrOjOxrzISRB8P0d3jwz82Y+3t08AwFBEM+Ws9Ork/XN81cc6GaQRVr1XxhJDtfymzu/cm8OS+7e3MH3493S0f353gGIotHXF3PvFw2Eqh1Fd7+dVZ9/wZFFRup/4Pio+mfAYCs9D47/SvtgmFV6SdMNkW/bi7XAtxcaQUUIRwRXBE+Egr6+CeByg6Gi7Y9p4612Z7kcBH6zV1j9hx4nBtVP7q/I8QOI1COL9Od1UxtH1i/GBYerdAEMf5T+hrSqDe85/2szOb8x2vnHKVLi1RuUszW51U1M4YAkhgh0Y5FGMsSn9fpNRojfzxPYxoRE4h/RNsMHzT9NzT/yYX31Z6vd+VSrl6t+1V/xvMJX57PjfPHy0pvjOMD/MtKfXmjzp/rkWszCWjkMm24cb9teHB9yXEv6H0fufdxmqk9H3gcvmbj6kDNUmyAIgiAIgiAIgiAIgiAIYuy8BZP/gg7B+y2zrwMAAP//Ub9tHw==") keyctl$join(0x1, 0x0) 4m9.55064801s ago: executing program 1 (id=2715): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x101000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000240)={r1, 0x0, 0x0, &(0x7f00000001c0)=[0x4000, 0xfffc, 0xcc, 0x7], 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = syz_open_dev$vbi(&(0x7f0000000b80), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 4m7.558296115s ago: executing program 5 (id=2717): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x1, @empty}}, 0x0, 0x0, 0x3fb, 0x0, 0x32, 0xfffffffd}, 0x9c) sendmmsg$inet6(r1, 0x0, 0x0, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap(&(0x7f000057d000/0x1000)=nil, 0x1000, 0xc, 0x110, r0, 0x1facf000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getown(r2, 0x9) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x58, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x58}}, 0x0) 4m4.846608889s ago: executing program 1 (id=2721): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0xfffffffffffffff9, 0x2, 0x8001, 0x2, [0x7, 0x12ae1acd, 0x7, 0x28]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(0x0, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3}) 4m2.949992703s ago: executing program 5 (id=2722): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtaction={0x18, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close(r3) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x800, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x323}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) 4m1.831528527s ago: executing program 5 (id=2725): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@remote, 0x0, 0xfffe}, {@in6=@private1, 0x200000, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x4, 0x0, 0x2}}, 0xf0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f048}) socket$pptp(0x18, 0x1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r4 = syz_open_pts(r3, 0x141601) r5 = gettid() ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={0x0, 0x1, 0x1ff, 0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) listen(0xffffffffffffffff, 0x0) 3m59.650235395s ago: executing program 5 (id=2730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) 3m49.479218095s ago: executing program 38 (id=2721): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0xfffffffffffffff9, 0x2, 0x8001, 0x2, [0x7, 0x12ae1acd, 0x7, 0x28]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(0x0, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3}) 3m44.552301968s ago: executing program 39 (id=2730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) 10.410737378s ago: executing program 6 (id=3168): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 10.2385749s ago: executing program 9 (id=3169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) 9.280685762s ago: executing program 9 (id=3170): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b1c0)="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", 0x2000, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000006380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000080)) shutdown(r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.411603533s ago: executing program 0 (id=3172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000140)=""/73, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) 8.223443935s ago: executing program 9 (id=3173): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb4400", 0x1e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) recvmsg(r0, 0x0, 0x141) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x20, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, 0x0, &(0x7f00000004c0)=""/226, 0xe2}}, 0x10) r5 = open_tree(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000940)='GPL\x00', 0x101, 0x86, &(0x7f00000001c0)=""/134, 0x40f00, 0x3, '\x00', r3, 0x1b, r1, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, 0x0, 0x1, &(0x7f0000000900)=[r1, r1, r5, r1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x0, 0x5, 0xc, 0x7}], 0x10, 0x80000000, @void, @value}, 0x94) acct(&(0x7f0000000000)='./file0\x00') memfd_secret(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 7.715561722s ago: executing program 8 (id=3174): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000104030000100000000000000500000305000100020000000a000200000000000100000008000540000000020600064000020000050001000300000006000640000200000800044000000fff08000440000000030a00020000"], 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$netlink(r4, 0x0, 0x1c) ptrace$getsig(0x4202, r1, 0x10001, &(0x7f0000000440)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 7.334900176s ago: executing program 0 (id=3175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) 6.580155876s ago: executing program 8 (id=3176): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff000}]}, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x8a822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x4) r6 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x101) openat$cgroup_int(r6, &(0x7f0000000200)='io.bfq.weight\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x44084) 6.384222929s ago: executing program 6 (id=3177): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x7ffe, 0x1000, 0x4, 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f022}) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 6.380741589s ago: executing program 0 (id=3178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r6, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$setsig(r1, 0xa, 0x38) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000001200)=ANY=[], 0xd, 0x6d2, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.580157609s ago: executing program 0 (id=3179): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000680)="9ae573041030712827947849601562102523061186707c18dd373b64d9833be33d19e014df2dd0249974d282f7c6ce805177786ba41647ae76e403aac71c3f62656d6891080f4adc52e91529d41e901b564c2a1614b3da6a2550d61b79120d02f5dc0286a5ccf7c8bb3740b7fc78323a6a4f5fa86010212cd3c2f38fbb7e842b014610bd23dd7dfb501d36e073bea1bc12850d1f5a2d7bc274a7606deb1f4fd73f37fa1da049f863650ac80a0d2fc7d043568c38655e262a29b81062e72dfc792824", &(0x7f0000000440)="6f04649636b2a8af656a440e493303092a0050b85f2c83e208152465c3c0dc7d0b503b20846514e42f5aa629745af14a49a27f85228672c54443055808f08d0112e4f891ed0533381d316a"}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) memfd_secret(0x80000) bind$inet(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x221881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@journal_path={'journal_path', 0x3d, './file1'}}]}, 0x1, 0x507, &(0x7f00000012c0)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) epoll_pwait2(r4, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000500)={[0xb57a]}, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet6(0xa, 0x3, 0x0) 5.52000585s ago: executing program 6 (id=3180): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x7ff, 0x100000000000000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfbfffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x2, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x2000000009, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800]}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 5.328075682s ago: executing program 8 (id=3181): r0 = memfd_create(&(0x7f0000000c40)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%|\xd0\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x00\x00\x00\x00\x00\x00\x00\x00\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\xad\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80\x858Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xeb\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\x05\x00\xccM\x906\x95xQ-2}p\xa6$\xe4p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\x9e\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJd*\xc67\xca\x03O\xc8\x11\xc6*{\xc4\xaa[\xef\xa1\x90\x8e\xa3\xf7(\xbb\xecN\xd4\xe7\xf2\xbe\xcf\x1c\xd9U8d\xb8>k\xaeb\xb4?:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,\x00_\xd0\xc3\t\xe5\x9e\x9a\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xb0\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xf5\x18\xc0P\xc0\x8f[\xed\x1e\"\xd8/$ iL\xd3\xd7\x0139\xce\x12\xe4\x1f\xef\xefp\xa2 \x18\xa0\xbd\xde\x985\xc34\xcc\x9a\x12\xb9q\xd3-0\x14\x80\xa4#\xf1\xf7\x17#\x88xf\x91dZx\x98\xb3\xfa \x03KBfP\xa8v\x94\xd0\xfe\x10V\x01\xce\xed\x93\xc6o\x85O\x15\xd0@\x1c\xde \x15\x90Z\x1b\xaa\x00\xa8\x8a&Q\x05\xd2B\xb4\xca}wBf\x06b\x06\xd2\x8d\xe6\xaa\xda{\x92\x04\x00qC5\xb0\xb1\\\x95\xaf\x9b\xf9\x90\xad\r\xec\x10\x14G\xa7\xaf|,M\x12\x1c\xe3?wE\xbc\x05\x1c\xae\x9d\xc0\x11K\xb0\x98\x01X\xd4Nd\xfa\xb8\xea\x17[p\x94\xf1`+\xa0w\xc3\x87\xce\x16\xde\b\nb\x10\x1d]e\xb7\xb0\xf6>\xa1\xde\xf1\x7f\xca4,\xdb\xbd\xf5\x8aK\x1a\xaa\x05\xfc\xba2@k]\x97\xa0[W\xd8i\xb8\x0f,\xf5\x19h\xcc\xd0\f \xea\x9f\x86\xd3\x00\xee\x1611\x8fI\xe8\xa3:\xb0\xfcT\xcb&\xb1s\x1d\xe5p`\x05B\x89\xf7\xdc\xad\x88\xa7t,\x14\xde>G\xea$\x1d\x8b\xc6\x8dp\x8fu\xb6T\x18#v8\x81\xf6EWq\xf3\xb4\x91\xad\xfd\x99\x02JK\x91G<\x91;_\xb5\x92\xc9m', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="f282d945a6faf3e8a1f81cdd907cd0", @ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000dae52ea9a8697d18000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4}, 0x14) r6 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRESDEC, @ANYRES32=r5], 0x1, 0x522, &(0x7f00000004c0)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r10 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r10, &(0x7f0000000240)=""/112, 0x349b7f55) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast1, 0x4e20, 0x3, 0x4e23, 0x0, 0xa, 0xa0, 0x1a0, 0x0, r4, r6}, {0x1, 0x7fff, 0x5, 0x9948, 0x5, 0x7fffffff, 0x4, 0xfffffffffffffff7}, {0x4, 0x2, 0xf38, 0x6}, 0x7, 0x6e6bb0, 0x0, 0x0, 0x1, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in6=@loopback, 0x3501, 0x2, 0x1, 0xb6, 0x2, 0x0, 0x5}}, 0xe8) 4.462543163s ago: executing program 9 (id=3182): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a3000000000140000001100"], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.421401584s ago: executing program 0 (id=3183): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x7ff, 0x100000000000000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfbfffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x2, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x2000000009, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800]}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 4.359472215s ago: executing program 6 (id=3184): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.994881549s ago: executing program 9 (id=3185): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) 3.92073419s ago: executing program 8 (id=3186): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x40, 0x65, 0x4, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7ff, 0x4, 0xfffffffffffffffe, 0x0, 0x2, 0x7}, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000200)={0x4, @win={{0x8000, 0x8001, 0x7fffffff, 0x4}, 0x5, 0x101, 0x0, 0x3, 0x0, 0x8}}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x90, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) sendto$packet(r3, 0x0, 0x0, 0x880, &(0x7f0000000400)={0x11, 0x4d80bc28ddb2705e, r5, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) 3.91485194s ago: executing program 0 (id=3187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) 3.786254842s ago: executing program 6 (id=3188): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, 0x0, 0x0, 0xfffeffff) epoll_pwait(r2, 0x0, 0x0, 0xea5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)={0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x500f}}, {@nodecompose}, {}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'cp949'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000240)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e561eb1bcb4a046d00825a02a373c4cd08785e4e69234ffbff79f36d5949767ec9ab9342262268333a390a88da195cb8fd851585cd4c32279b10", 0xa6, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r4, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 1.991776605s ago: executing program 9 (id=3189): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}, @time_exceeded={0x80, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r4, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(r5, &(0x7f0000000880)={'syz0\x00', {0x4, 0x0, 0xf, 0x6}, 0x4, [0x5, 0x7, 0x8000005, 0x80000000, 0x6, 0x9, 0x8, 0x9, 0x6, 0xfffffff8, 0xc, 0x7, 0x3, 0x7, 0x6, 0xb, 0x7, 0x0, 0x6, 0x6, 0x1, 0xf, 0x8, 0x5, 0x47f, 0x2, 0x6, 0x1, 0x1db, 0xffffffff, 0x0, 0x1, 0x7, 0xffff, 0x3, 0x2, 0xb, 0x80000000, 0x8b8c, 0x3, 0x3, 0x8, 0x5d800000, 0x9, 0x14, 0x7, 0x0, 0x7fffffff, 0xe, 0xffffff7f, 0x0, 0x101, 0x10, 0x2, 0x1, 0x9, 0x1, 0x819, 0x9, 0x0, 0x7, 0x3ff, 0xd84, 0x6], [0x7fff, 0x1ff, 0x4, 0x5, 0x9, 0x666b, 0x3, 0x5, 0x2ce, 0xa75, 0xc, 0xfffffc01, 0x6, 0x1, 0x7fffffff, 0x0, 0x8, 0x0, 0x2a7af4fa, 0x7, 0x4, 0x2, 0x3, 0x1000, 0x7ff, 0x8ab, 0x3, 0x54f, 0xb, 0x8, 0x8, 0x80000000, 0x8, 0xff, 0x6, 0x5, 0xfffffd41, 0x8, 0x3, 0xfee, 0x5, 0x7, 0x0, 0x75, 0x4, 0x4, 0x3, 0x3, 0x7, 0x80002, 0x1, 0xd, 0x1, 0x4, 0xffffffff, 0x0, 0x8, 0x10001, 0x0, 0xff, 0x9, 0x1, 0x2], [0x3ff, 0x80000000, 0x4, 0x0, 0x3, 0x401, 0x2, 0xc000, 0x2, 0x4, 0x6, 0x4, 0x7fffffff, 0x1, 0xf, 0x5, 0x6, 0x7, 0x2, 0x738d5311, 0x4, 0x8, 0x400, 0xd, 0x1, 0x4, 0x1da4dc60, 0x7, 0x7, 0x34, 0x5, 0xd, 0xfffffea5, 0x10001, 0x200000, 0x0, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x9e8, 0x0, 0x100003, 0xa, 0x14, 0xed5a, 0x2, 0x5, 0xfff, 0x9, 0x3, 0xc82e, 0x9, 0x6, 0x4, 0x5, 0x8, 0x9, 0xd7, 0x1, 0x5, 0x5, 0xfffffffa], [0x5, 0x6b30, 0x4, 0xffffffff, 0x9a3, 0x100, 0x9, 0x6, 0x12, 0x6, 0x10001, 0x9, 0x1ff, 0x5, 0x7, 0x3, 0xa291, 0x2, 0x2, 0x7ff, 0x6, 0x9e9c, 0x1004, 0x100, 0x5, 0x81, 0xc9, 0x0, 0x0, 0x5, 0xff, 0x4, 0xfffffffe, 0x5, 0xeadf, 0x1, 0x0, 0x7, 0x8000, 0x7fff, 0x4, 0x9, 0x7, 0x1ee0000, 0x80000001, 0x9, 0x6, 0x0, 0x62d, 0x8, 0x6, 0x1d, 0x3, 0x4, 0x401, 0x8, 0xffffffb8, 0x6, 0x24, 0x4, 0xd, 0x8, 0x0, 0x9]}, 0x45c) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x2b, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 1.751253418s ago: executing program 8 (id=3190): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4008800) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, &(0x7f00000000c0)={@desc={0x4091, 0x0, @desc3}}) 918.232228ms ago: executing program 6 (id=3191): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) fanotify_init(0x500, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x62e00, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x10d1, &(0x7f0000000480)={0x0, 0x879, 0x1, 0x4000001, 0x1a3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x25, 0x2000, @fd=r0, 0xffffffffffffff00, 0x1, 0x6, 0x5, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r0, 0x60, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=3192): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7d, 0x20f}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getcwd(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)={0x1, 0x0, @auto=[0x39, 0x16]}, 