last executing test programs: 1m43.919858413s ago: executing program 1 (id=221): r0 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) r1 = socket$key(0xf, 0x3, 0x2) read$FUSE(r0, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x28, 0xffffffff, 0xc1002, 0x7f, 0x2, 0x7, 0xfffffff7}}, 0x50) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020200000c00000000000000000000000100060000000000020000000000000000000000000108000000000000000000000000000000000000000095ad0fdc536beeb34258cca32782d8e66e135f7081f858d487f7bd20a6db817756e9f7327d35cad411a61d5f97bcdeaaa9003293d1022951325ce7d7daca9bc570d85d660bf34fab494aeb3b0583612a97c920002477506c5a43df19876083b5d766777699e3917093f02d5b7e60dca6e9d09de10004d32fc1913a5dd028594b3e50ad48"], 0x60}, 0x1, 0x7}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x46}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x90) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r9 = epoll_create1(0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x80000000, 0x20800) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)={0x90000000}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xfffffffc, 0x5}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r12, 0x400448ca, &(0x7f0000000080)={0x0, 0x0, "6b8ee1"}) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_NMI(r13, 0xae9a) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100e27abb1511c1b6ed1400000008000300", @ANYRES32=r14, @ANYBLOB="1400fe006a26ad09b6397143f0e32fff7e0cc32814005500b52a5ddbf7040000000000000000067a0a0006"], 0x58}}, 0x0) 1m42.589760529s ago: executing program 1 (id=224): ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000040)={0x0, 0x8, [0x7, 0xe9b2, 0x9, 0x0, 0x1f, 0x10001]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070200000ee6000abf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fstat(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES8=0x0, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRESOCT=r3, @ANYBLOB="265c375a51dd6e984fce8f35aa96c075b7a81828e19cae434d5987a364b494527514aff7565f8f9989ef21cc069e9749731bd1c6a9829f608f227226f1045847255a0b704f77d9b09077243e32c3c64966b7f87048ae31ebf117f3d51f91ba7edfec2ea21d2382804f40b80f00fc791879137b4c7b40f0fec0ee209e144676e71e63c3d74fc465d09f40372fd6c163c833e2a0c13bcb290e5e727197549ecb61473c5ced3d4d7684d79d50ab63ac97ad2228d9245ea6cd2b2716a000a9834983a3f1a768004374e58bcabab221000000fc00000000000200eeff0000000f21c0352cd526bfdee0c1be60fa5c00000000000090ff26f001d2", @ANYRESOCT], 0x2, 0x1c9, &(0x7f0000000300)="$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") sendmmsg$unix(r1, &(0x7f0000000a80)=[{{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000700)="cc903cb88fc9ce042e2a043cc79051648167612b0eec4458b84ea33df39f5446675f0c0576b0e067c1eeab1d3b575def1142b2d68f8cda6218f986e386605116efe3194cabab8b19a3e59fd686da3e9f648ff16da2f98633e3b7875c64a0d9b0467f9c2c", 0x64}], 0x1, 0x0, 0x0, 0x4000040}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000840)="93fddc5737c5bb7bb854b8c26c1335cb88f035987f7ac82d1b272178e60c2471ed3e267a62936de8eca5a8641c5e25dffdc627c2e67a47a200a62b8a2a6cb937d248d3501e5d9aa82a78bedd036676a68a42131d460f6ec56b366e0f4efd73566e766a581b9561e30c2fb3b8f4d6bcc2816813b9656897ca2afec11c94616f2d8723d733b5570b68f28b012b97592c10785f32b381e366912fd91ad814d4bfdc905256727560fff66adb643fe205ba79ccbc416ddb8e2eeb5cb619b0668d6a514a26b8", 0xc3}, {&(0x7f0000000940)="315a9a2e6a503caaa6beca182298a0c19828f7cfad1f5c12afffd8b4625ab531276698b7974f85d3ad13eafecce9a7360b953e9135280230937e6abe2163a89cc82f7b24386a4ba68c177bd26e9a1a74c3db0cb23e971a5604908b9577a29ed4395e851fa847c23a98bd49b9dc3db4cfa5bb", 0x72}, {&(0x7f00000009c0)="ee8f0e646f7bcf0678f2e7768143c9222f2c965b1f4199ca6e62987479640fa262d1a8ff1a68d89974fb0f4a91", 0x2d}], 0x3, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, 0xffffffffffffffff}}}], 0x38, 0x400c801}}], 0x2, 0x4000090) close(r1) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r9) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x2b) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev(r11, &(0x7f0000000600)=[{&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000480)="b173116db03bf72baec7296e0afb740f2f7b400774e206f598ce42a1a786cadc5890cfe7ffd5ecf4367f841230d69982d30f9b49c3f4b8bbabf482e02f3aeae4f9fccd", 0x43}, {&(0x7f0000000500)="3fe9da80cd4ab1e0f25b62b7fbbd0610434cd9746ae19ddc48fdf044b8b83f70bdc33dfe2091f9eade58e9f05abf0d866c0654be95580481264a548b99d7cc9e16396d124e7e9087452bf206499bd13f502f00fc3aa0c87b03a16cef650ac6819b117916dfbce42aa4f4a498a3c14d5661ddc83a2331c0f6d0970734127bfd0366e70cc5b970d2cc1fc0e726d961781e2eeb1c50d081f4616661a45df83efb92", 0xa0}, {&(0x7f00000005c0)="379779c934315e79d5c00c14a1a3bbefe4039902ab0a31c4a0da791f8f", 0x1d}], 0x4, 0x1, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r12) r13 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}}) 1m40.104182398s ago: executing program 1 (id=228): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000200000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106200000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207bff00000000bfa100000000000007010000f8ffffffb70200000400b2cd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@block_validity}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xb, 0x5d8, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) 1m37.763751327s ago: executing program 1 (id=232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/113, &(0x7f0000000080)=0x71) splice(r0, 0x0, r2, 0x0, 0xfe59, 0x2) close(r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000440)=""/176, 0xffffffffffffffe7, 0x0, &(0x7f0000000380)=""/145, 0x9d}}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x2000, 0x0, 0x21f}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, &(0x7f0000000100)}}], 0x1, 0x48014) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="0000010040c3f2be96f36c88a50bc51cc1e42968f148337dedb747e6c68f6541a33879"], 0x9) creat(0x0, 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23b) r5 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r5, &(0x7f0000003480)=[{&(0x7f0000000140)="03", 0x1}, {&(0x7f00000034c0)}], 0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100), 0x8) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x14, &(0x7f0000000040), 0x8) sendto$inet(r3, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={@mcast1, @remote, @rand_addr=' \x01\x00', 0x0, 0x7, 0x0, 0x100, 0x5, 0x80200228}) 1m36.661651457s ago: executing program 1 (id=235): r0 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\xe9@'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r7, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xb1f0618597f036f3, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000004ac0), 0x2, 0x0) read$FUSE(r10, &(0x7f0000002680)={0x2020}, 0x2020) 1m35.617436282s ago: executing program 1 (id=238): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x100, 0x24) write$P9_RWALK(r0, &(0x7f0000000000)=ANY=[], 0x9) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f7"], 0x154}}, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x0, 0x1, {0x1, 0x1}, {0x1, 0xf0, 0x1}, 0xfe, 0xfe}, {0x0, 0x1, {0x2, 0xf0, 0x1}, {0x1, 0xff}, 0xff, 0x1}, {0x2, 0x1, {0x1, 0xf0, 0x4}, {0x0, 0x1, 0x5}, 0xff, 0xff}, {0x2, 0x0, {0x1, 0xff, 0x2}, {0x1, 0xf0, 0x3}, 0xff, 0x1}, {0x3, 0x0, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x3}, 0xff, 0x1}], 0xa0) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) syz_io_uring_setup(0x7933, &(0x7f0000000100)={0x0, 0x1, 0x8, 0x1, 0xffffffff, 0x0, r0}, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast1, 0x9}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0xfffffecc) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendfile(r9, r8, 0x0, 0xffefffff) splice(r6, 0x0, r5, 0x0, 0x8001, 0x0) r10 = fsopen(&(0x7f00000004c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m12.515026646s ago: executing program 0 (id=277): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x100, 0x24) write$P9_RWALK(r0, &(0x7f0000000000)=ANY=[], 0x9) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f7"], 0x154}}, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x0, 0x1, {0x1, 0x1}, {0x1, 0xf0, 0x1}, 0xfe, 0xfe}, {0x0, 0x1, {0x2, 0xf0, 0x1}, {0x1, 0xff}, 0xff, 0x1}, {0x2, 0x1, {0x1, 0xf0, 0x4}, {0x0, 0x1, 0x5}, 0xff, 0xff}, {0x2, 0x0, {0x1, 0xff, 0x2}, {0x1, 0xf0, 0x3}, 0xff, 0x1}, {0x3, 0x0, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x3}, 0xff, 0x1}], 0xa0) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) syz_io_uring_setup(0x7933, &(0x7f0000000100)={0x0, 0x1, 0x8, 0x1, 0xffffffff, 0x0, r0}, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast1, 0x9}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0xfffffecc) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendfile(r9, r8, 0x0, 0xffefffff) splice(r6, 0x0, r5, 0x0, 0x8001, 0x0) r10 = fsopen(&(0x7f00000004c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 33.143972142s ago: executing program 3 (id=328): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000280)=[{r2}, {r2, 0x5044}, {r2, 0x6200}], 0x3, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x0) keyctl$describe(0x11, r3, 0x0, 0x93) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="610e073835a8355b473427d3c0a32d20fbc6679365fab6b61eb124fa0d8abb00d2c11f29458bea25f0179d1c15953fa2093bb06668bce49a559c01cd87abc1aefc83500b7f37a5", @ANYRES32=r4, @ANYBLOB="454547ab35f234910a80f3102a0f1371a69ea9b3072a4e42080000000000dfc61aa7e29198ad95f9d46a2181a61919912f5aec8064deb39d14dba2295eddf1d9ac9395832de5eb0e6c1501720b9bc51920efdfae56784e2a01f019bcc5fa2df8fc7e64886c897096d45878951718937aa3cee9207dc7a349d66059b10974f5f2f64a31056286c4b6fd423abb301f5d3de198fa8a0074afc437fdd8236f56ecc71a9d0c62ecaa7f0cbe315176e07d8f1109b5de1b1bbebf037716ec506a18679f0728ad840166c9839e219744a0540f00007a5067e35e70af94d16dee7e09bca15a00964fd9ad4ca20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRES8, @ANYBLOB="85ec217709505fb2cf8dd11b9e30092fede7660f829f8a5656d326ea5d91e5086d4012619267e76bb8c0b788bf6a6cbee81d4b42e82de66ebe7f1a2717b321"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) 31.399548238s ago: executing program 3 (id=332): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x501041) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x2, 0x4) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000b4e) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local, 0x3502, 0x0, 0x0, 0x7, 0x0, 0x9, 0x9d5}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000202"], 0x10}}, 0x0) 30.349368173s ago: executing program 3 (id=333): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x501041) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x2, 0x4) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000b4e) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local, 0x3502, 0x0, 0x0, 0x7, 0x0, 0x9, 0x9d5}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000202"], 0x10}}, 0x0) 29.259776702s ago: executing program 3 (id=334): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020696c25000000002020207b1af8ff00000000bfa100000000000007010000f8ff0000000000001fee00"/80], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4d45, 0xfffffffffffffe93, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_es_remove_extent\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x700, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xe, &(0x7f00000002c0), 0x1, 0x454, &(0x7f0000000640)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f0000000540)=""/250}, 0x90) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000040)=',l,io%bfq.io_serviced_recu\xd4\x0f\xe8rsi\x18\xc6\x8b\x8f\x1e\xa1}\xcd\x0f\xb8\xca\xbc(\xa9zm\xd4bE\x7f1\xf4\xc6\xac\b\xd0qd1\v\x98K') mmap(&(0x7f0000087000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, &(0x7f0000000540)) pipe(&(0x7f0000000080)) 28.198149668s ago: executing program 3 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000040)=ANY=[], 0xc) epoll_create(0xb398) write$vga_arbiter(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="756e6c6f636b20696f2b6d656d0067c5a782afaf57f9e54f5151f4c4f62108f23440b46a7b959bfb03d294420bf7c177c8d3969cea106afaf13d92d9efd958dddf6cff81b565835612208cbaa6deba6b5f574bc17dc6989b5f30fec6e37722ac89acef9bc3f76bb4eaa904191a83349f2f4b57fb446c15a115218a36711f2a1f69e3bb64b56194"], 0xe) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 24.432718039s ago: executing program 3 (id=338): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0), 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) timer_create(0x7, &(0x7f0000000300)={0x0, 0x26, 