0xa, r5) keyctl$setperm(0x5, r6, 0x400) keyctl$clear(0x7, r5) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000006140)={0x2020}, 0x2048) getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000000200)) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) kernel console output (not intermixed with test programs): 2052][T13274] netlink: 'syz.9.2100': attribute type 1 has an invalid length. [ 837.330189][T13274] netlink: 209848 bytes leftover after parsing attributes in process `syz.9.2100'. [ 837.851525][T13131] device bridge_slave_1 entered promiscuous mode [ 838.576663][T13131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.685882][T13131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.819323][T13283] loop6: detected capacity change from 0 to 1024 [ 838.959556][T13283] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 839.130422][T13288] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 839.193982][T13131] team0: Port device team_slave_0 added [ 839.344432][T13131] team0: Port device team_slave_1 added [ 839.799865][T13131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.806862][T13131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.136403][T13131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.231046][T13131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.240448][T13131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.318001][T13131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.880401][T13131] device hsr_slave_0 entered promiscuous mode [ 840.947949][T13131] device hsr_slave_1 entered promiscuous mode [ 841.208443][T13131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.231763][T13131] Cannot create hsr debugfs directory [ 841.282200][T11195] device hsr_slave_0 left promiscuous mode [ 842.116514][T11195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.168001][T11195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.245818][T11195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.287987][T11195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.328034][T11195] device batadv1 left promiscuous mode [ 842.333731][T11195] bridge0: port 4(batadv1) entered disabled state [ 842.399804][T11195] device bridge_slave_1 left promiscuous mode [ 842.462362][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.644325][T11195] device bridge_slave_0 left promiscuous mode [ 842.650878][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.755712][T10398] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 844.780950][T10398] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 845.157739][T13334] loop9: detected capacity change from 0 to 16 [ 845.964752][T10807] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 845.979401][T13334] erofs: (device loop9): mounted with root inode @ nid 36. [ 847.464453][T11195] bond2 (unregistering): Released all slaves [ 848.931462][T13350] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 848.938040][T13350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 848.946300][T13350] vhci_hcd vhci_hcd.0: Device attached [ 848.959404][T13351] vhci_hcd: connection closed [ 848.963301][ T154] vhci_hcd: stop threads [ 848.989399][ T154] vhci_hcd: release socket [ 848.993968][ T154] vhci_hcd: disconnect device [ 849.000492][T11195] bond1 (unregistering): Released all slaves [ 849.101156][T11195] team0 (unregistering): Port device team_slave_1 removed [ 849.148505][T11195] team0 (unregistering): Port device team_slave_0 removed [ 849.176534][T11195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.197072][T11195] device bond_slave_1 left promiscuous mode [ 849.225168][T11195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.246133][T11195] device bond_slave_0 left promiscuous mode [ 849.560761][T11195] bond0 (unregistering): Released all slaves [ 856.784375][T13424] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 856.791027][T13424] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 856.799340][T13424] vhci_hcd vhci_hcd.0: Device attached [ 857.077158][T10183] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 858.526998][T13430] vhci_hcd: connection reset by peer [ 858.540740][T10807] vhci_hcd: stop threads [ 858.551871][T10807] vhci_hcd: release socket [ 858.690277][T10807] vhci_hcd: disconnect device [ 859.152817][T13450] loop6: detected capacity change from 0 to 2048 [ 859.426408][T13450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 860.309860][T13459] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 862.363090][T10183] vhci_hcd: vhci_device speed not set [ 864.471254][T13498] loop9: detected capacity change from 0 to 512 [ 865.534538][T13131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 865.547650][T13131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 865.569289][T13498] EXT4-fs (loop9): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 865.611636][T13131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 865.636340][T13131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 865.653693][T13498] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.997034][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2152'. [ 867.304218][T13515] loop6: detected capacity change from 0 to 256 [ 867.343112][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2152'. [ 868.354393][T13525] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 868.461853][T13131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.563087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 868.587425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 868.638652][T13131] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.728005][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2159'. [ 868.959566][T13535] loop6: detected capacity change from 0 to 32768 [ 868.988098][T13541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2159'. [ 869.029192][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2159'. [ 869.393142][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2160'. [ 869.899583][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.917283][T13535] gfs2: Unknown parameter 'statfs_quaotum' [ 870.498737][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 870.519873][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 870.530237][T10807] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.537413][T10807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.551464][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 870.563420][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 870.575722][T10807] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.583054][T10807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.628676][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 870.867694][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 870.930456][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 870.970359][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 871.257976][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 871.775323][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 871.837580][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 871.924260][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 872.109942][T13558] lo speed is unknown, defaulting to 1000 [ 872.194211][T13131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 872.991022][T13131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 873.037353][T13578] loop6: detected capacity change from 0 to 256 [ 873.112389][ T26] audit: type=1326 audit(1748294479.878:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 873.137408][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 873.156236][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 873.220494][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 873.283782][ T26] audit: type=1326 audit(1748294479.918:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 873.307930][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 873.317349][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 873.325545][T13566] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2166'. [ 873.791810][ T26] audit: type=1326 audit(1748294479.918:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 873.883541][ T26] audit: type=1326 audit(1748294479.918:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 873.906688][ T26] audit: type=1326 audit(1748294479.918:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 873.974842][ T26] audit: type=1326 audit(1748294479.918:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 874.026441][ T4182] Bluetooth: hci4: link tx timeout [ 874.031692][ T4182] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 874.039592][ T4182] Bluetooth: hci4: link tx timeout [ 874.067891][ T4182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 874.283964][ T26] audit: type=1326 audit(1748294479.928:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 874.804842][ T26] audit: type=1326 audit(1748294479.928:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 874.856165][ T26] audit: type=1326 audit(1748294479.928:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 875.012254][ T26] audit: type=1326 audit(1748294479.938:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.6.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff944a9c969 code=0x7ffc0000 [ 875.388185][T13616] loop6: detected capacity change from 0 to 512 [ 875.464395][T13616] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 875.589909][T13614] netlink: 'syz.6.2177': attribute type 12 has an invalid length. [ 875.774476][T13616] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 875.866285][T13616] ext4 filesystem being mounted at /160/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.364396][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 876.380722][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 876.409610][T13614] EXT4-fs error (device loop6): __ext4_new_inode:1286: comm syz.6.2177: failed to insert inode 16: doubly allocated? [ 876.487146][T13131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.633156][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 876.710964][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 876.764606][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 876.798137][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 876.849500][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 876.877798][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 876.904712][T13131] device veth0_vlan entered promiscuous mode [ 876.956962][T13131] device veth1_vlan entered promiscuous mode [ 877.411299][T13131] device veth0_macvtap entered promiscuous mode [ 877.486452][T13131] device veth1_macvtap entered promiscuous mode [ 878.076713][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 878.085031][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 878.177799][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 879.516950][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 879.694891][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 879.737547][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 881.396626][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2188'. [ 881.759662][ T4252] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 882.126042][ T4252] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 882.232582][T13691] lo speed is unknown, defaulting to 1000 [ 882.405336][ T4252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.183137][ T4252] usb 7-1: config 0 descriptor?? [ 884.192673][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 884.227861][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2202'. [ 884.425820][ T4252] ath6kl: Failed to submit usb control message: -71 [ 884.432612][ T4252] ath6kl: unable to send the bmi data to the device: -71 [ 884.465454][ T4252] ath6kl: Unable to send get target info: -71 [ 884.636563][T13691] chnl_net:caif_netlink_parms(): no params data found [ 886.130925][T13740] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2213'. [ 886.325127][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 886.367324][ T4252] ath6kl: Failed to init ath6kl core: -71 [ 887.179641][ T4252] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 887.243598][ T4252] usb 7-1: USB disconnect, device number 4 [ 888.235461][T13691] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.264892][T13691] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.368406][T13691] device bridge_slave_0 entered promiscuous mode [ 888.401584][T13691] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.418001][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 889.502080][T13691] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.269099][T13785] loop6: detected capacity change from 0 to 256 [ 890.306659][T13691] device bridge_slave_1 entered promiscuous mode [ 890.648662][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2214'. [ 891.154996][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 891.571488][T13691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.647027][T13691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.743423][T13795] loop9: detected capacity change from 0 to 4096 [ 891.890565][T13795] NILFS (loop9): invalid segment: Checksum error in segment payload [ 891.975991][T13795] NILFS (loop9): trying rollback from an earlier position [ 892.081037][T13691] team0: Port device team_slave_0 added [ 892.091765][T13795] NILFS (loop9): recovery complete [ 892.125740][T13796] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 892.437345][T13691] team0: Port device team_slave_1 added [ 893.739865][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2218'. [ 893.852069][T13809] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.863542][T13809] F2FS-fs (loop13): Unable to read 1th superblock [ 893.871070][T13809] blk_update_request: I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.882334][T13809] F2FS-fs (loop13): Unable to read 2th superblock [ 894.802579][T13691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.815491][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.853834][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2221'. [ 894.875212][T13811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2221'. [ 894.906267][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2221'. [ 894.918518][T13691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.050286][T13691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.063191][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.130354][T13691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.638343][T13691] device hsr_slave_0 entered promiscuous mode [ 895.841031][T13691] device hsr_slave_1 entered promiscuous mode [ 896.235507][T13691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.275214][T13691] Cannot create hsr debugfs directory [ 896.404866][T13823] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 904.092633][T13881] netlink: get zone limit has 8 unknown bytes [ 907.071645][T13894] delete_channel: no stack [ 910.232277][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2251'. [ 911.175324][T13691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 911.267929][T13950] loop9: detected capacity change from 0 to 512 [ 911.310418][T13950] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 911.385916][T13691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 911.436279][T13691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 911.443334][T13950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 911.534151][T13950] System zones: 1-12 [ 