0x4, @thr={&(0x7f0000001340)="c7fba8f83627d3224dbd748279c4d03a18ec061c80ef789545f80559eaac7a31ae1fe3a25e24844ae51e6a604798c0ccb0289d437a6a9ff6ea20bc5ccfdaa1bd69d4031a493683f24010badecdf438af9924d3d119d3eb0cabbe03e9d452fb38fe582419358090325407dde5aca993478ab40a64ddb52d64339c18f8b8694800ec88a1c0faec1cf20eb45b3465196ffa38839fdd1d86984f878901eff30f8abe50ea35a64b44f82c06a2e58b3008ab75e252d56dc014312970566e2771f91239e45fd7098f077400d58f680a4a4628049daabd2cd4267c702e1859d6d31b6237bd269fe4cb7d0881711ec714955f158301f332d4eabce3b2c15ddea7602143841945584d123ea8f4ed8b0708e682f0c78159f207234431bcad21e60aabbe43fd3bdb6c2dab44e9074733b5f47295b5bc20b7961b6bb8d67348a9e30c29935623a0cc33d549a19c4e7600bd6e51ccd5d82d6fe53bf01949ba8c7ddfc18c85a27456c0a0d3cf5b8edd0a4cc1f42f1e5e5645bebe8dd4eb3053a308132d8872802eb00e92eaf7a72cdfb8dbd4194b09af4ed7f5a79d11325b431e750fd647be988b713bc9275dbdf01c5f3e55cd9fb619bde21d7a4db0c868bce99a4721199f38a97e9b4f952b8953781ed276770b2b6a5a8fb32dcd068bd27cead460c40f0aefa980c904b732e882295f1e875096d825f78136e2fc4a9462e5e8a3ca3573188455b8cbed001e2a8b7190c7f5889df0129e7df4cb8fe5bf141a869bf51352db201573418a40c3387c19f8bb473fd70f50ac2d9ec2df62617dd75ee9debf3b1776001a8623d44a8b62969d7a19188e381576cccf3c72d0c28128d0a4fcfe793ece9cd3d6671c63c33b977801ff58865dbfba605cdc20c348f1d4d50fa6aca1a9500c7529611cb2583616710d695bc6483e30574e520c55979d16007438a3f4edc61823da0ff1d395259b53d953dccb7f6e31af450ce2fa49ca9bda63282a1f9bee18160637afce40fbbcc3c67ff4caade6c25d88002d4a59ed871537cb2fe1532c57e2307328ba237ee0314608c5de7e05282c20a7223ecb3709b3600d7b60209776e2b7dd2e4042c16988cd2efb3e1f8d67a78e38ae154f53fcc8feef6782b02af6fe54fe5b9759c0e9a9efa6405a7adfbdc0306d5f6640a8aa3252921b5b3a470dd3cc828e5c6ae2eff525fe741f509a78f34c5a0d902d3e24f37c217a39d2bd2fbb241d4fb178b66eb3d8ace2806a0650f6c6dd8a609480e9b95e0cab17c95afb96cd8a8865ac5038088b031941576671c40c44ccd589cc7ebf551992ee1c6cdffd8a249caef1e61416bde3896fc9c5f4870816ff0a1d50b119339ae0616ef4c4f14f19dc3e8926d5e89c5757497df134d6d4940b9bff949ec5d7f407664adc97d1f073f7d47639a663e951163890a1034c8acd855b15669c56401d508476097763f54705e02ee89748092ead3179dd79945c058df6a9feaa03d0ef479b76c80b03f623633769c872ce3e76fa93ec0ab9aa2b2205e769d5abbe0ab3b54a4a246087c4e8a048e96907c9b9a328f38031c944b5c8cc23bf50cb92c05a718ca4a65343e14c79381c9fceece905bf6b4c713a2487b3020ec5923d0aa9ebffbea18079918006a1c2dcad79a4009ee3bb6776879958aceceae383ae22e64b3e30b85780f7e7e08f58381f6af9d96da8cb049338af39fdf45f2f1ab6b813bc5dc73e6699caef2479c345b4c8b3198c203d21285420ce70dc252f5dfce48e49f901998a675d37f14664d11506ac2f32ba50a47a33e524fcc88f728c391b9b8d4504ffa9c4dd5c7ba01b80b1ba75a91ce8cff2a7b9bd70d8414eaacac3fa70334d482091f37fcb0cd3cef165c27182c4b9f48238269403246dbd25f0ddaa9a6d584ebf44ede91e53dd28654a07f1c7cf9233507251802ee7266c7ff31c68d63503498af7138021e3090fe428d999c1bc9890190b4de27c8f62c88c1867cddb50877095436f8f23e24a5ccfaf3c2db0e946799e5f40a9ffe06de16b87e0cb361bf91d027549531ce70957cdd379d3205b6a8fcb304bcc52f571bd965d12e61b53a77a88344e5ccc88ae6c159ecd8e65f53dc7cd8e5c5fa879850e442e6d27bfc5a3ea981cbf22ab56d68975686588e8a88a50670a4e74a204c6cf3050d45bc5c221d7bc8477bd0ac0abb97586a3f7fe24fc0fc9f331cdf35c85be6c31cbed10897e56c3b69909d64d16cb757fb25f52c87dcb3a5568c814d7a7d262902b9a66892b03d0190a1607fbf8e4f6cb53c7fbb1a6e9f0c29077b7a3aef28f01a0470e1754083dc7d647c733c75554173c259683677d27038b7085aedab20e8f2ba98808580f59250f4405e0c7cb90ffe7a643d6e3737a4eed9ab128c9b4327a6e46e06534909effe60591a028564b73509a6f5f0f7a4ecbbaff1ce90ac9a898653a2e92e70f351f742c19cb2e8d5d6449fbebdbbef4ebc259d610cf9774ff53a8777a64b4de484620dd65493c61bcbdd26ec5a2800b6020b617ce9740ba0c238a4cd327d843a7e8013654315dffee9a4aaec96d8d266af533b1bafe1fdad32c3fb6b35bec3b7562bd20f26d1fca7234e5e57931c79f7f18d7677ab3724528726441a94bca1656a2b3a0b95a3b79e8683c5acc20dacf7e03ff2e13cf8b6b712fe6ef5441b5a592b5a0edf258bf2ea449774964f7e746b0f684461f098271201711ad59e4cc880e1b83567c597dcc18d001ae6e41fcda487fb91368739decbb6eaa81149c25a2b767380bee8e512ffe396c351673988502ef7f14ecb80da84a68db27cf72a99a71624cdbe225f9eff1813127f7c722011b8301f0bb7b93baa6c431244b724b53375a527cb95b2c67243b805861c0de523d88f01fbdd22ba8e99c89098abec08381a974d3fed7ef0d8d86f7aba73eb7a474f2b4532cc5eff35c0181650171e8165ab951ff3a696a3578a1bba4acf023bac9d2c2659a777b64f9e05ba4aa1d1b60bc3e3b82be503ce8ad8efa4de9349b3220a51655a5802a6ccabcc4021deef89754f6c109efbe8900f11426e51451507f98c482944977162b60703788d3e24daafc49ff5b9435d4f7f1d3776475d6af06dd77e3972e242cdf5c436a67389945cdf35296c10e615793b70f35a632bb85156548dfefaf9d81e0319f807a4c6a7bd54dd9364748b30e61bf868e72ab37efd09efcd2d18abdd7077e1d2bb92f4fd67c262ac806d1824624ba8e6b75fb2fe6c5a224f503a4830f5ee1928261be95507c51238e82c0e629771b3a36f86999390e4f3ba890bd09a097a6f3c1263d8f4eecc3e81ece1f5a534c58a6fc6c40c065d3d9b39062cfd2dd6a892118350961ce6b01e9af28afd6d93722cb4e21472b287c807256091afe0a490c38dace75c277431a22db6a87027f1907146a8e70aa14638c87a87c070e995d2d31cbda40008cc6e156e57402694288604655b1b99a82cdc3d3b1790e067afd69561420af40ed06a890189df2699e1448989e37881269c3d1f381aa9099ccc8c39dfe89e7e86018ca0636d1476fcc262aa8e8e47233b02bccd21f5551ca252e79d133e85677bffeeb21534f2b0789f0d87fcc99fa2c291ffce03d307a6e6e02936410801120d29e2dda30e492f6b20d974ec798d4561b536bd1387b3bcd8e73dff762066b1234aa719b168bb6b6f89219d71ab8ed60906970c5d9da4ab215fa118acb48de8c149c2d2b2f49bdfb3902a5097a79f6e7b40cf4f1096dfbdb7fc3d4abd5d9e007aeaa26f54654e1090c97cf04e3820d2c66ec35cf76083076f6dc1a887a6cff58c06f1cde87e2e5724411fee8d678ca64bb5598a4bc7fec7dcd3b68bbeaffced5fa3e0bff566fca4aef288c64a4fe544b720dabbee6bd1d1dd568d10c9bbb2680aabdba92fc70681a9abeddea8213da3867f9dc4c9a80495d9a2d966230bcc7bfdead75cb2db38a26c21701f035a9be067d9d76cfb9817357e6e53443e704333ff91d7193a14c92d1022611c80a433b963538e70ccae08114d7e3ac18c91402502c682ca119812f492f4ef96e690d3d5be3d2a7446ca1498ebe77b044914908c4dcb79338cbab5d90d7d0887dffc678c552b6c1232ed4cccc591b94276b380f4763062f8274ca5424529afd0aa43f721916fde5cf85035e82a0b28a912a21115b192ad5549d956284c24e8217f4bb2d642b9922ac4056b4c3dccd33171edfd999cfbc3f47cc6b56c5b5ef07b7dd322af7527bb16108706ed593fb61673219c0cc8e8c3087296dc09d36dd7d3c9a0b663ae43644620f047e0177c8efa8c4c31467fe4950c1c19ce98ce6fa73ec13ea57498da28027453bba05232c6d1510e4e9ac0c262e8e6cabeb116b2f7ed27b6f169c03cb10f33d32e65e9ac6c31052f22b9cafff3e1dde114f4e3a028c95fd3b48b37bf83a4cf76a4b5477a81f2d56c085fd59cff3fa9398a8d27e96f77cde8b7631e4d997d169451acc936a3499fd11e64a637f91f207c1cb7edaf1695cc03f8f2b9acfd768fdaf98e398319260100f51a7c48898fc5b3cb95715b98aa5491881a2c489efae2ee848787fd4d84d60d347410159c552f6fe51edc582d7ad9115c78da5c3ad49b5c746d589899bdd90bd39d9a17870f7b6ea797a6c63ff45e9404527b8c45ca68f5ae4b6795165f7a99a6327aa0115cc44f476c31376b0c6208e27cfbd96ed0c41ae1ab7c74eb65eebe2bf528798a1d6960f86aa2eb090111465305bb9b7e5144c8ac9c17a3d3c198ea1f0c05abd5d0c63a54c801c77b046232d2a92968c4cd99d276eea7bd164bc52c5fa2760f1c4670081900e6b789854d615c6029acf9ead7c07ef8fb8b2d9de8111cb6f4f566c391dfb171cf2a4333fdc39a81c824a8b5bd289d5a261870a3271c390bb93c770f1e92cf8c731929ffc6d4e6a35796bcc059da4ca77cec5fe1bee51dc5e5957c2bb5a8c781f480851d814d89899f8c27df427c2caab085aaa42e5a15c2b93d546211409ec997087943f1c03d750d68648f6fa156c1a2df7f42a66fb9b5e528d18fa3bf2dfa705fc695ab3d6ff8fc1cdae5622f9b85390468ecfa6fa28f78bfddeb9789773d0a7cf06939016d911cd38faaa4605e41aa59017c32bd531bfe8ea3f0e810c27009ef779d724f4dcd4f79f206c10e1a7c4480c20750a379428dce64e0e7687b454e4efbd78a7a90e88c9e11809a3bb87b43ad98ea939bfc1d329c85e0b5967195bbe3785554e97aecf3a5f49a96b0359b1e3b6b5863108d5571cc167696d21d710a4ed1c086db9760bb4ce14675b35816f6f50bff6bcf24bc4046d66609d4577490ec642dca76483c137f1282b0174580b8a7da14ee9fb23fb198ab484b5f240a59d72b76a8274ccf7fa6b3d43d1acec84cb02e7a54f6eaa9bd86f83a332b46c82d3b79c3e42e89d5fe8413c47e2836a5e7bde4ac92dfb1800e9861fa45474e77ed568f41fe46d88cdba38469381bf6dfd5a42ac9751caf07a8a3e2fb194c080517da5d6010370fce9834590ce6966c3a15103ef2271881c86d50d6b646187a5bb3af9d24104310651bfc9f28fbc903e7ca39b4da95a67fc96206bb8af192965b664caeba20f691b7b8b0edcaa9522299398fb5014f63f58088d986cac4f", &(0x7f0000002340)="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"}}, &(0x7f0000000340)) pipe2$9p(&(0x7f0000000200), 0x4880) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0xf, 0x2, 0x0, 0x0, r3, 0xee2, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4, 0x20000}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@check_strict}, {@overriderock}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@check_relaxed}, {@nojoliet}, {@check_relaxed}, {@nojoliet}]}, 0x3d, 0x556, &(0x7f0000000dc0)="$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") creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x9) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0xfffffc8f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000240)=0x7fff, 0x12) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000400)=""/33, &(0x7f0000000440)=0x21) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$tun(r7, &(0x7f00000002c0)={@val, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @empty}}, 0x38) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r8, 0x0, 0x0) 23.978144952s ago: executing program 4 (id=341): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x1, 0xfffffc01, 0x8, @empty, @mcast2, 0x80, 0x8, 0x4, 0x8}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, r2, 0x303, 0x0, 0x0, {0xa, 0x6}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x4, 0x2}]}, 0x44}}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x2010050, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="574ebc0e94989fcde4c7e6c29d5b7d84ea1d3b850bb44bd48bb9519bc17acbb165391925581f91c0647c1d56315d4d044e055c5842362d6e3547a65f0d1dc45f590e08b80c1182db21b765ab93d4b3b8fd30a9415a11b2facb5efbeda5c99dab23a7176fd9bdcc116a308a7b3a9e3562550da7ba26451b761e0bc1c92c045eee"], 0xff, 0x2ce, &(0x7f0000000640)="$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") r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x840, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc0185879, &(0x7f0000000140)) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000004c0)) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = getegid() setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="340e", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0xee01, @ANYRES32=r8, @ANYRES32=r4, @ANYRESOCT, @ANYBLOB="10000400"], 0x64, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chown(&(0x7f0000000300)='./file0\x00', 0x0, r8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={@rand_addr, @remote, 0x0}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000001e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="9c110000", @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf2505000000080009000a00000094000180140002006261746164765f736c6176655f31000014000200677265300000000000000000000000001400020076657468305f746f5f62726964676500140002006272696467655f736c6176655f310000140002007663616e30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="080003000000000008000300000000001400020076657468305fab4d2c1c746f5f7465616d000000700001801400020065727370616e30000000000000000000140002007767310000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="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"], 0x119c}, 0x1, 0x0, 0x0, 0x1}, 0x805) r13 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x50, r4, 0x3aca9000) creat(&(0x7f0000000400)='./file0\x00', 0x88) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32=r13, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r8, @ANYBLOB="00000000200000000000000001000000f169f6531c1d7015bc", @ANYRES32=r5, @ANYRESOCT=r9, @ANYRES32, @ANYRES32=r11, @ANYBLOB="24000000000000000100000001000000", @ANYRESHEX=0x0, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="10000600"], 0xb0, 0x48010}, 0x8c0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3, r15}]}, 0x64}, 0x1, 0x8}, 0x0) 23.326638429s ago: executing program 4 (id=342): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x501041) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x2, 0x4) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000b4e) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local, 0x3502, 0x0, 0x0, 0x7, 0x0, 0x9, 0x9d5}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000202"], 0x10}}, 0x0) 22.284766374s ago: executing program 4 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) syz_emit_ethernet(0x8a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000080)=ANY=[@ANYBLOB='umask=00000000000000000000011,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00ce6fb92f3b6892859719d513fb2b724d78e448737550f435f5dc50947a837ac494c7c5eb9c5beb42ea5f0d0f93cd17bbcd11398e4f3de48c458ac42a36d259c1947b981eec266c1568a7b1911a194200b826832913e757be58730ef2d7f818c529bc84bb566eff9e"], 0x81, 0x14f4, &(0x7f0000001580)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x4000) unlink(&(0x7f00000002c0)='./file1\x00') r5 = syz_open_procfs(0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) lseek(r5, 0x8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x28}, 0x90) 20.420630859s ago: executing program 4 (id=344): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x23b) io_setup(0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d00000000000000ff07000000000000c9fb90d3abc52620e66db24b7c4f64fd9120d01eaf7503e1c7cfe204909190cf53b6c107bdd3bbcb1b23721d91ea46be5b513a", 0x66, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x4, &(0x7f0000000140)=[{0x7, 0x2f, 0x2, 0x9}, {0x2, 0x8, 0x2}, {0x2, 0x8, 0x6, 0x3}, {0x6, 0x0, 0x1, 0x6}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x541b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x1}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x1, @mcast2}, {0xa, 0x0, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x5}}, 0xffffffffffffffff, 0x2}}, 0x48) semctl$SETALL(0x0, 0x0, 0x11, 0x0) capset(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, 0x0) r9 = semget$private(0x0, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) clock_gettime(0x0, 0x0) semtimedop(r9, &(0x7f0000000280)=[{}, {0x3, 0x8a, 0x1000}, {0x3, 0x3}], 0x2aaaaaaaaaaaac9d, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 18.739887s ago: executing program 4 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fsopen(&(0x7f0000000340)='afs\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x15, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRESHEX=r6, @ANYRESDEC=r4, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87ffd}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_io_uring_setup(0x55de, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f00000001c0), &(0x7f00000000c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x26}}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000000440)={'hsr0\x00', 