912.224380][T13950] EXT4-fs (loop9): 1 truncate cleaned up [ 912.230398][T13950] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 912.360834][T13691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 917.724829][T13996] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 917.736610][T13996] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 917.783616][T13996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 918.639825][T13691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.012566][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 919.071984][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 919.247937][T13691] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.893149][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 919.923351][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 919.957900][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.965100][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.006031][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 921.378077][T14042] loop9: detected capacity change from 0 to 1024 [ 921.555298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 921.584765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 921.634170][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.641336][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.652042][T14042] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,. Quota mode: none. [ 921.724042][T14042] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.994394][T11195] device hsr_slave_0 left promiscuous mode [ 922.025914][T11195] device hsr_slave_1 left promiscuous mode [ 922.044022][T11195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.525389][T14049] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 922.546892][T14049] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 922.568955][T14049] EXT4-fs (loop9): Remounting filesystem read-only [ 922.582531][T11195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.620200][T11195] device bridge_slave_1 left promiscuous mode [ 922.665332][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.790657][T11195] device bridge_slave_0 left promiscuous mode [ 922.844297][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.979513][T11195] device veth1_macvtap left promiscuous mode [ 923.006389][T11195] device veth0_macvtap left promiscuous mode [ 923.036818][T11195] device veth1_vlan left promiscuous mode [ 923.042682][T11195] device veth0_vlan left promiscuous mode [ 924.727767][T11195] team0 (unregistering): Port device team_slave_1 removed [ 924.795166][T11195] team0 (unregistering): Port device team_slave_0 removed [ 924.839718][T11195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.904111][T11195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.979698][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2277'. [ 925.266912][T11195] bond0 (unregistering): Released all slaves [ 926.415832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 926.437100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 927.947528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 928.544947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 928.575838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 928.594914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 928.608575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 928.635845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 928.691046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 928.756570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 928.777628][T14125] loop9: detected capacity change from 0 to 256 [ 928.807846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 928.869659][T13691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 931.287615][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.556032][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 932.644882][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 932.658368][T13691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.324684][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 933.382495][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 933.564279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 933.572801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 933.668897][T13691] device veth0_vlan entered promiscuous mode [ 933.702446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 933.802879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 934.085136][T13691] device veth1_vlan entered promiscuous mode [ 934.496197][T14191] loop6: detected capacity change from 0 to 2048 [ 934.717431][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 934.735887][T14191] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 934.763969][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 934.835841][T13691] device veth0_macvtap entered promiscuous mode [ 934.846827][T14201] loop9: detected capacity change from 0 to 2048 [ 934.858072][T13691] device veth1_macvtap entered promiscuous mode [ 934.888168][T14201] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 934.916275][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.100491][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.823497][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.880432][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.900508][T13691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.923794][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.099657][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 936.108995][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 936.117372][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 936.126353][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 936.138091][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.149091][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.813842][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.865164][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.933977][T13691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.019742][T13691] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.068237][T13691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.103907][T13691] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.143741][T13691] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.388298][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 937.942004][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 940.355411][T14258] loop9: detected capacity change from 0 to 16 [ 940.898877][T14258] erofs: (device loop9): mounted with root inode @ nid 36. [ 941.282156][T14260] lo speed is unknown, defaulting to 1000 [ 941.465773][T14269] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 941.556169][T14269] erofs: (device loop9): z_erofs_lz4_decompress: failed to decompress -27 in[63, 4033] out[1851] [ 941.570070][T14269] erofs: (device loop9): z_erofs_readpage: failed to read, err [-117] [ 942.888233][T14268] overlayfs: failed to clone upperpath [ 943.325475][T11701] Bluetooth: hci5: command 0x0409 tx timeout [ 944.714983][T14260] chnl_net:caif_netlink_parms(): no params data found [ 945.747822][ T9798] Bluetooth: hci5: command 0x041b tx timeout [ 946.136612][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2329'. [ 946.973534][T14260] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.982893][T14260] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.656370][T14260] device bridge_slave_0 entered promiscuous mode [ 947.730645][T14260] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.784919][ T4252] Bluetooth: hci5: command 0x040f tx timeout [ 947.845984][T14260] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.884088][T14260] device bridge_slave_1 entered promiscuous mode [ 947.984033][T14333] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 948.017778][ T4182] Bluetooth: hci4: link tx timeout [ 948.023519][ T4182] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 948.031350][ T4182] Bluetooth: hci4: link tx timeout [ 948.037341][ T4182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 948.296868][T14349] Cannot find add_set index 0 as target [ 949.172292][T14333] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 949.836963][T14355] loop6: detected capacity change from 0 to 64 [ 949.872751][ T1110] Bluetooth: hci5: command 0x0419 tx timeout [ 949.928035][T14260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.993506][T14260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.108580][T14362] minix_free_block (loop6:1): bit already cleared [ 950.116000][T14362] minix_free_block (loop6:4): bit already cleared [ 950.122622][T14362] minix_free_block (loop6:3): bit already cleared [ 950.129127][T14362] minix_free_block (loop6:2): bit already cleared [ 950.135683][T14362] minix_free_block (loop6:1): bit already cleared [ 952.818314][T14260] team0: Port device team_slave_0 added [ 953.819166][T14390] bridge0: port 3(syz_tun) entered disabled state [ 953.835955][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.844906][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.577692][T14260] team0: Port device team_slave_1 added [ 957.097055][T14260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.923295][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.974110][T14426] loop9: detected capacity change from 0 to 64 [ 958.012686][T14260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.414324][T14260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.421512][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.552589][T14260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.809311][T14260] device hsr_slave_0 entered promiscuous mode [ 961.886097][T14260] device hsr_slave_1 entered promiscuous mode [ 962.003735][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 962.246015][T14260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.272468][T10173] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 962.420210][T14260] Cannot create hsr debugfs directory [ 962.533018][T10173] usb 7-1: device descriptor read/64, error -71 [ 962.543210][T14457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2364'. [ 962.802482][T10173] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 962.975664][T11195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.022462][T10173] usb 7-1: device descriptor read/64, error -71 [ 963.143028][T10173] usb usb7-port1: attempt power cycle [ 963.584637][T11195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.612235][T10173] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 963.733046][T14474] delete_channel: no stack [ 963.748644][T14474] delete_channel: no stack [ 963.752406][T10173] usb 7-1: device descriptor read/8, error -71 [ 963.807352][T11195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.022476][T10173] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 964.162675][T10173] usb 7-1: device descriptor read/8, error -71 [ 964.333846][T10173] usb usb7-port1: unable to enumerate USB device [ 964.744821][T11195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.213082][T14505] netlink: 'syz.5.2374': attribute type 10 has an invalid length. [ 967.256700][T14505] netlink: 210880 bytes leftover after parsing attributes in process `syz.5.2374'. [ 968.952981][T14529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 969.825173][T14525] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 971.575500][T11195] device hsr_slave_0 left promiscuous mode [ 972.504761][T11195] device hsr_slave_1 left promiscuous mode [ 972.566583][T14563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.631501][T11195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.671613][T11195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.813008][T11195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.955076][T11195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.077647][T11195] device bridge_slave_1 left promiscuous mode [ 973.171838][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.319503][T11195] device bridge_slave_0 left promiscuous mode [ 973.385872][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.488036][T11195] device veth1_macvtap left promiscuous mode [ 973.720940][T11195] device veth0_macvtap left promiscuous mode [ 973.762312][T11195] device veth1_vlan left promiscuous mode [ 973.768181][T11195] device veth0_vlan left promiscuous mode [ 976.711677][T11195] team0 (unregistering): Port device team_slave_1 removed [ 976.748716][T11195] team0 (unregistering): Port device team_slave_0 removed [ 976.779658][T11195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.812645][T11195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.019998][T11195] bond0 (unregistering): Released all slaves [ 977.125810][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2388'. [ 977.274699][T14581] bridge0: port 3(syz_tun) entered disabled state [ 977.333514][T14590] loop6: detected capacity change from 0 to 1024 [ 977.494229][T14581] device syz_tun left promiscuous mode [ 977.510085][T14581] bridge0: port 3(syz_tun) entered disabled state [ 977.525006][T14590] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 978.588634][T14590] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,nodiscard,norecovery,noquota,init_itable=0x0000000000000001,grpid,jqfmt=vfsold,barrier=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 979.711134][T14260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 979.762578][T14260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 979.782108][T14260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 980.818310][T14615] loop6: detected capacity change from 0 to 16 [ 982.392452][T14615] erofs: (device loop6): mounted with root inode @ nid 36. [ 982.506691][T14260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 985.143013][T14260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.220665][T14260] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.240729][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 985.240765][ T26] audit: type=1326 audit(1748294848.008:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 985.285829][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 985.431426][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 985.747045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 985.788115][ T26] audit: type=1326 audit(1748294848.068:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 985.942647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 985.951552][ T26] audit: type=1326 audit(1748294848.088:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 986.016914][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.024096][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.077499][ T26] audit: type=1326 audit(1748294848.098:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 986.077542][ T26] audit: type=1326 audit(1748294848.108:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 986.077576][ T26] audit: type=1326 audit(1748294848.108:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 986.077611][ T26] audit: type=1326 audit(1748294848.108:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 986.077646][ T26] audit: type=1326 audit(1748294848.128:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 986.077680][ T26] audit: type=1326 audit(1748294848.138:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 986.077713][ T26] audit: type=1326 audit(1748294848.148:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81def1969 code=0x7ffc0000 [ 986.123775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 986.124550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 986.125106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 986.125567][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.125688][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.126178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 986.165194][T14648] program syz.9.2407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.167856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 986.191520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 986.212370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 986.213360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 986.236942][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 986.237715][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 986.259183][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 986.814463][T14659] overlayfs: failed to clone upperpath [ 987.703099][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 987.737161][T14260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 987.776616][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 987.822095][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 987.839083][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 988.431777][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 988.473181][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 988.498011][T14260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.662974][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 988.692057][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 988.747747][T14688] xt_TCPMSS: Only works on TCP SYN packets [ 989.362891][T14260] device veth0_vlan entered promiscuous mode [ 989.424395][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 989.443372][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.483804][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 989.503126][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.534663][T14260] device veth1_vlan entered promiscuous mode [ 989.710724][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 989.852254][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.962256][T14260] device veth0_macvtap entered promiscuous mode [ 990.070269][T14260] device veth1_macvtap entered promiscuous mode [ 990.473750][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 990.512463][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 990.557886][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.599272][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.640038][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.724639][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.864159][T14260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.957228][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 991.872871][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 991.984583][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.036165][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.095602][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.172233][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.273891][T14260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.317121][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 992.373192][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 992.426509][T14260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.457180][T14260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.496854][T14260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.552245][T14260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.773205][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.638045][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.690200][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.841615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 994.034365][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.789985][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2421'. [ 995.490108][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.672806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1002.462576][T14807] loop1: detected capacity change from 0 to 256 [ 1002.531450][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 1002.531464][ T26] audit: type=1326 audit(1748294865.298:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1002.683245][ T26] audit: type=1326 audit(1748294865.338:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1002.799663][ T26] audit: type=1326 audit(1748294865.348:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1002.846520][ T26] audit: type=1326 audit(1748294865.348:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1002.868921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.161758][T14824] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2437'. [ 1004.196672][ T26] audit: type=1326 audit(1748294865.348:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1004.219984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.123876][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2437'. [ 1005.689639][ T26] audit: type=1326 audit(1748294865.348:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1006.111952][ T26] audit: type=1326 audit(1748294865.398:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1006.335740][ T1110] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1006.422688][ T26] audit: type=1326 audit(1748294865.398:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1006.541561][T14843] loop1: detected capacity change from 0 to 16 [ 1006.632444][ T1110] usb 10-1: device descriptor read/64, error -71 [ 1006.719523][ T26] audit: type=1326 audit(1748294865.398:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1006.920905][ T26] audit: type=1326 audit(1748294865.398:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df01dc969 code=0x7ffc0000 [ 1007.031389][ T1110] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1007.761344][T14843] erofs: (device loop1): mounted with root inode @ nid 36. [ 1010.166495][T14865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1010.846118][T14878] loop6: detected capacity change from 0 to 512 [ 1011.531642][T14878] EXT4-fs (loop6): 1 orphan inode deleted [ 1011.568296][T14878] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1011.722787][T14878] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.318160][T14933] loop1: detected capacity change from 0 to 40427 [ 1014.558100][T14933] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1014.566441][T14933] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1014.578232][T14933] F2FS-fs (loop1): invalid crc value [ 1014.631348][T14933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1014.684422][T14933] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1014.691624][T14933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1017.155221][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1017.155237][ T26] audit: type=1326 audit(1748294879.928:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1017.412502][ T26] audit: type=1326 audit(1748294879.958:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1017.537786][ T26] audit: type=1326 audit(1748294879.988:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1017.651768][ T26] audit: type=1326 audit(1748294879.988:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1017.729684][ T26] audit: type=1326 audit(1748294879.988:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1017.820650][ T26] audit: type=1326 audit(1748294879.998:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1017.918191][ T26] audit: type=1326 audit(1748294879.998:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1018.029464][ T26] audit: type=1326 audit(1748294879.998:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1018.130595][ T26] audit: type=1326 audit(1748294880.008:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1018.230759][ T26] audit: type=1326 audit(1748294880.008:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.8.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1018.488229][T14982] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1018.517792][T14982] cramfs: wrong magic [ 1019.369458][T14987] loop6: detected capacity change from 0 to 8192 [ 1019.685152][T14986] Cannot find add_set index 0 as target [ 1020.924872][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2475'. [ 1021.061629][T15017] xt_l2tp: wrong L2TP version: 0 [ 1028.208463][T15086] loop1: detected capacity change from 0 to 8192 [ 1028.868918][T15086] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1029.003111][T15086] REISERFS (device loop1): using ordered data mode [ 1029.009688][T15086] reiserfs: using flush barriers [ 1029.070129][T15086] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1029.223235][T15086] REISERFS (device loop1): checking transaction log (loop1) [ 1029.284335][T15086] REISERFS (device loop1): Using r5 hash to sort names [ 1029.417783][T15086] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1030.438290][T15086] overlayfs: upper fs needs to support d_type. [ 1030.512233][T15086] overlayfs: upper fs does not support tmpfile. [ 1030.655939][T15086] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1030.874397][T15086] overlayfs: failed to set xattr on upper [ 1031.124100][T15086] overlayfs: ...falling back to index=off,metacopy=off. [ 1032.273818][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2504'. [ 1032.373781][T15132] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2504'. [ 1033.813987][T15154] loop1: detected capacity change from 0 to 512 [ 1033.929313][T15154] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2501: Invalid inode bitmap blk 4 in block_group 0 [ 1034.025122][T15154] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,nouid32,,errors=continue. Quota mode: none. [ 1036.921601][T15178] loop6: detected capacity change from 0 to 8192 [ 1037.085736][T15178] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 1037.138453][T15178] REISERFS (device loop6): using ordered data mode [ 1037.178380][T15178] reiserfs: using flush barriers [ 1037.203000][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2516'. [ 1037.218312][T15178] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1037.372529][T15178] REISERFS (device loop6): checking transaction log (loop6) [ 1037.437174][T15178] REISERFS (device loop6): Using r5 hash to sort names [ 1037.491093][T15178] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1037.625663][T15178] overlayfs: upper fs needs to support d_type. [ 1037.642322][T15178] overlayfs: upper fs does not support tmpfile. [ 1037.662999][T15178] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1037.711256][T15178] overlayfs: failed to set xattr on upper [ 1037.982256][T15178] overlayfs: ...falling back to index=off,metacopy=off. [ 1038.713836][T15178] overlayfs: failed to resolve './file0': -2 [ 1042.638252][T15237] overlayfs: failed to clone upperpath [ 1043.876839][T15258] loop1: detected capacity change from 0 to 64 [ 1046.004876][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2537'. [ 1051.929674][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2552'. [ 1053.101822][T15368] device team_slave_0 entered promiscuous mode [ 1053.109017][T15368] device team_slave_1 entered promiscuous mode [ 1053.115327][T15368] device geneve0 entered promiscuous mode [ 1053.183197][T15368] device macsec1 entered promiscuous mode [ 1053.188983][T15368] device team0 entered promiscuous mode [ 1053.670723][T15368] device team0 left promiscuous mode [ 1053.748749][T15368] device team_slave_0 left promiscuous mode [ 1053.754898][T15368] device team_slave_1 left promiscuous mode [ 1053.760876][T15368] device geneve0 left promiscuous mode [ 1054.165926][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.846013][T15387] loop6: detected capacity change from 0 to 64 [ 1055.492223][T15392] Cannot find add_set index 0 as target [ 1056.942712][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2565'. [ 1057.156487][T15407] ax25_connect(): syz.1.2570 uses autobind, please contact jreuter@yaina.de [ 1060.975422][T15454] loop6: detected capacity change from 0 to 256 [ 1061.393793][T15465] loop9: detected capacity change from 0 to 128 [ 1064.054575][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 1064.054595][ T26] audit: type=1800 audit(1748295438.235:476): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2579" name="bus" dev="loop6" ino=1048659 res=0 errno=0 [ 1064.189937][T15465] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1064.212706][T15465] hpfs: hpfs_map_sector(): read error [ 1064.213906][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2595'. [ 1064.283222][T15479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2595'. [ 1065.048664][T15486] wireguard: wg1: Could not create IPv4 socket [ 1067.789065][T15517] loop9: detected capacity change from 0 to 40427 [ 1067.868294][T15517] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1067.876115][T15517] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1067.895231][T15517] F2FS-fs (loop9): invalid crc value [ 1069.281032][T15517] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1069.342837][T15517] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1069.349982][T15517] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1070.876141][T15539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2603'. [ 1070.929262][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2603'. [ 1073.938563][T15574] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1078.506731][T15626] overlayfs: failed to clone upperpath [ 1080.536953][T15636] loop1: detected capacity change from 0 to 2048 [ 1081.369877][T15636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1081.514636][T15656] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1082.322817][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2632'. [ 1082.335106][T15669] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2632'. [ 1083.768044][T15694] loop9: detected capacity change from 0 to 4096 [ 1084.107973][T15694] ntfs: volume version 3.1. [ 1091.684759][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2647'. [ 1091.856749][T15749] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2645'. [ 1091.905299][T15749] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2645'. [ 1091.962746][T15754] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1096.672508][ T26] audit: type=1326 audit(1748295471.215:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1096.841405][ T26] audit: type=1326 audit(1748295471.225:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1097.371088][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1097.561277][ T26] audit: type=1326 audit(1748295471.225:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1097.581056][T15804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2664'. [ 1097.585394][ T26] audit: type=1326 audit(1748295471.225:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1097.659637][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2664'. [ 1097.702443][ T26] audit: type=1326 audit(1748295471.235:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1097.776718][ T26] audit: type=1326 audit(1748295471.235:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1097.930162][ T26] audit: type=1326 audit(1748295471.235:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1098.010646][ T26] audit: type=1326 audit(1748295471.235:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1098.052256][ T26] audit: type=1326 audit(1748295471.235:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1098.952225][ T26] audit: type=1326 audit(1748295471.245:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.8.