0x5}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500100000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r9}, 0x10) 17.76478281s ago: executing program 4 (id=348): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x12508, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0xc3}}, {@grpjquota}, {@noinit_itable}]}, 0x0, 0x50a, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) gettid() bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='fib_table_lookup\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x82, 0x7, 0x1, 0x28, @remote, @empty, 0x7, 0x8000, 0x1, 0x4}}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x7, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x0, {@ip4=@private=0xa010101}}}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {0x1}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a00"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8.135784093s ago: executing program 2 (id=353): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x3cf7, {{0x14, 0x4, 0x0, 0x34, 0x50, 0x68, 0x0, 0x40, 0x0, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x6, [{@remote, 0x9}, {@private=0xa010101, 0x7fff}, {@broadcast}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x8, [{@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0xd3}]}, @ra={0x94, 0x4}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1b, r1, 0x1, 0x5}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x50323234}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000100)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000180)={r8, 0x3, r6, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7.888653331s ago: executing program 0 (id=289): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b15, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000b2eac720d57e394f6594301dee2d0b1f3cfceea846ad0a8a0b046e6d011943f6e5fc068824c336425fd7bf9e8bbe77e9083500f5ffffff0000000000000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf250100000005000400010000080900030073797a32000000000900010073797a32000000000900010073797a300000000014000200677265746170300000000000000000000900010073797a300000000005000400010000000900030073797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x50, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x4, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001c00040026ca700c0000000007000000", @ANYRES32=r10, @ANYBLOB='\x00'/12], 0x24}}, 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0xfb, 0x7b1, @vifc_lcl_ifindex=r10, @empty}, 0x10) sendmsg$nl_route(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="4068000a43c6037f7300"/26, @ANYRES32=0x0, @ANYBLOB="080023000100000008000d00fffbffff140003006d6163736563300000000000000000001400030076657468315f766972745f776966690024001280090001007866726d000000001400028008000200030000000800010004000000"], 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x20000000) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={r10, 0x1, 0x4, @broadcast}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnexthop={0x38, 0x6a, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r10}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x11) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getsockname$packet(r12, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14) sendfile(r13, r12, 0x0, 0x3a) sendmsg$IPSET_CMD_HEADER(r12, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000002c0)={0x2c, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40100}, 0x20004084) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x5ac, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r2}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe9}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x0, 0x4}, {0x0, 0x94, 0x53, 0x9}, {0x2, 0x80, 0x4}, {0xb5eb, 0x9, 0x0, 0x4}, {0x0, 0x40, 0x3, 0x5}, {0x0, 0x7f, 0x4, 0x3ff}]}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5ed5}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc5c}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0xfc, 0x20, 0xfffffffc}]}}}]}}, {{0x8, 0x1, r2}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x96}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}]}, 0x5ac}}, 0x20000040) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 7.017438454s ago: executing program 2 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440), 0x8) creat(0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7, r6}, 0x38) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200000000", 0xc) r7 = accept$alg(r5, 0x0, 0x0) recvmmsg(r7, &(0x7f000000a280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/80, 0x50}], 0x1, &(0x7f0000000440)=""/68, 0x44}}, {{&(0x7f00000004c0)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}, 0x8}, {{&(0x7f00000006c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000740)=""/2, 0x2}, {&(0x7f0000000780)=""/251, 0xfb}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a40)=""/93, 0x5d}], 0x4, &(0x7f0000000ac0)=""/29, 0x1d}, 0x3}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/187, 0xbb}, {&(0x7f0000000c00)=""/106, 0x6a}], 0x2, &(0x7f0000003200)=""/89, 0x59}, 0x1}, {{&(0x7f0000003280)=@x25, 0x80, 0x0, 0x0, &(0x7f00000061c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x1f}, {{0x0, 0x0, &(0x7f00000072c0)=[{&(0x7f0000003dc0)=""/247, 0xf7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000007340)=""/64, 0x40}, 0x6}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000008ac0)=@rc, 0x80, &(0x7f000000a180)=[{&(0x7f0000008b40)=""/236, 0xec}, {&(0x7f0000008c40)=""/95, 0x5f}, {&(0x7f0000008cc0)=""/207, 0xcf}, {&(0x7f0000008dc0)=""/198, 0xc6}, {&(0x7f0000008ec0)=""/176, 0xb0}, {&(0x7f0000008f80)=""/83, 0x53}, {&(0x7f0000009000)=""/4096, 0x1000}, {&(0x7f000000a000)=""/251, 0xfb}, {&(0x7f000000a100)=""/109, 0x6d}], 0x9, &(0x7f000000a240)=""/8, 0x8}, 0x7}], 0x9, 0x20000060, &(0x7f000000a500)={0x0, 0x3938700}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xc0}}, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0310"], 0x8, 0x0) 5.882585826s ago: executing program 2 (id=356): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000b80)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.226679953s ago: executing program 0 (id=357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000ff00000000000000000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x80000001, 0x0}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') write$cgroup_pid(r3, &(0x7f00000005c0)=0xffffffffffffffff, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x17, 0x7, 0x3, 0x6, 0x8, 0xffffffffffffffff, 0xe4, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d800000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d45f9e22a09001c559c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f3273299e693e028bb511a7d06602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6df2aed4afe1f44ccb19e810879b706f0700000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbe43a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b223fa8b148871c8d31d24291c25449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb873a55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff08000000e1ff003853e59de762ff8d8955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8aee9f569435ea9e3217eff89309e190a1fb5a315f8347fb03796595000000009a0400000000000000000000a614a5af8650f913058e015bbaf3451f88ba54ece08b332f7a542f8587f2fd973b9aa8269be75569e3471094035c83808103aa9ca15e2f59f49864210e94eae0553ca73d8dca89f312e7a5c3c339244dba20f6056fc98e42d9580b12fa99c910a0237ba07b3c4fbb487fa027cd381f4d7ddc9ea56d4a3d1127a25c1d8bb4680c844db962bb9201122fd49d3f194a6e23c458"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6, r7}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001700)={{0x1, 0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x24, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x56}, @alu={0x4, 0x1, 0xd, 0x7, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x0, 0x1d, &(0x7f0000001600)=""/29, 0x41100, 0xd, '\x00', r1, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000001740)=[0xffffffffffffffff, r7, r8], &(0x7f0000001780), 0x10, 0x1}, 0x90) r9 = syz_open_dev$vcsu(&(0x7f0000000380), 0x6, 0x4080) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0xb, 0x8, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r10, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000240)={r10, &(0x7f00000000c0), 0x0}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r11, 0x10, 0x1f, 0x8001) pread64(r11, &(0x7f0000000300)=""/4096, 0x1000, 0x2fe) r12 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101000, 0x11b) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000080000000000000001d0d00005c820c000100000095010000000000009ac7238e8899ac76ebb3424ed4919ae44ef8f60aace0b71b1b32f67892eea65dd6ae0c213f10968f774130268181799d994d864ac4c76c12a5add93d6319f6ca8c6db0e5c527b3f1b3d9e6e2e54b88a747ff3260b7705f7774ff5a2dee45e4d90d18aba6e333c9ff86026f55726d95695915e472fcfab416ce56928595180f7df8aecb5cd60d1d4d4984332393f28275cedfcfbc0159fd51deabf4b7a53e464a8a9e8f00e546462b226b0092fa3e5338706c41ea6830bf6e5d48838186a6ee92c0b7363be0cf73"], &(0x7f0000000180)='GPL\x00', 0x401, 0x2a, &(0x7f00000001c0)=""/42, 0x41000, 0x50, '\x00', r1, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x8, 0x5}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r9, r10, r11, r12], 0x0, 0x10, 0x7fffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r14, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r15 = dup(r14) write$FUSE_BMAP(r15, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r15, &(0x7f0000000280)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[], [], 0x6b}}) 4.957021522s ago: executing program 0 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002500e501000000000000000007000000", @ANYBLOB="200001"], 0x38}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x8000, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "26312dee"}, 0x0, 0x3, {0x0}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000480)=0x0) io_submit(r3, 0x1, &(0x7f0000000640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000000c0)='p', 0x1}]) socket(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfde7, 0x10, 0x0, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffc00}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r5, &(0x7f0000006040)={0x2020}, 0x8f5) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x0, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x80800, 0x0) ioctl$CAPI_GET_SERIAL(r6, 0xc0044308, &(0x7f0000000240)=0x5) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x3, r7, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 4.671384013s ago: executing program 2 (id=359): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto$inet6(r8, 0x0, 0x0, 0xc0001, &(0x7f0000000100)={0xa, 0x4e22, 0x200, @dev={0xfe, 0x80, '\x00', 0x42}, 0x6bf}, 0x1c) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x12}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.596268654s ago: executing program 0 (id=360): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x2}, {0xfaf, 0x0, 0x40, 0x5}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') lseek(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x64}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x11) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) getrusage(0x1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200020, &(0x7f00000001c0)={[{@bsdgroups}, {}, {@init_itable_val={'init_itable', 0x3d, 0x47d3}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@orlov}, {@dioread_lock}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='user.M'], 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) fgetxattr(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB='user.]'], 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 1.355665342s ago: executing program 2 (id=361): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYRES16, @ANYRES32, @ANYBLOB="24005a8020000080140005001d"], 0x40}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000480), 0x0, 0x23d, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2b, 0xa, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r5 = dup2(r2, r3) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x2, 0x10000}) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) pipe(&(0x7f0000000040)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000003c0)={0x0, 0x4, 0xd, 0x80000036acf063}) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000240)={0x0, 0x80000001, 0x0, 0x0, 0x2, [{}, {}]}) 639.176353ms ago: executing program 2 (id=362): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0x1e9b}, 0x1c, 0x0}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x268, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3fad2c79c647e430c2598342e684eeb571ae38e066467eef"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c96f00bd9053fff6b9fd4d2ebd2e563890181ab52ae164e7"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25b007e2228d499dfa4c9159aa1950f875de419bb77f579f"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "86ee273988305cbc66646d4a4666d53481865aa4bb2c7fb0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf52"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "242450624deacf6473e7f542f0b69724c9555ca262a354a4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "70699af63f78f086f6041fd6d6c06260fa0283ade3f27e19"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf2"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c1"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x268}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0xfffc, 