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1fe0c969 code=0x7ffc0000 [ 1100.273635][T15834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1103.880930][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2677'. [ 1103.896055][T15860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2677'. [ 1104.198210][T15862] loop6: detected capacity change from 0 to 40427 [ 1105.465684][T15862] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1105.515873][T15862] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1106.838404][T15891] attempt to access beyond end of device [ 1106.838404][T15891] loop6: rw=2049, want=45104, limit=40427 [ 1108.261266][ T9716] attempt to access beyond end of device [ 1108.261266][ T9716] loop6: rw=2049, want=45112, limit=40427 [ 1111.670321][T15931] loop9: detected capacity change from 0 to 16 [ 1113.638422][T15931] erofs: (device loop9): mounted with root inode @ nid 36. [ 1114.054269][T15940] xt_NFQUEUE: number of total queues is 0 [ 1114.228838][T15944] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1115.606224][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.686023][T15954] capability: warning: `syz.9.2696' uses 32-bit capabilities (legacy support in use) [ 1119.356047][T15995] loop1: detected capacity change from 0 to 512 [ 1120.158516][T15995] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2701: Invalid inode bitmap blk 4 in block_group 0 [ 1120.262554][T15995] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,nouid32,,errors=continue. Quota mode: none. [ 1123.949259][T16039] loop6: detected capacity change from 0 to 64 [ 1129.276393][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1129.276413][ T26] audit: type=1326 audit(1748295503.345:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1129.431987][ T26] audit: type=1326 audit(1748295503.345:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1130.202293][T16083] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2719'. [ 1130.882306][ T26] audit: type=1326 audit(1748295503.355:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1132.553061][ T26] audit: type=1326 audit(1748295503.355:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1132.575428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1133.952125][ T26] audit: type=1326 audit(1748295503.355:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1134.125110][ T26] audit: type=1326 audit(1748295503.365:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1134.377029][ T26] audit: type=1326 audit(1748295503.365:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1136.067749][ T26] audit: type=1326 audit(1748295503.365:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1136.140915][T16120] loop6: detected capacity change from 0 to 1024 [ 1136.343027][ T26] audit: type=1326 audit(1748295503.365:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1136.386141][T16120] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1136.515365][ T26] audit: type=1326 audit(1748295503.365:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1137.181887][T16134] netlink: 292 bytes leftover after parsing attributes in process `syz.8.2731'. [ 1137.412101][ T26] audit: type=1326 audit(1748295503.365:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1137.473818][T16120] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 1138.392250][ T26] audit: type=1326 audit(1748295503.375:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1139.260587][ T26] audit: type=1326 audit(1748295503.375:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1139.607626][ T26] audit: type=1326 audit(1748295503.375:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1140.298280][ T26] audit: type=1326 audit(1748295503.375:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1140.682824][ T26] audit: type=1326 audit(1748295503.375:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1140.844751][ T26] audit: type=1326 audit(1748295503.385:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.9.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd006f969 code=0x7ffc0000 [ 1149.151504][T16212] lo speed is unknown, defaulting to 1000 [ 1151.036133][T16232] loop9: detected capacity change from 0 to 40427 [ 1151.046977][ T4216] Bluetooth: hci0: command 0x0409 tx timeout [ 1151.057486][T16212] chnl_net:caif_netlink_parms(): no params data found [ 1151.107947][T16232] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x1ffff [ 1151.120033][T16232] F2FS-fs (loop9): invalid crc value [ 1151.183047][T16232] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1151.294650][T16232] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1152.790088][T16256] attempt to access beyond end of device [ 1152.790088][T16256] loop9: rw=2049, want=53504, limit=40427 [ 1152.828051][T10173] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1153.342179][T10173] Bluetooth: hci4: Injecting HCI hardware error event [ 1153.363094][ T4174] Bluetooth: hci4: hardware error 0x00 [ 1153.398963][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 1154.368928][T16263] lo speed is unknown, defaulting to 1000 [ 1154.384017][T16212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.425193][T16212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.444493][T16212] device bridge_slave_0 entered promiscuous mode [ 1154.463530][T16212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.547889][T16212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.565555][T16212] device bridge_slave_1 entered promiscuous mode [ 1154.721825][T16212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.874746][T16287] bridge0: port 1(gretap0) entered blocking state [ 1154.881546][T16287] bridge0: port 1(gretap0) entered disabled state [ 1154.903131][T16287] device gretap0 entered promiscuous mode [ 1154.917207][T16287] bridge0: port 1(gretap0) entered blocking state [ 1154.923743][T16287] bridge0: port 1(gretap0) entered forwarding state [ 1155.445813][T16212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.551231][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 1155.639810][T16290] loop9: detected capacity change from 0 to 2048 [ 1155.714251][T16212] team0: Port device team_slave_0 added [ 1155.736576][T16212] team0: Port device team_slave_1 added [ 1156.694377][ T4217] Bluetooth: hci5: command 0x0409 tx timeout [ 1156.733580][T16212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.740846][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.772571][T16290] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none. [ 1158.909943][ T4213] Bluetooth: hci0: command 0x0419 tx timeout [ 1158.916541][T16212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.959788][ T4268] Bluetooth: hci5: command 0x041b tx timeout [ 1159.174055][T16212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.181169][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.109229][T16212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.128535][T16263] chnl_net:caif_netlink_parms(): no params data found [ 1161.393258][T16078] Bluetooth: hci5: command 0x040f tx timeout [ 1161.639277][T16336] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1161.743065][T16212] device hsr_slave_0 entered promiscuous mode [ 1161.803147][T16212] device hsr_slave_1 entered promiscuous mode [ 1161.880036][T16212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1161.931913][T16212] Cannot create hsr debugfs directory [ 1163.036851][T16355] loop6: detected capacity change from 0 to 128 [ 1163.054996][T16263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.099207][T16263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.269721][T16263] device bridge_slave_0 entered promiscuous mode [ 1164.504235][T16263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.511347][T16263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.523189][ T4216] Bluetooth: hci5: command 0x0419 tx timeout [ 1164.561890][T16263] device bridge_slave_1 entered promiscuous mode [ 1167.035135][T16263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.111139][T16263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.718619][T16263] team0: Port device team_slave_0 added [ 1169.869047][T16263] team0: Port device team_slave_1 added [ 1171.253947][ T26] audit: type=1326 audit(1748295546.025:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16418 comm="syz.9.2787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dd006f969 code=0x0 [ 1172.528365][T16263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.543500][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.904343][T16263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.930984][T16263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.938291][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.127969][T16263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.283366][T16469] loop6: detected capacity change from 0 to 512 [ 1174.127554][T16469] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1174.161461][T16263] device hsr_slave_0 entered promiscuous mode [ 1174.195560][T16469] EXT4-fs (loop6): 1 truncate cleaned up [ 1174.201259][T16469] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,jqfmt=vfsold,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1174.221274][T16263] device hsr_slave_1 entered promiscuous mode [ 1174.242477][T16263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1174.281257][T16263] Cannot create hsr debugfs directory [ 1174.365034][T16212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1175.513665][T16488] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2797'. [ 1175.524942][T16487] loop9: detected capacity change from 0 to 64 [ 1175.553629][T16212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1175.889669][T16212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1176.309916][T16212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1177.045830][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.204426][T16503] loop9: detected capacity change from 0 to 64 [ 1177.215137][ T4268] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1177.224319][ T4268] Bluetooth: hci3: Injecting HCI hardware error event [ 1177.234571][ T4174] Bluetooth: hci3: hardware error 0x00 [ 1177.293986][T16503] hfs: unable to change codepage [ 1177.300469][T16503] hfs: unable to parse mount options [ 1179.420804][T16212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.888475][T16212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.016543][T16536] loop9: detected capacity change from 0 to 164 [ 1182.252623][ T26] audit: type=1400 audit(1748295556.765:512): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=16542 comm="syz.6.2808" [ 1182.292167][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1182.300151][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1182.349744][T16532] batman_adv: Cannot find parent device [ 1182.356756][T16532] batman_adv: batadv0: Adding interface: gretap1 [ 1182.363312][T16532] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.388792][T16532] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1182.605762][T16561] loop9: detected capacity change from 0 to 64 [ 1183.296270][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1183.391874][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1183.465962][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.473128][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.569694][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2811'. [ 1183.612672][T16565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.667971][T16565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.679801][T16573] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2812'. [ 1183.693262][T16565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.700730][T16565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.854482][T16565] batman_adv: batadv0: Removing interface: gretap1 [ 1184.470611][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1184.541687][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1184.669260][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1184.768377][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.775597][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.883675][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1184.954581][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1185.025368][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1185.171481][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1185.296129][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1185.459961][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1185.633257][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1185.732571][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1185.813643][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1185.920259][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1186.004937][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1186.178373][T16597] loop9: detected capacity change from 0 to 1024 [ 1187.216813][T16597] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1187.263525][T16597] EXT4-fs (loop9): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 1187.486958][T16212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1188.904720][T16624] loop9: detected capacity change from 0 to 128 [ 1190.641065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1190.684221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1190.743140][T16212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.893772][T16263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1190.923393][T16263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1191.005442][T16263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1191.053353][T16263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1191.443275][T16263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.563161][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1191.579798][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1191.628435][T16263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.702321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1191.721789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1191.752958][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.760112][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.824789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1191.848705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1191.924064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1191.962710][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.970051][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.001945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1192.025365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1192.050854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1192.104604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1192.165064][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1192.197970][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1192.237918][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1192.267129][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1192.298185][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1192.343737][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1192.359261][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1192.388799][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1192.417522][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1192.445177][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1192.463133][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1192.492763][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1192.516595][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1192.548155][T16212] device veth0_vlan entered promiscuous mode [ 1192.575355][T16263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1192.623723][T16212] device veth1_vlan entered promiscuous mode [ 1192.691877][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1192.705967][T16674] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2825'. [ 1192.741963][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1192.783857][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1192.844908][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1193.114559][T16212] device veth0_macvtap entered promiscuous mode [ 1193.681076][T16212] device veth1_macvtap entered promiscuous mode [ 1193.811913][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.847144][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.902065][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.942044][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.070696][T16212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.081010][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.091623][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.112408][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.131452][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.358922][T16212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.411718][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1196.597623][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1196.763305][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1196.779920][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1197.364966][T16212] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.416453][T16212] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.436696][T16212] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.494526][T16212] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.554481][T16263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.767931][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1197.876282][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1198.290239][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1198.820858][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1198.905309][T16751] overlayfs: failed to resolve './file0': -2 [ 1199.045293][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2842'. [ 1199.166252][T16263] device veth0_vlan entered promiscuous mode [ 1199.242925][T16263] device veth1_vlan entered promiscuous mode [ 1199.411971][T16263] device veth0_macvtap entered promiscuous mode [ 1199.476201][T16263] device veth1_macvtap entered promiscuous mode [ 1199.607149][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1199.636719][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1199.698688][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1199.897938][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1201.059997][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1201.327409][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1202.068815][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1202.957141][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.002723][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.042160][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.052980][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.072335][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.136311][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.201019][T16263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.959282][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.005719][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.070984][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.091581][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.108773][T16263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.126210][T16263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.205175][T16263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.292381][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1204.304091][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1204.328154][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1204.360126][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1204.399942][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1204.445811][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1204.486620][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1204.614579][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.641655][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.652026][T16263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.691779][T16263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.754368][T16263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.773543][T16263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.928671][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1205.853969][T12431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.911729][T12431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.027698][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1206.423431][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.530396][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.810887][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1206.853543][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.943248][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.153401][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1209.843311][T16863] loop6: detected capacity change from 0 to 128 [ 1210.575426][T16863] zonefs (loop6) ERROR: Not a zoned block device [ 1210.969798][T16862] loop6: detected capacity change from 0 to 32768 [ 1211.139725][T16851] lo speed is unknown, defaulting to 1000 [ 1211.146639][T16862] XFS (loop6): Mounting V5 Filesystem [ 1211.213530][ T4268] Bluetooth: hci1: command 0x0409 tx timeout [ 1211.274268][ T4466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.375346][T16862] XFS (loop6): Ending clean mount [ 1211.398122][T16862] XFS (loop6): Quotacheck needed: Please wait. [ 1211.459164][T12431] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 1211.545807][T12431] XFS (loop6): Unmount and run xfs_repair [ 1211.599710][T12431] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1211.672866][ T4466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.686623][T12431] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 1211.752998][T12431] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 1211.851666][T12431] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 1211.912309][T12431] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 1211.947305][T12431] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1212.002220][T16897] Cannot find add_set index 0 as target [ 1212.419624][T12431] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1212.689635][ T4466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.872211][T12431] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1212.924497][T12431] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1212.972413][T12431] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x1b9/0x350" at daddr 0x3 len 1 error 74 [ 1213.042831][T16862] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1213.301800][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 1213.416024][ T9716] XFS (loop6): Unmounting Filesystem [ 1213.651080][T16900] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1213.889689][ T4466] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.290252][T16912] Cannot find add_set index 0 as target [ 1215.229796][T16851] chnl_net:caif_netlink_parms(): no params data found [ 1215.446095][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 1217.834158][T16851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.841595][T16851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.559789][ T8906] Bluetooth: hci1: command 0x0419 tx timeout [ 1218.589255][T16851] device bridge_slave_0 entered promiscuous mode [ 1218.599623][T16851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.613789][T16851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.651573][T16851] device bridge_slave_1 entered promiscuous mode [ 1218.875727][T16967] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1220.364986][T16973] netlink: 'syz.6.2869': attribute type 1 has an invalid length. [ 1220.524992][T16977] device bond1 entered promiscuous mode [ 1220.531967][T16977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1220.597866][T16979] device ip6gretap1 entered promiscuous mode [ 1220.613244][T16979] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1220.624499][T16996] Cannot find add_set index 0 as target [ 1220.632165][T16933] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1220.691125][T16851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.772464][ T9] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1220.794782][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1221.003903][T16851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.169441][T16851] team0: Port device team_slave_0 added [ 1221.199743][T16851] team0: Port device team_slave_1 added [ 1221.328772][T16851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.351536][T16851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.441246][T16851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.502763][T16851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.520854][T16851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.876682][T16851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.461388][T17041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1224.515037][T17047] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1224.841883][T16851] device hsr_slave_0 entered promiscuous mode [ 1224.876725][T16851] device hsr_slave_1 entered promiscuous mode [ 1225.891632][T16851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1225.965103][T16851] Cannot create hsr debugfs directory [ 1227.646355][T17087] tipc: Enabling of bearer rejected, failed to enable media [ 1228.334516][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1228.507082][T17092] loop9: detected capacity change from 0 to 64 [ 1229.299815][ T4466] device hsr_slave_0 left promiscuous mode [ 1229.965984][ T4466] device hsr_slave_1 left promiscuous mode [ 1229.974610][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.996116][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.045221][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.090095][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.278307][ T4466] device bridge_slave_1 left promiscuous mode [ 1231.050437][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.075159][ T4466] device bridge_slave_0 left promiscuous mode [ 1231.085113][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.303252][ T4466] device veth1_macvtap left promiscuous mode [ 1231.312312][ T4466] device veth0_macvtap left promiscuous mode [ 1231.332109][ T4466] device veth1_vlan left promiscuous mode [ 1231.338005][ T4466] device veth0_vlan left promiscuous mode [ 1232.916313][T17122] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 1237.863381][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 1238.645348][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.718993][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 1238.809992][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.952670][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.264625][ T4466] bond0 (unregistering): Released all slaves [ 1240.370931][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2908'. [ 1240.394570][T17185] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1243.030834][T17236] loop6: detected capacity change from 0 to 512 [ 1243.844527][T17236] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1243.943842][T17236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 1244.645972][T17236] System zones: 1-12 [ 1244.701947][T17236] EXT4-fs (loop6): 1 truncate cleaned up [ 1244.942084][T17236] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1246.975858][T17256] ax25_connect(): syz.0.2945 uses autobind, please contact jreuter@yaina.de [ 1247.041829][T17262] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1248.955690][T17298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1248.966853][T17298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1248.974584][T17298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1248.984900][T17298] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1249.030706][T16851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1249.200403][T16851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1249.478007][T17311] "syz.0.2952" (17311) uses obsolete ecb(arc4) skcipher [ 1250.354521][T16851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1250.381034][T16851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1251.731830][T16851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.966791][T15766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1252.146695][T15766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1252.613235][T16851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.123628][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1253.175453][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1253.405722][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.412916][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.502581][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1253.540532][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1253.594606][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.602014][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.795358][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1253.844156][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1254.219667][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1254.571634][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1254.915431][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1255.073047][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1257.089456][T10398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1257.185408][T10398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1257.203968][T10398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1257.214881][T10398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1258.707837][T16851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1258.993830][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1259.022708][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1262.322264][T17405] loop6: detected capacity change from 0 to 1024 [ 1262.382179][T17405] EXT4-fs (loop6): inline encryption not supported [ 1262.388985][T17405] EXT4-fs (loop6): Ignoring removed bh option [ 1262.463599][T17405] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1263.263924][T17420] bridge0: port 3(vlan2) entered blocking state [ 1263.270315][T17420] bridge0: port 3(vlan2) entered disabled state [ 1263.277831][T17420] device vlan2 entered promiscuous mode [ 1263.283580][T17420] device vlan1 entered promiscuous mode [ 1263.289858][T17420] bridge0: port 3(vlan2) entered blocking state [ 