0x0, @void}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r13, 0x89e2, &(0x7f0000000000)=@bcast) 0s ago: executing program 0 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_STAT(r2, 0x2, 0x0) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x6, 0x1, 0x1, 0x0, 0x81}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x44}}, 0x0) kernel console output (not intermixed with test programs): [ 155.513603][ T3922] usb 2-1: config 0 descriptor?? [ 156.026824][ T4598] loop1: detected capacity change from 0 to 1024 [ 156.137267][ T4606] usb usb3: usbfs: process 4606 (syz.0.137) did not claim interface 0 before use [ 156.808945][ T4598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.829563][ T4610] loop4: detected capacity change from 0 to 128 [ 156.915455][ T4612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'. [ 156.920836][ T3922] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 156.963870][ T3922] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 157.181428][ T4613] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 157.204788][ T4613] FAT-fs (loop4): Filesystem has been set read-only [ 157.231489][ T4613] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 157.258857][ T4613] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 157.294107][ T27] audit: type=1800 audit(1725079530.571:40): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.138" name="file1" dev="loop4" ino=1048613 res=0 errno=0 [ 158.388862][ T3642] Bluetooth: hci4: unexpected cc 0x0402 length: 65 > 1 [ 158.525779][ T4627] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.534912][ T4627] overlayfs: missing 'lowerdir' [ 158.599059][ T3642] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 158.607647][ T3642] Bluetooth: hci3: Injecting HCI hardware error event [ 158.615736][ T47] Bluetooth: hci3: hardware error 0x00 [ 158.639279][ T4627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.159113][ T152] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 160.374302][ T152] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 160.401485][ T3922] usb 2-1: USB disconnect, device number 3 [ 160.421388][ T152] dib0700: firmware download failed at 7 with -22 [ 160.490066][ T3891] EXT4-fs (loop1): unmounting filesystem. [ 160.676323][ T47] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 160.807632][ T3642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.824074][ T3642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.832934][ T3642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.856721][ T3642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.864322][ T3642] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.874009][ T3642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.916201][ T152] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.166270][ T152] usb 5-1: Using ep0 maxpacket: 32 [ 161.939721][ T152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.960911][ T152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.974253][ T152] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.004426][ T152] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 162.054321][ T4635] chnl_net:caif_netlink_parms(): no params data found [ 162.066251][ T152] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.086209][ T152] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 162.226951][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.244327][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.270836][ T152] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.283068][ T4635] device bridge_slave_0 entered promiscuous mode [ 162.293916][ T152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.327545][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.334683][ T152] usb 5-1: Product: syz [ 162.352307][ T152] usb 5-1: Manufacturer: syz [ 162.363679][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.371541][ T152] usb 5-1: SerialNumber: syz [ 162.388287][ T4635] device bridge_slave_1 entered promiscuous mode [ 162.390636][ T4651] loop1: detected capacity change from 0 to 512 [ 162.403603][ T4651] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.436330][ T3642] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 162.445158][ T3642] Bluetooth: hci4: Injecting HCI hardware error event [ 162.446685][ T4635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.453381][ T3642] Bluetooth: hci4: hardware error 0x00 [ 162.474753][ T4635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.503566][ T4651] EXT4-fs (loop1): 1 truncate cleaned up [ 162.514895][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.603303][ T27] audit: type=1800 audit(1725079535.881:41): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.148" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.605734][ T4635] team0: Port device team_slave_0 added [ 162.658543][ T4635] team0: Port device team_slave_1 added [ 162.688554][ T152] cdc_ncm 5-1:1.0: bind() failure [ 162.709154][ T152] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 162.715999][ T152] cdc_ncm 5-1:1.1: bind() failure [ 162.736465][ T4635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.743439][ T4635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.756299][ T152] usb 5-1: USB disconnect, device number 4 [ 162.822993][ T4635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.851471][ T4635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.874485][ T4635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.916274][ T47] Bluetooth: hci5: command tx timeout [ 162.935886][ T3891] EXT4-fs (loop1): unmounting filesystem. [ 162.943811][ T4635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.077534][ T4635] device hsr_slave_0 entered promiscuous mode [ 163.084420][ T4635] device hsr_slave_1 entered promiscuous mode [ 163.098218][ T4635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.105794][ T4635] Cannot create hsr debugfs directory [ 164.092751][ T27] audit: type=1326 audit(1725079537.371:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.153026][ T27] audit: type=1326 audit(1725079537.371:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.153651][ T4665] loop1: detected capacity change from 0 to 512 [ 164.266264][ T27] audit: type=1326 audit(1725079537.401:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.316288][ T4665] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.151: casefold flag without casefold feature [ 164.342758][ T4635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.358205][ T4665] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.151: missing EA_INODE flag [ 164.376323][ T27] audit: type=1326 audit(1725079537.401:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.437224][ T4665] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.151: error while reading EA inode 12 err=-117 [ 164.475424][ T27] audit: type=1326 audit(1725079537.401:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.517038][ T3642] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 164.535100][ T4665] EXT4-fs (loop1): 1 orphan inode deleted [ 164.536174][ T27] audit: type=1326 audit(1725079537.401:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.552443][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.572320][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.622254][ T4635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.655832][ T27] audit: type=1326 audit(1725079537.401:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.707255][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 164.720302][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 164.728234][ T27] audit: type=1326 audit(1725079537.401:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.750518][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 164.758305][ T27] audit: type=1326 audit(1725079537.401:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7effa0579eb9 code=0x7ffc0000 [ 164.784851][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 164.795631][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 164.806993][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 164.813661][ T4635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.836646][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 164.917779][ T4635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.956577][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.978530][ T26] usb 5-1: config 0 has no interfaces? [ 164.996859][ T3642] Bluetooth: hci5: command tx timeout [ 165.038529][ T3891] EXT4-fs (loop1): unmounting filesystem. [ 165.056538][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.075820][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.156329][ T26] usb 5-1: SerialNumber: syz [ 165.192888][ T26] usb 5-1: config 0 descriptor?? [ 165.201724][ T4635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.266551][ T4635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.285768][ T4669] chnl_net:caif_netlink_parms(): no params data found [ 165.313775][ T4635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.370975][ T4635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.518633][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.547120][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.574044][ T4669] device bridge_slave_0 entered promiscuous mode [ 165.608489][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.630259][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.654447][ T4669] device bridge_slave_1 entered promiscuous mode [ 165.711011][ T4635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.726079][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.521715][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.553422][ T4635] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.573505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.584801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.631690][ T4669] team0: Port device team_slave_0 added [ 166.647743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.665995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.692773][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.700125][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.783702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.149308][ T3642] Bluetooth: hci6: command tx timeout [ 167.159001][ T3642] Bluetooth: hci5: command tx timeout [ 167.168183][ T4669] team0: Port device team_slave_1 added [ 167.272040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.294326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.318508][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.325650][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.360391][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.378690][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.532066][ T4669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.571649][ T26] usb 5-1: USB disconnect, device number 5 [ 167.587689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.639001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.677788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.699728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.717102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.740101][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.756165][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.785637][ T3642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.807634][ T3642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.826508][ T3642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.834412][ T3642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.841673][ T4669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.852688][ T3642] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 167.863010][ T3642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.917644][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.937705][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.971338][ T4694] loop1: detected capacity change from 0 to 512 [ 168.020449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.030445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.047651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.052782][ T4694] __quota_error: 61 callbacks suppressed [ 168.052795][ T4694] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 168.057125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.080601][ T4694] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 168.090587][ T4694] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.158: Failed to acquire dquot type 0 [ 168.106378][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 168.121625][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.157202][ T4694] EXT4-fs (loop1): Remounting filesystem read-only [ 168.180677][ T4669] device hsr_slave_0 entered promiscuous mode [ 168.190783][ T4669] device hsr_slave_1 entered promiscuous mode [ 168.201561][ T4694] EXT4-fs (loop1): 1 orphan inode deleted [ 168.211242][ T4669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.233930][ T4694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.244614][ T4669] Cannot create hsr debugfs directory [ 168.250404][ T4694] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 168.282121][ T4694] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 168.331118][ T4694] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 168.382578][ T4694] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.158: Failed to acquire dquot