1263.296178][T17420] bridge0: port 3(vlan2) entered forwarding state [ 1263.334719][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2976'. [ 1263.390085][T17419] 8021q: adding VLAN 0 to HW filter on device team1 [ 1263.494356][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1263.526792][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1263.588208][T16851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.638144][T17454] loop6: detected capacity change from 0 to 2048 [ 1267.056138][T17454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1268.536636][ T26] audit: type=1800 audit(1748295899.309:513): pid=17475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2981" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 1269.141611][T17487] x_tables: unsorted underflow at hook 1 [ 1272.561172][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 1272.600397][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 1273.771133][T17503] 8021q: adding VLAN 0 to HW filter on device team1 [ 1273.801872][T17492] lo speed is unknown, defaulting to 1000 [ 1275.811522][T17523] befs: (nullb0): No write support. Marking filesystem read-only [ 1275.864940][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 1275.891014][T17523] befs: (nullb0): invalid magic header [ 1277.268576][T17542] loop6: detected capacity change from 0 to 64 [ 1277.924036][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 1277.963860][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 1278.754096][T17492] chnl_net:caif_netlink_parms(): no params data found [ 1280.004339][T15790] Bluetooth: hci0: command 0x0419 tx timeout [ 1281.978956][T17492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.004920][T17492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.062268][T17492] device bridge_slave_0 entered promiscuous mode [ 1282.116326][T17492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.183008][T17492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.228488][T17492] device bridge_slave_1 entered promiscuous mode [ 1283.349141][T17492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.514363][T17492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.740986][T17492] team0: Port device team_slave_0 added [ 1284.804747][T17492] team0: Port device team_slave_1 added [ 1285.017682][T17492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.095242][T17632] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000 [ 1285.157597][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.721131][T17492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.003278][T17492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.019858][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.113816][T17492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.377519][T10807] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1287.722742][ T4465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1288.814637][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3016'. [ 1290.229203][T17651] 8021q: adding VLAN 0 to HW filter on device team1 [ 1291.062872][T17678] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1291.475597][T17492] device hsr_slave_0 entered promiscuous mode [ 1291.492587][T17492] device hsr_slave_1 entered promiscuous mode [ 1291.517480][T17492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.819833][T17492] Cannot create hsr debugfs directory [ 1291.820005][T17678] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1291.822437][T17692] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1292.721442][T17704] loop9: detected capacity change from 0 to 164 [ 1294.319840][ T4466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.380612][ T4466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.530990][T17726] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1297.595319][ T4466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.285386][ T4466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.927103][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.097455][T17770] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3042'. [ 1301.121262][T17740] nvme_fabrics: missing parameter 'transport=%s' [ 1301.128982][T17740] nvme_fabrics: missing parameter 'nqn=%s' [ 1301.283440][T17779] loop6: detected capacity change from 0 to 256 [ 1301.523079][T17492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1301.583928][T17492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1301.830685][T17492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1301.875353][T17492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1303.465195][T17492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.573107][T17803] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1303.626309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1303.663164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1303.763953][T17492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.836683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1303.868759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1303.907051][T17808] Unsupported ieee802154 address type: 0 [ 1304.021218][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.028464][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.272100][T17812] mkiss: ax0: crc mode is auto. [ 1304.446766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1304.466886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1304.516348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1304.594867][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.602228][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.709542][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1305.026289][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1305.978381][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1306.039773][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1307.125236][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1307.140306][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1307.174312][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1307.192893][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1307.239033][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1307.281845][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1307.319589][T17756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1307.500258][T17841] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 1307.505271][T17492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1307.631767][T17847] loop9: detected capacity change from 0 to 128 [ 1307.842666][T17847] FAT-fs (loop9): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 1308.633156][T17847] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 1308.641803][T17847] FAT-fs (loop9): Filesystem has been set read-only [ 1309.367239][T17861] overlayfs: failed to resolve './file0': -2 [ 1310.461206][T17874] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1310.977350][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1311.002285][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1311.121059][T17492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.345743][ T4466] device hsr_slave_0 left promiscuous mode [ 1312.366145][ T4466] device hsr_slave_1 left promiscuous mode [ 1312.541027][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.549541][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.557976][ T4466] device bridge_slave_1 left promiscuous mode [ 1312.564769][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.574025][ T4466] device bridge_slave_0 left promiscuous mode [ 1312.580923][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.622257][ T4466] device hsr_slave_0 left promiscuous mode [ 1313.484939][ T4466] device hsr_slave_1 left promiscuous mode [ 1313.562303][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1313.569947][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.616439][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1313.652137][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.743432][ T4466] device bridge_slave_1 left promiscuous mode [ 1313.749902][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.958862][ T4466] device bridge_slave_0 left promiscuous mode [ 1313.975062][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.991808][ T4466] device veth1_macvtap left promiscuous mode [ 1313.998046][ T4466] device veth0_macvtap left promiscuous mode [ 1314.005029][ T4466] device veth1_vlan left promiscuous mode [ 1314.053228][ T4466] device veth0_vlan left promiscuous mode [ 1317.568618][T17928] vivid-000: disconnect [ 1318.910320][T17925] vivid-000: reconnect [ 1319.009219][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 1319.056870][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 1319.092282][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1319.121677][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.468676][ T4466] bond0 (unregistering): Released all slaves [ 1321.543484][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 1321.710651][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 1321.908964][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.015928][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.219914][T17946] No source specified [ 1325.183337][ T4466] bond0 (unregistering): Released all slaves [ 1325.295700][T17910] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1325.317901][T17963] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3084'. [ 1327.005731][T17973] Cannot find del_set index 286 as target [ 1327.519057][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1327.542412][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1327.734575][T17992] loop9: detected capacity change from 0 to 2048 [ 1329.130717][T17992] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none. [ 1330.908646][T18022] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1331.603135][T18026] device wg1 entered promiscuous mode [ 1331.738843][T18010] lo speed is unknown, defaulting to 1000 [ 1331.787344][T18033] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1332.167961][T18041] loop9: detected capacity change from 0 to 4096 [ 1332.567298][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 1332.576000][T18041] ntfs3: loop9: Different NTFS' sector size (2048) and media sector size (512) [ 1334.709473][T15790] Bluetooth: hci0: command 0x041b tx timeout [ 1334.741054][T18010] chnl_net:caif_netlink_parms(): no params data found [ 1336.966109][T15790] Bluetooth: hci0: command 0x040f tx timeout [ 1337.124998][T18010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.142559][T18010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.241037][T18010] device bridge_slave_0 entered promiscuous mode [ 1338.285714][T18010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.303404][T18010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.346868][T18010] device bridge_slave_1 entered promiscuous mode [ 1339.008515][T18116] netlink: 292 bytes leftover after parsing attributes in process `syz.6.3117'. [ 1339.059993][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 1339.814069][T18010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.854717][T18010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.192850][T18010] team0: Port device team_slave_0 added [ 1340.246252][T18010] team0: Port device team_slave_1 added [ 1340.999362][T18138] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.008410][T18138] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.017353][T18138] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.026235][T18138] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.207724][T18010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.233177][T18010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.352338][T18010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.436744][T18144] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1341.487073][T18010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.523573][T18010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1342.071634][T18010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.685630][T18010] device hsr_slave_0 entered promiscuous mode [ 1343.709280][T18010] device hsr_slave_1 entered promiscuous mode [ 1344.999977][T18010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1345.032652][T18010] Cannot create hsr debugfs directory [ 1346.109749][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3128'. [ 1346.280408][T18177] 8021q: adding VLAN 0 to HW filter on device team2 [ 1346.388040][T18200] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1347.583220][T18010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1347.616767][T18010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1347.658545][T18010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1347.696560][T18010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1347.734132][T18227] loop6: detected capacity change from 0 to 164 [ 1348.096717][T18232] netlink: 292 bytes leftover after parsing attributes in process `syz.9.3137'. [ 1349.265545][T18225] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1350.470177][T18010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.539453][T18010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.594362][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1350.635269][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1350.880765][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1350.922411][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1351.356078][T18270] siw: device registration error -23 [ 1353.316578][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.323777][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.569723][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1354.885031][T18285] netlink: 292 bytes leftover after parsing attributes in process `syz.8.3148'. [ 1355.581586][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1355.591356][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1355.600584][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.607829][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.619700][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1355.656377][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1357.279300][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1357.440269][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1357.560272][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1357.597506][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1357.665765][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1357.695984][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1357.726091][T18297] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1357.749790][T18010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1357.803144][T18010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1357.856337][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1357.866191][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1357.885421][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1360.212070][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3156'. [ 1360.221315][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3156'. [ 1361.136348][T18327] Cannot find add_set index 0 as target [ 1361.392752][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.440821][T18331] netlink: 'syz.6.3159': attribute type 1 has an invalid length. [ 1361.448778][T18331] netlink: 'syz.6.3159': attribute type 7 has an invalid length. [ 1361.456698][T18331] netlink: 'syz.6.3159': attribute type 7 has an invalid length. [ 1361.464614][T18331] netlink: 1256 bytes leftover after parsing attributes in process `syz.6.3159'. [ 1362.301748][T18344] Cannot find add_set index 0 as target [ 1364.518670][T18010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.880306][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1364.896849][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1364.920693][T18373] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1364.953786][T18373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1366.521450][ T4466] device hsr_slave_0 left promiscuous mode [ 1366.586001][ T4466] device hsr_slave_1 left promiscuous mode [ 1366.632710][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.666547][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.893291][ T4466] device bridge_slave_1 left promiscuous mode [ 1367.019823][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.253570][ T4466] device bridge_slave_0 left promiscuous mode [ 1367.500385][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.674959][T18417] Cannot find add_set index 0 as target [ 1369.673843][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 1370.278822][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 1370.301570][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.372603][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.669134][ T4466] bond0 (unregistering): Released all slaves [ 1371.181777][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1371.200903][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1371.217204][T18452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1371.224666][T18452] IPv6: NLM_F_CREATE should be set when creating new route [ 1371.232044][T18452] IPv6: NLM_F_CREATE should be set when creating new route [ 1371.283191][T18455] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1371.339734][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1371.376759][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1371.415327][T18010] device veth0_vlan entered promiscuous mode [ 1371.444638][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1371.532967][T10807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1371.589980][T18010] device veth1_vlan entered promiscuous mode [ 1371.739822][T18472] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1371.930215][T18010] device veth0_macvtap entered promiscuous mode [ 1372.034606][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1372.072458][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1373.748429][T18494] loop6: detected capacity change from 0 to 1024 [ 1373.889554][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1374.132524][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1374.263940][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1374.293112][T18010] device veth1_macvtap entered promiscuous mode [ 1374.392798][T18010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.473787][T18010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.534728][T18010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.725978][T18010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.800422][T18010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1375.014373][T18010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.025895][T18010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.036688][T18010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.048274][T18010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.060248][T18010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1375.078970][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1375.094202][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1375.219061][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1375.431842][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1375.446819][T18010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.466211][T18010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.506572][T18010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.552083][T18010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.764253][ T9716] [ 1375.766634][ T9716] ====================================================== [ 1375.773654][ T9716] WARNING: possible circular locking dependency detected [ 1375.780781][ T9716] 5.15.184-syzkaller #0 Not tainted [ 1375.785990][ T9716] ------------------------------------------------------ [ 1375.793013][ T9716] syz-executor/9716 is trying to acquire lock: [ 1375.799177][ T9716] ffff88806707f138 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 1375.809133][ T9716] [ 1375.809133][ T9716] but task is already holding lock: [ 1375.816505][ T9716] ffff88801f943468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 1375.825323][ T9716] [ 1375.825323][ T9716] which lock already depends on the new lock. [ 1375.825323][ T9716] [ 1375.835732][ T9716] [ 1375.835732][ T9716] the existing dependency chain (in reverse order) is: [ 1375.844764][ T9716] [ 1375.844764][ T9716] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 1375.852260][ T9716] __mutex_lock_common+0x1eb/0x2390 [ 1375.857998][ T9716] mutex_lock_killable_nested+0x17/0x20 [ 1375.864088][ T9716] lo_open+0x6a/0x100 [ 1375.868608][ T9716] blkdev_get_whole+0x90/0x390 [ 1375.873906][ T9716] blkdev_get_by_dev+0x2d0/0xa60 [ 1375.879387][ T9716] blkdev_open+0x12d/0x2c0 [ 1375.884347][ T9716] do_dentry_open+0x7ff/0xf80 [ 1375.889660][ T9716] path_openat+0x2682/0x2f30 [ 1375.894780][ T9716] do_filp_open+0x1b3/0x3e0 [ 1375.899823][ T9716] do_sys_openat2+0x142/0x4a0 [ 1375.905118][ T9716] __x64_sys_openat+0x135/0x160 [ 1375.910512][ T9716] do_syscall_64+0x4c/0xa0 [ 1375.915464][ T9716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1375.921912][ T9716] [ 1375.921912][ T9716] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 1375.929742][ T9716] __mutex_lock_common+0x1eb/0x2390 [ 1375.935487][ T9716] mutex_lock_nested+0x17/0x20 [ 1375.940785][ T9716] blkdev_get_by_dev+0x157/0xa60 [ 1375.946262][ T9716] swsusp_check+0x9b/0x2a0 [ 1375.951211][ T9716] software_resume+0xc6/0x3b0 [ 1375.956432][ T9716] resume_store+0xe4/0x130 [ 1375.961385][ T9716] kernfs_fop_write_iter+0x379/0x4c0 [ 1375.967210][ T9716] vfs_write+0x712/0xd00 [ 1375.971998][ T9716] ksys_write+0x14d/0x250 [ 1375.976879][ T9716] do_syscall_64+0x4c/0xa0 [ 1375.981838][ T9716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1375.988274][ T9716] [ 1375.988274][ T9716] -> #5 (system_transition_mutex/1){+.+.}-{3:3}: [ 1375.996817][ T9716] __mutex_lock_common+0x1eb/0x2390 [ 1376.002561][ T9716] mutex_lock_nested+0x17/0x20 [ 1376.007864][ T9716] software_resume+0x7c/0x3b0 [ 1376.013078][ T9716] resume_store+0xe4/0x130 [ 1376.018031][ T9716] kernfs_fop_write_iter+0x379/0x4c0 [ 1376.023953][ T9716] vfs_write+0x712/0xd00 [ 1376.029000][ T9716] ksys_write+0x14d/0x250 [ 1376.033869][ T9716] do_syscall_64+0x4c/0xa0 [ 1376.038859][ T9716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1376.045292][ T9716] [ 1376.045292][ T9716] -> #4 (&of->mutex){+.+.}-{3:3}: [ 1376.052523][ T9716] __mutex_lock_common+0x1eb/0x2390 [ 1376.058264][ T9716] mutex_lock_nested+0x17/0x20 [ 1376.063569][ T9716] kernfs_seq_start+0x51/0x3c0 [ 1376.068868][ T9716] seq_read_iter+0x3c4/0xd50 [ 1376.073989][ T9716] vfs_read+0x725/0xcf0 [ 1376.078711][ T9716] ksys_read+0x14d/0x250 [ 1376.083490][ T9716] do_syscall_64+0x4c/0xa0 [ 1376.088448][ T9716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1376.094881][ T9716] [ 1376.094881][ T9716] -> #3 (&p->lock){+.+.}-{3:3}: [ 1376.101937][ T9716] __mutex_lock_common+0x1eb/0x2390 [ 1376.107677][ T9716] mutex_lock_nested+0x17/0x20 [ 1376.112980][ T9716] seq_read_iter+0xad/0xd50 [ 1376.118037][ T9716] proc_reg_read_iter+0x1a9/0x270 [ 1376.123658][ T9716] generic_file_splice_read+0x3a2/0x590 [ 1376.129748][ T9716] splice_direct_to_actor+0x413/0xb50 [ 1376.135683][ T9716] do_splice_direct+0x1b9/0x2c0 [ 1376.141072][ T9716] do_sendfile+0x5d5/0xec0 [ 1376.146034][ T9716] __se_sys_sendfile64+0x13b/0x190 [ 1376.151684][ T9716] do_syscall_64+0x4c/0xa0 [ 1376.156679][ T9716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1376.163120][ T9716] [ 1376.163120][ T9716] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 1376.170636][ T9716] lo_write_bvec+0x193/0x770 [ 1376.175779][ T9716] loop_process_work+0x1d62/0x2480 [ 1376.181432][ T9716] process_one_work+0x863/0x1000 [ 1376.186916][ T9716] worker_thread+0xaa8/0x12a0 [ 1376.192132][ T9716] kthread+0x436/0x520 [ 1376.196732][ T9716] ret_from_fork+0x1f/0x30 [ 1376.201696][ T9716] [ 1376.201696][ T9716] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1376.210839][ T9716] process_one_work+0x7bf/0x1000 [ 1376.216329][ T9716] worker_thread+0xaa8/0x12a0 [ 1376.221827][ T9716] kthread+0x436/0x520 [ 1376.226429][ T9716] ret_from_fork+0x1f/0x30 [ 1376.231378][ T9716] [ 1376.231378][ T9716] -> #0 ((wq_completion)loop6){+.+.}-{0:0}: [ 1376.239481][ T9716] __lock_acquire+0x2c33/0x7c60 [ 1376.244967][ T9716] lock_acquire+0x197/0x3f0 [ 1376.250008][ T9716] flush_workqueue+0x142/0x1380 [ 1376.255392][ T9716] drain_workqueue+0xcf/0x380 [ 1376.260646][ T9716] destroy_workqueue+0x7b/0xb20 [ 1376.266037][ T9716] __loop_clr_fd+0x234/0xb90 [ 1376.271279][ T9716] blkdev_put+0x53f/0x7d0 [ 1376.276142][ T9716] deactivate_locked_super+0x93/0xf0 [ 1376.281965][ T9716] cleanup_mnt+0x418/0x4d0 [ 1376.286918][ T9716] task_work_run+0x125/0x1a0 [ 1376.292053][ T9716] exit_to_user_mode_loop+0x10f/0x130 [ 1376.298401][ T9716] exit_to_user_mode_prepare+0xb1/0x140 [ 1376.304490][ T9716] syscall_exit_to_user_mode+0x16/0x40 [ 1376.310491][ T9716] do_syscall_64+0x58/0xa0 [ 1376.315449][ T9716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1376.321882][ T9716] [ 1376.321882][ T9716] other info that might help us debug this: [ 1376.321882][ T9716] [ 1376.332107][ T9716] Chain exists of: [ 1376.332107][ T9716] (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex [ 1376.332107][ T9716] [ 1376.345636][ T9716] Possible unsafe locking scenario: [ 1376.345636][ T9716] [ 1376.353078][ T9716] CPU0 CPU1 [ 1376.358451][ T9716] ---- ---- [ 1376.363923][ T9716] lock(&lo->lo_mutex); [ 1376.368166][ T9716] lock(&disk->open_mutex); [ 1376.375271][ T9716] lock(&lo->lo_mutex); [ 1376.382033][ T9716] lock((wq_completion)loop6); [ 1376.386883][ T9716] [ 1376.386883][ T9716] *** DEADLOCK *** [ 1376.386883][ T9716] [ 1376.395038][ T9716] 2 locks held by syz-executor/9716: [ 1376.400316][ T9716] #0: ffff88801f7a3d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 1376.409644][ T9716] #1: ffff88801f943468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 1376.418914][ T9716] [ 1376.418914][ T9716] stack backtrace: [ 1376.424804][ T9716] CPU: 1 PID: 9716 Comm: syz-executor Not tainted 5.15.184-syzkaller #0 [ 1376.433126][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1376.443204][ T9716] Call Trace: [ 1376.446486][ T9716] [ 1376.449418][ T9716] dump_stack_lvl+0x168/0x230 [ 1376.454117][ T9716] ? load_image+0x3b0/0x3b0 [ 1376.458650][ T9716] ? show_regs_print_info+0x20/0x20 [ 1376.463852][ T9716] ? print_circular_bug+0x12b/0x1a0 [ 1376.469051][ T9716] check_noncircular+0x274/0x310 [ 1376.473989][ T9716] ? add_chain_block+0x940/0x940 [ 1376.478966][ T9716] ? lockdep_lock+0xdc/0x1e0 [ 1376.483561][ T9716] ? mark_lock+0x94/0x320 [ 1376.487891][ T9716] __lock_acquire+0x2c33/0x7c60 [ 1376.492758][ T9716] ? verify_lock_unused+0x140/0x140 [ 1376.497974][ T9716] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1376.503958][ T9716] ? verify_lock_unused+0x140/0x140 [ 1376.509176][ T9716] ? __perf_event_task_sched_in+0x4c4/0x550 [ 1376.515070][ T9716] ? verify_lock_unused+0x140/0x140 [ 1376.520378][ T9716] ? verify_lock_unused+0x140/0x140 [ 1376.525579][ T9716] ? memset+0x1e/0x40 [ 1376.529651][ T9716] lock_acquire+0x197/0x3f0 [ 1376.534163][ T9716] ? flush_workqueue+0x126/0x1380 [ 1376.539191][ T9716] ? __mutex_trylock_common+0x14f/0x250 [ 1376.544737][ T9716] ? read_lock_is_recursive+0x10/0x10 [ 1376.550120][ T9716] ? __init_swait_queue_head+0xa5/0x150 [ 1376.555668][ T9716] flush_workqueue+0x142/0x1380 [ 1376.560518][ T9716] ? flush_workqueue+0x126/0x1380 [ 1376.565546][ T9716] ? __lock_acquire+0x7c60/0x7c60 [ 1376.570629][ T9716] ? lock_chain_count+0x20/0x20 [ 1376.575478][ T9716] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 1376.580861][ T9716] ? lockdep_hardirqs_off+0x70/0x100 [ 1376.586279][ T9716] ? rcu_work_rcufn+0x110/0x110 [ 1376.591127][ T9716] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1376.596773][ T9716] ? finish_wait+0xc0/0x1d0 [ 1376.601299][ T9716] drain_workqueue+0xcf/0x380 [ 1376.605995][ T9716] destroy_workqueue+0x7b/0xb20 [ 1376.610874][ T9716] __loop_clr_fd+0x234/0xb90 [ 1376.615492][ T9716] ? lo_release+0x172/0x1f0 [ 1376.619997][ T9716] ? lo_open+0x100/0x100 [ 1376.624236][ T9716] blkdev_put+0x53f/0x7d0 [ 1376.628593][ T9716] deactivate_locked_super+0x93/0xf0 [ 1376.633967][ T9716] cleanup_mnt+0x418/0x4d0 [ 1376.638386][ T9716] ? lockdep_hardirqs_on+0x94/0x140 [ 1376.643602][ T9716] task_work_run+0x125/0x1a0 [ 1376.648198][ T9716] exit_to_user_mode_loop+0x10f/0x130 [ 1376.653584][ T9716] exit_to_user_mode_prepare+0xb1/0x140 [ 1376.659149][ T9716] syscall_exit_to_user_mode+0x16/0x40 [ 1376.664609][ T9716] do_syscall_64+0x58/0xa0 [ 1376.669026][ T9716] ? clear_bhb_loop+0x30/0x80 [ 1376.673789][ T9716] ? clear_bhb_loop+0x30/0x80 [ 1376.678462][ T9716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1376.684399][ T9716] RIP: 0033:0x7ff944a9dc97 [ 1376.688838][ T9716] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1376.708443][ T9716] RSP: 002b:00007fff4b4b8898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1376.716867][ T9716] RAX: 0000000000000000 RBX: 00007ff944b1e89d RCX: 00007ff944a9dc97 [ 1376.724925][ T9716] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4b4b8950 [ 1376.732892][ T9716] RBP: 00007fff4b4b8950 R08: 0000000000000000 R09: 0000000000000000 [ 1376.740948][ T9716] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4b4b99e0 [ 1376.748916][ T9716] R13: 00007ff944b1e89d R14: 000000000014f7ba R15: 00007fff4b4b9a20 [ 1376.756981][ T9716] [ 1376.892103][T18010] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 1377.388085][T18010] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 1377.396537][T15766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.410739][T15766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.445803][T12431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.456481][T12431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.491937][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1377.499866][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1378.495114][T12431] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.605094][T12431] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.661629][T12431] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.799027][T12431] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.855978][T12431] device hsr_slave_0 left promiscuous mode [ 1379.870188][T12431] device hsr_slave_1 left promiscuous mode [ 1379.936100][T12431] device veth1_macvtap left promiscuous mode [ 1379.955478][T12431] device veth0_macvtap left promiscuous mode [ 1379.961646][T12431] device veth1_vlan left promiscuous mode [ 1379.982566][T12431] device veth0_vlan left promiscuous mode [ 1380.132787][T12431] bond2 (unregistering): Released all slaves [ 1380.207982][T12431] bond1 (unregistering): Released all slaves [ 1380.471173][T12431] bond0 (unregistering): Released all slaves