type 0 [ 168.445115][ T4694] EXT4-fs (loop1): Remounting filesystem read-only [ 168.466792][ T26] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 168.503672][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.563193][ T26] usb 5-1: config 0 descriptor?? [ 168.662976][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.676424][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.704265][ T4635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.718145][ T3891] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 168.728258][ T4691] chnl_net:caif_netlink_parms(): no params data found [ 168.759019][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.768258][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.811579][ T3891] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 168.860048][ T4669] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.930199][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.939534][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.957907][ T4635] device veth0_vlan entered promiscuous mode [ 169.090333][ T4669] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.122947][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.131486][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.138874][ T26] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 169.150995][ T26] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 169.164677][ T4635] device veth1_vlan entered promiscuous mode [ 169.176410][ T26] [drm:udl_init] *ERROR* Selecting channel failed [ 169.236258][ T3642] Bluetooth: hci5: command tx timeout [ 169.236265][ T47] Bluetooth: hci6: command tx timeout [ 169.251076][ T3891] EXT4-fs (loop1): unmounting filesystem. [ 169.264235][ T26] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 169.283456][ T26] [drm] Initialized udl on minor 2 [ 169.329152][ T26] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 169.338549][ T26] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 169.357074][ T26] usb 5-1: USB disconnect, device number 6 [ 169.369072][ T4669] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.509203][ T3828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.567548][ T4669] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.588924][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.601506][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.611108][ T4691] device bridge_slave_0 entered promiscuous mode [ 169.634742][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.667141][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.741486][ T3828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.755022][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.763358][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.771883][ T4691] device bridge_slave_1 entered promiscuous mode [ 169.784974][ T4635] device veth0_macvtap entered promiscuous mode [ 169.806065][ T4635] device veth1_macvtap entered promiscuous mode [ 169.838551][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.863698][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.881668][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.894086][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.922932][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.934771][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.945978][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.956406][ T47] Bluetooth: hci7: command tx timeout [ 169.962381][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.973121][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.984040][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.993992][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.005951][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.015886][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.026437][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.039550][ T4635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.086515][ T3828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.111933][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.129206][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.139817][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.150698][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.170268][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.185085][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.205246][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.225448][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.235351][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.254656][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.264520][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.283732][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.295212][ T4635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.305026][ T4691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.319547][ T4691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.367056][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.385466][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.397405][ T4635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.414428][ T4635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.424105][ T4635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.446240][ T4635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.482246][ T3828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.499294][ T4691] team0: Port device team_slave_0 added [ 170.517994][ T4691] team0: Port device team_slave_1 added [ 170.594193][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.607016][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.634323][ T4691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.651537][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.659546][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.697735][ T4691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.828418][ T4691] device hsr_slave_0 entered promiscuous mode [ 170.835270][ T4691] device hsr_slave_1 entered promiscuous mode [ 170.849941][ T4691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.863777][ T4691] Cannot create hsr debugfs directory [ 170.883952][ T4669] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.987514][ T4669] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.007217][ T4669] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.044130][ T3915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.060582][ T4669] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.068154][ T3915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.166849][ T3915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.190463][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.198406][ T3915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.293748][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.317075][ T3647] Bluetooth: hci6: command tx timeout [ 171.674298][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.778097][ T4691] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.020539][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.029937][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.037236][ T3642] Bluetooth: hci7: command tx timeout [ 172.045271][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.444251][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.451822][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 173.459764][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.461539][ T3642] Bluetooth: hci6: command tx timeout [ 173.699111][ T4691] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.053790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.098908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.442609][ T3647] Bluetooth: hci7: command tx timeout [ 174.952809][ T4669] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.037900][ T4691] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.229178][ T4691] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.306366][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.598094][ T3647] Bluetooth: hci1: command tx timeout [ 175.664654][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.716245][ T3638] Bluetooth: hci2: command 0x0406 tx timeout [ 175.804878][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.812064][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.041516][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.102009][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.127042][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.134171][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.436514][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.450630][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.521404][ T4766] loop4: detected capacity change from 0 to 256 [ 176.675505][ T4766] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 176.897604][ T3642] Bluetooth: hci7: command tx timeout [ 177.114606][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.125868][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.137591][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.256292][ T1184] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 177.335783][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.347588][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.382185][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.404267][ T4669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.426239][ T4669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.500169][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.508107][ T1184] usb 3-1: Using ep0 maxpacket: 16 [ 177.534925][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.555914][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.599015][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.626369][ T1184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.644256][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.652055][ T3638] Bluetooth: hci1: command tx timeout [ 177.656360][ T1184] usb 3-1: config 0 has no interfaces? [ 177.736697][ T1184] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.745781][ T1184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.775694][ T1184] usb 3-1: SerialNumber: syz [ 177.788177][ T1184] usb 3-1: config 0 descriptor?? [ 178.212141][ T3828] device hsr_slave_0 left promiscuous mode [ 178.230725][ T3828] device hsr_slave_1 left promiscuous mode [ 178.259355][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.317761][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.335078][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.459475][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.257697][ T3828] device bridge_slave_0 left promiscuous mode [ 179.378830][ T3828] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.583567][ T3828] device veth1_macvtap left promiscuous mode [ 179.596486][ T3828] device veth0_macvtap left promiscuous mode [ 179.602616][ T3828] device veth1_vlan left promiscuous mode [ 179.623300][ T3828] device veth0_vlan left promiscuous mode [ 179.716214][ T3642] Bluetooth: hci1: command tx timeout [ 180.577973][ T3922] usb 3-1: USB disconnect, device number 9 [ 180.673341][ T3828] team0 (unregistering): Port device team_slave_1 removed [ 180.791574][ T3828] team0 (unregistering): Port device team_slave_0 removed [ 180.838759][ T3828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.900452][ T3828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.482483][ T3828] bond0 (unregistering): Released all slaves [ 181.766304][ T4691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.796480][ T3642] Bluetooth: hci1: command tx timeout [ 181.801878][ T4733] chnl_net:caif_netlink_parms(): no params data found [ 181.821495][ T4691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.939347][ T4691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.988870][ T4691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.119592][ T4808] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 182.757693][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.764846][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.798081][ T4733] device bridge_slave_0 entered promiscuous mode [ 182.820051][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.856432][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.895536][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.919099][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.937258][ T4733] device bridge_slave_1 entered promiscuous mode [ 182.956822][ T4819] loop4: detected capacity change from 0 to 512 [ 182.997939][ T4819] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.010584][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.136438][ T4819] EXT4-fs (loop4): 1 truncate cleaned up [ 183.142206][ T4819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.251548][ T4733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.322854][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.403450][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.408832][ T27] audit: type=1800 audit(1725079556.691:112): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 183.419283][ T4733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.598181][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.648542][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.675420][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.731047][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.806378][ T4669] device veth0_vlan entered promiscuous mode [ 183.829102][ T4733] team0: Port device team_slave_0 added [ 183.850484][ T4691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.871644][ T4669] device veth1_vlan entered promiscuous mode [ 183.883725][ T3648] EXT4-fs (loop4): unmounting filesystem. [ 183.897072][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.906548][ T4733] team0: Port device team_slave_1 added [ 183.922858][ T27] audit: type=1326 audit(1725079557.201:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 183.944914][ T4691] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.995888][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.004235][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.015817][ T27] audit: type=1326 audit(1725079557.261:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 184.049262][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.067663][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.075782][ T27] audit: type=1326 audit(1725079557.301:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 184.076159][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.104940][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.106664][ T27] audit: type=1326 audit(1725079557.301:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 184.162176][ T27] audit: type=1326 audit(1725079557.301:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 184.186872][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.193834][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.219937][ T27] audit: type=1326 audit(1725079557.301:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 184.246345][ T4733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.251111][ T27] audit: type=1326 audit(1725079557.301:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 184.320145][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.332719][ T27] audit: type=1326 audit(1725079557.301:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 184.335553][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.364756][ T27] audit: type=1326 audit(1725079557.301:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 184.386712][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.404083][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.413351][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.422297][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.429434][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.437593][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.453537][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.462020][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.496395][ T4733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.524538][ T4669] device veth0_macvtap entered promiscuous mode [ 184.563915][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.597775][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.607444][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.625641][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.637477][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.650980][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.666991][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.686793][ T4669] device veth1_macvtap entered promiscuous mode [ 184.720258][ T3638] Bluetooth: hci5: unexpected cc 0x0402 length: 65 > 1 [ 184.735296][ T4733] device hsr_slave_0 entered promiscuous mode [ 184.764647][ T4733] device hsr_slave_1 entered promiscuous mode [ 184.771607][ T4733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.790777][ T4733] Cannot create hsr debugfs directory [ 184.835507][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.847267][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.876969][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.896564][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.936515][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.008171][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.025625][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.035660][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.046445][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.057967][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.084855][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.105117][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.136183][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.174564][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.216261][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.242151][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.275475][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.297486][ T4855] loop4: detected capacity change from 0 to 256 [ 185.304360][ T4855] exfat: Deprecated parameter 'utf8' [ 185.326567][ T4855] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 185.358116][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.369598][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.380216][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.394408][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.415586][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.445738][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.486196][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.496228][ T3922] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.511721][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.526268][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.547804][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.565605][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.581394][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.606674][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.628040][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.672054][ T4669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.706350][ T4669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.735764][ T4669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.739810][ T3922] usb 3-1: Using ep0 maxpacket: 16 [ 185.760261][ T4669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.946530][ T3922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.959655][ T3922] usb 3-1: config 0 has no interfaces? [ 186.038411][ T3922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.057375][ T3922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.069312][ T3922] usb 3-1: SerialNumber: syz [ 186.106866][ T3922] usb 3-1: config 0 descriptor?? [ 186.209679][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.236180][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.246938][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.439037][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.447004][ T3828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.455087][ T3828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.504827][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.547492][ T4691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.347934][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.371198][ T4873] netlink: 288 bytes leftover after parsing attributes in process `syz.4.180'. [ 187.589333][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.599360][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.641790][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.704872][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.859266][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 187.971856][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.998285][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.069038][ T4691] device veth0_vlan entered promiscuous mode [ 188.196532][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 188.272933][ T4881] device geneve2 entered promiscuous mode [ 188.305476][ T4691] device veth1_vlan entered promiscuous mode [ 188.433892][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.440365][ T3922] usb 3-1: USB disconnect, device number 10 [ 188.471491][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.540430][ T4691] device veth0_macvtap entered promiscuous mode [ 188.595015][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.623848][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.665734][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.678169][ T4691] device veth1_macvtap entered promiscuous mode [ 188.730592][ T4733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.756693][ T3638] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 188.766522][ T3638] Bluetooth: hci5: Injecting HCI hardware error event [ 188.774871][ T3638] Bluetooth: hci5: hardware error 0x00 [ 188.838063][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.886276][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.912323][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.923520][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.938872][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.954047][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.966407][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.984123][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.041671][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.075177][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.105397][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.162665][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.294669][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.350546][ T4733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.408975][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.421935][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.596981][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.692529][ T4733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.721943][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.732868][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.743282][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.774461][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.792470][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.815153][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.834148][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.854197][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.882200][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.892781][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.904854][ T4691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.915385][ T4691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.930578][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.941118][ T4733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.965033][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.015482][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.053700][ T4691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.066649][ T4691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.086187][ T4691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.091976][ T4907] loop3: detected capacity change from 0 to 512 [ 190.094972][ T4691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.115864][ T4907] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.181261][ T4907] EXT4-fs (loop3): 1 truncate cleaned up [ 190.181291][ T4907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.217733][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 190.217749][ T27] audit: type=1800 audit(1725079563.501:152): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.183" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 190.469201][ T3899] bond0: (slave bond_slave_0): interface is now down [ 190.469307][ T3899] bond0: (slave bond_slave_1): interface is now down [ 190.498815][ T3864] bond0: (slave bond_slave_0): interface is now down [ 190.498840][ T3864] bond0: (slave bond_slave_1): interface is now down [ 190.501119][ T3864] bond0: now running without any active interface! [ 190.546414][ T3899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.546476][ T3899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.572116][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.594035][ T3899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.594097][ T3899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.610442][ T4905] loop4: detected capacity change from 0 to 2048 [ 190.644865][ T4905] EXT4-fs (loop4): cluster size (2048) smaller than block size (4096) [ 190.646984][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.667980][ T4733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.672151][ T4669] EXT4-fs (loop3): unmounting filesystem. [ 190.751330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.751900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.766837][ T4733] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.772838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.773348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.773711][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.773748][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.774057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.797268][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.797869][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.798300][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.798372][ T3864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.817487][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.836674][ T3638] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 190.946975][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.947700][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.951991][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.958371][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.959325][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.960414][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.961542][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.246948][ T4928] loop3: detected capacity change from 0 to 256 [ 191.253897][ T4928] exfat: Deprecated parameter 'utf8' [ 191.337454][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.752767][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.793703][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.808424][ T4928] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 191.896824][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.016018][ T27] audit: type=1326 audit(1725079565.291:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4933 comm="syz.4.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67d8579eb9 code=0x0 [ 192.302256][ T4945] netlink: 'syz.3.188': attribute type 13 has an invalid length. [ 192.325058][ T4945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 192.359146][ T4945] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 192.500999][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 192.616259][ T4330] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.761493][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.772813][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.799377][ T4733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.831643][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.868950][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.886192][ T4330] usb 1-1: Using ep0 maxpacket: 16 [ 192.939196][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.944545][ T27] audit: type=1326 audit(1725079566.221:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 192.960066][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.993291][ T27] audit: type=1326 audit(1725079566.221:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265df79eb9 code=0x7ffc0000 [ 193.016265][ T4330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.026648][ T4330] usb 1-1: config 0 has no interfaces? [ 193.036318][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.069056][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.106529][ T4330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.108199][ T4733] device veth0_vlan entered promiscuous mode [ 193.140150][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 193.169691][ T4330] usb 1-1: SerialNumber: syz [ 193.183304][ T4733] device veth1_vlan entered promiscuous mode [ 193.203784][ T4330] usb 1-1: config 0 descriptor?? [ 193.291409][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.310586][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.335493][ T4733] device veth0_macvtap entered promiscuous mode [ 193.367923][ T4733] device veth1_macvtap entered promiscuous mode [ 194.172768][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189707][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.777843][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.795902][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.898538][ T4985] loop4: detected capacity change from 0 to 256 [ 194.920249][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.006854][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.061991][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.097891][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.118251][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.164017][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.186391][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.223341][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.245037][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.268562][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.292430][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.321036][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.391963][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.528561][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.566596][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 195.584675][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.615956][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.642136][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.708807][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.751862][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.830821][ T3922] usb 1-1: USB disconnect, device number 5 [ 195.840152][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.879110][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.926254][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.946454][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.957982][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.983850][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.004152][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.025639][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.045362][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.075640][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.106030][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.143341][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.189386][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.253823][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.283822][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.332605][ T4733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.353203][ T4733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.439897][ T5017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.517225][ T4733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.552082][ T4733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.571318][ T5021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.816918][ T1184] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.878323][ T5024] usb usb3: usbfs: process 5024 (syz.3.201) did not claim interface 0 before use [ 197.716360][ T1184] usb 5-1: Using ep0 maxpacket: 16 [ 197.846354][ T1184] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.871862][ T1184] usb 5-1: config 0 has no interfaces? [ 197.890020][ T3758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.903412][ T3758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.931263][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.966379][ T1184] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.985739][ T1184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.995855][ T1184] usb 5-1: SerialNumber: syz [ 198.031021][ T3880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.054136][ T1184] usb 5-1: config 0 descriptor?? [ 198.074150][ T3880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.096615][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 198.096982][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.546747][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 199.700692][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 199.712400][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 199.724854][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 200.069148][ T27] audit: type=1326 audit(1725079573.351:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.3.205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x0 [ 200.922071][ T5056] overlayfs: failed to resolve './file0': -2 [ 201.604398][ T3625] usb 5-1: USB disconnect, device number 7 [ 201.719369][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.805652][ T26] usb 3-1: config 0 descriptor?? [ 201.858404][ T5030] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 201.902379][ T5065] loop3: detected capacity change from 0 to 16 [ 201.909159][ T5065] erofs: Unknown parameter '®' [ 202.010172][ T5059] syz.2.203[5059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.010285][ T5059] syz.2.203[5059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.040056][ T3769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.057170][ T26] hub 3-1:0.0: USB hub found [ 202.073500][ T5065] loop3: detected capacity change from 0 to 1024 [ 202.284408][ T5072] loop4: detected capacity change from 0 to 256 [ 204.373983][ T3628] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.447538][ T26] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 204.588276][ T5064] "syz.0.208" (5064) uses obsolete ecb(arc4) skcipher [ 204.676348][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 204.751682][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 205.593391][ T26] usb 3-1: USB disconnect, device number 11 [ 205.606499][ T5087] loop3: detected capacity change from 0 to 8 [ 205.701902][ T5093] netlink: 'syz.4.213': attribute type 21 has an invalid length. [ 205.820189][ T5093] netlink: 152 bytes leftover after parsing attributes in process `syz.4.213'. [ 205.857036][ T5087] SQUASHFS error: Unable to read inode 0xa7 [ 206.040178][ T5094] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.296409][ T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 206.659391][ T3638] Bluetooth: hci7: ISO packet for unknown connection handle 0 [ 206.726367][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 206.846406][ T26] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 206.857134][ T26] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 206.966300][ T5101] sctp: failed to load transform for md5: -2 [ 207.015439][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.968337][ T5131] loop1: detected capacity change from 0 to 16 [ 208.737823][ T5131] erofs: (device loop1): mounted with root inode @ nid 36. [ 208.764209][ T5130] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 208.773839][ T5130] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 208.783051][ T5130] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 208.792227][ T5130] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 208.801344][ T5130] syz.1.217: attempt to access beyond end of device [ 208.801344][ T5130] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 208.817395][ T5130] syz.1.217: attempt to access beyond end of device [ 208.817395][ T5130] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 208.835685][ T27] audit: type=1326 audit(1725079582.091:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5122 comm="syz.1.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7edf579eb9 code=0x0 [ 209.240830][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.286196][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.326741][ T3922] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 209.336731][ T26] usb 3-1: can't set config #1, error -71 [ 209.356250][ T26] usb 3-1: USB disconnect, device number 12 [ 209.409354][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 209.566632][ T3922] usb 5-1: Using ep0 maxpacket: 16 [ 209.686859][ T3922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.713057][ T3922] usb 5-1: config 0 has no interfaces? [ 209.827310][ T3922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.884204][ T3922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 209.964414][ T3922] usb 5-1: SerialNumber: syz [ 210.405862][ T3922] usb 5-1: config 0 descriptor?? [ 210.596281][ T3638] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 210.605044][ T3638] Bluetooth: hci7: Injecting HCI hardware error event [ 210.618475][ T3642] Bluetooth: hci7: hardware error 0x00 [ 210.724731][ T5157] loop1: detected capacity change from 0 to 16 [ 210.867966][ T5161] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 211.639720][ T5157] erofs: Unknown parameter 'ÿÿÿÿ' [ 211.767275][ T3769] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.831195][ T5169] 9pnet_fd: Insufficient options for proto=fd [ 211.858270][ T5166] xt_socket: unknown flags 0x8 [ 212.172626][ T5178] mkiss: ax0: crc mode is auto. [ 212.961107][ T3642] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 213.083437][ T3720] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 213.141565][ T3625] usb 5-1: USB disconnect, device number 8 [ 213.200014][ T5178] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 213.214514][ T5186] kcapi: manufacturer command 12 unknown. [ 213.244849][ T5190] loop4: detected capacity change from 0 to 512 [ 213.273517][ T5190] ext4: Unknown parameter 'subj_role' [ 213.284454][ T5189] loop1: detected capacity change from 0 to 512 [ 213.333098][ T5189] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.351376][ T3769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.366290][ T3720] usb 3-1: Using ep0 maxpacket: 32 [ 213.556329][ T5189] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 213.817718][ T3723] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 214.332863][ T3723] usb 1-1: Using ep0 maxpacket: 32 [ 214.356477][ C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 214.416261][ T3720] usb 3-1: device descriptor read/all, error -71 [ 214.898793][ T5205] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.228: Directory hole found for htree leaf block 0 [ 215.252398][ T3723] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 215.267298][ T3723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.319595][ T3723] usb 1-1: config 0 descriptor?? [ 215.336496][ T4733] EXT4-fs (loop1): unmounting filesystem. [ 215.360421][ T5204] loop4: detected capacity change from 0 to 1024 [ 215.388244][ T3723] gspca_main: sq930x-2.14.0 probing 041e:403c [ 215.634066][ T5186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.916957][ T3723] gspca_sq930x: reg_r 001f failed -110 [ 215.924874][ T3723] sq930x: probe of 1-1:0.0 failed with error -110 [ 216.336618][ T5186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.437557][ T5220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.538053][ T5220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.583524][ T5154] usb 1-1: USB disconnect, device number 6 [ 216.707985][ T5227] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 217.798702][ T5238] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 218.683747][ T5241] netlink: 288 bytes leftover after parsing attributes in process `syz.1.238'. [ 218.886293][ T3680] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 218.906250][ T1184] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 219.136273][ T3680] usb 1-1: Using ep0 maxpacket: 16 [ 219.256626][ T3680] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.273861][ T3680] usb 1-1: config 0 has no interfaces? [ 219.279999][ T1184] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 219.289059][ T1184] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 219.366831][ T3919] hfsplus: b-tree write err: -5, ino 4 [ 219.386395][ T3680] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.404183][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.447291][ T3680] usb 1-1: SerialNumber: syz [ 219.474309][ T3680] usb 1-1: config 0 descriptor?? [ 219.484283][ T1184] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 219.523559][ T1184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.678725][ T1184] usb 3-1: Product: syz [ 219.683661][ T1184] usb 3-1: Manufacturer: syz [ 219.690901][ T1184] usb 3-1: SerialNumber: syz [ 222.521194][ T1184] usb 3-1: can't set config #7, error -71 [ 224.019238][ T5273] loop4: detected capacity change from 0 to 256 [ 224.028490][ T5273] exfat: Deprecated parameter 'utf8' [ 224.049684][ T1184] usb 3-1: USB disconnect, device number 15 [ 224.049916][ T5273] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 224.092445][ T5154] usb 1-1: USB disconnect, device number 7 [ 225.910224][ T5288] loop3: detected capacity change from 0 to 512 [ 225.988877][ T5288] ext2: Unknown parameter 'smackfsdef' [ 226.227085][ T3769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.170787][ T5303] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 228.773647][ T5315] netlink: 56 bytes leftover after parsing attributes in process `syz.4.252'. [ 232.707884][ T3638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.736931][ T3638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.749186][ T3638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.758110][ T3638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.811862][ T3647] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.820084][ T3638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.056698][ T5367] loop3: detected capacity change from 0 to 1024 [ 234.064512][ T5367] hfsplus: unable to parse mount options [ 234.149374][ T3769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.917510][ T3638] Bluetooth: hci1: command tx timeout [ 235.241444][ T3876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.179068][ T3876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.291443][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 236.957075][ T5396] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 237.034725][ T3638] Bluetooth: hci1: command tx timeout [ 237.334536][ T3876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.401252][ T5408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 237.502722][ T3876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.662912][ T5404] bridge0: port 3(macvlan2) entered blocking state [ 237.716323][ T5404] bridge0: port 3(macvlan2) entered disabled state [ 237.963461][ T5404] device macvlan2 entered promiscuous mode [ 238.056000][ T5404] device veth3 entered promiscuous mode [ 238.426282][ T3625] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 238.434534][ T5408] device veth3 left promiscuous mode [ 238.445690][ T5408] bridge0: port 3(macvlan2) entered disabled state [ 238.454051][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.473379][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.664554][ T5408] device macvlan2 left promiscuous mode [ 238.673661][ T5408] bridge0: port 3(macvlan2) entered disabled state [ 238.729954][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 239.076327][ T3638] Bluetooth: hci1: command tx timeout [ 239.358418][ T3625] usb 5-1: Using ep0 maxpacket: 32 [ 239.443037][ T5417] binder: 5416:5417 ioctl c0306201 200003c0 returned -22 [ 239.475597][ T5417] binder_alloc: 5416: binder_alloc_buf, no vma [ 239.484474][ T3625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 239.656429][ T3625] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 239.679665][ T3625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.688662][ T3625] usb 5-1: Product: syz [ 239.693469][ T3625] usb 5-1: Manufacturer: syz [ 239.698562][ T3625] usb 5-1: SerialNumber: syz [ 239.712396][ T3625] usb 5-1: config 0 descriptor?? [ 240.146767][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.187193][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.712625][ T3638] Bluetooth: hci1: command tx timeout [ 242.992459][ T5357] device bridge_slave_0 entered promiscuous mode [ 245.110879][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 245.183449][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.207668][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.215938][ T5357] device bridge_slave_1 entered promiscuous mode [ 245.264644][ T5441] loop3: detected capacity change from 0 to 64 [ 245.378979][ T5441] hfs: get root inode failed [ 245.511973][ T5443] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 245.549213][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.604524][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.353173][ T14] usb 5-1: USB disconnect, device number 9 [ 247.035134][ T5357] team0: Port device team_slave_0 added [ 247.056742][ T5357] team0: Port device team_slave_1 added [ 247.188188][ T5445] netlink: 288 bytes leftover after parsing attributes in process `syz.0.277'. [ 248.210494][ T5456] netlink: 'syz.4.282': attribute type 10 has an invalid length. [ 248.572515][ T5456] team0: Port device netdevsim0 added [ 248.686931][ T5459] netem: incorrect ge model size [ 248.692366][ T5459] netem: change failed [ 248.765522][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.830381][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.892755][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.353727][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.413784][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.610800][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.721252][ T5357] device hsr_slave_0 entered promiscuous mode [ 249.740987][ T5357] device hsr_slave_1 entered promiscuous mode [ 250.461525][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.510624][ T5357] Cannot create hsr debugfs directory [ 250.557422][ T5493] loop3: detected capacity change from 0 to 1024 [ 250.564352][ T5493] hfsplus: unable to parse mount options [ 252.819106][ T5510] loop4: detected capacity change from 0 to 64 [ 252.884972][ T5510] hfs: get root inode failed [ 252.950885][ T5514] loop3: detected capacity change from 0 to 128 [ 253.022084][ T5514] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 253.111065][ T5499] device bond0 entered promiscuous mode [ 253.159341][ T5514] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 253.219786][ T5499] device bond_slave_0 entered promiscuous mode [ 253.952299][ T5499] device bond_slave_1 entered promiscuous mode [ 254.031206][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 254.253361][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 254.294228][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 254.314110][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 254.395568][ T3642] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 254.407259][ T3642] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 254.415183][ T3642] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 254.423153][ T3642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 254.431636][ T3642] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 254.439114][ T3642] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 254.503517][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 254.784907][ T5534] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 255.566734][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.573060][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.391550][ T3642] Bluetooth: hci8: command tx timeout [ 259.219704][ T5571] loop3: detected capacity change from 0 to 16 [ 259.280242][ T5571] erofs: (device loop3): erofs_init_device: empty device tag @ pos 0 [ 259.477746][ T3642] Bluetooth: hci8: command tx timeout [ 259.488600][ T3876] device hsr_slave_0 left promiscuous mode [ 259.546887][ T3876] device hsr_slave_1 left promiscuous mode [ 259.586248][ T3876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.602013][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.616305][ T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 259.627386][ T3876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.663097][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.703608][ T3876] device bridge_slave_1 left promiscuous mode [ 259.722291][ T3876] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.773049][ T3876] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.855303][ T3876] device veth1_macvtap left promiscuous mode [ 259.866433][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 259.876037][ T3876] device veth0_macvtap left promiscuous mode [ 259.898510][ T3876] device veth1_vlan left promiscuous mode [ 259.905464][ T3876] device veth0_vlan left promiscuous mode [ 260.006440][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.029764][ T26] usb 5-1: config 0 has no interfaces? [ 260.176386][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.194500][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 260.210752][ T26] usb 5-1: SerialNumber: syz [ 261.055038][ T26] usb 5-1: config 0 descriptor?? [ 261.617263][ T3642] Bluetooth: hci8: command tx timeout [ 262.704480][ T3662] usb 5-1: USB disconnect, device number 10 [ 262.836421][ T5602] loop4: detected capacity change from 0 to 512 [ 262.857907][ T5602] ext2: Unknown parameter 'smackfsdef' [ 263.097483][ T3876] team0 (unregistering): Port device team_slave_1 removed [ 263.737287][ T3642] Bluetooth: hci8: command tx timeout [ 263.961043][ T3876] team0 (unregistering): Port device team_slave_0 removed [ 264.072016][ T3876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.170161][ T3876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.376158][ T5619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.253544][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 266.458874][ T5611] loop4: detected capacity change from 0 to 8192 [ 266.490093][ T5611] FAT-fs (loop4): Unrecognized mount option "kmem_cache_free" or missing value [ 267.149210][ T3876] bond0 (unregistering): Released all slaves [ 267.349379][ T5596] netlink: 'syz.2.303': attribute type 3 has an invalid length. [ 267.357190][ T5596] netlink: 'syz.2.303': attribute type 3 has an invalid length. [ 267.366025][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 267.830526][ T5357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.249440][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.302033][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.901121][ T5526] chnl_net:caif_netlink_parms(): no params data found [ 268.989440][ T5357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.020161][ T5357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.240188][ T5357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.611555][ T5648] loop4: detected capacity change from 0 to 32768 [ 270.627251][ T5648] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.312 (5648) [ 270.658741][ T5648] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.669327][ T5648] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 270.678071][ T5648] BTRFS info (device loop4): force clearing of disk cache [ 270.685196][ T5648] BTRFS info (device loop4): using free space tree [ 270.941063][ T5526] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.956434][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.966595][ T5526] device bridge_slave_0 entered promiscuous mode [ 270.985839][ T5659] binder: 5655:5659 ioctl c0306201 200003c0 returned -22 [ 271.003118][ T5526] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.048632][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.057205][ T5526] device bridge_slave_1 entered promiscuous mode [ 271.066779][ T5659] binder_alloc: 5655: binder_alloc_buf, no vma [ 271.126250][ T5648] BTRFS info (device loop4): enabling ssd optimizations [ 271.138497][ T5648] BTRFS info (device loop4): rebuilding free space tree [ 271.226049][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.241077][ T3648] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.483620][ T3876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.288176][ T5526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.290369][ T5526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.587770][ T27] audit: type=1326 audit(1725079645.871:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.3.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x0 [ 272.688059][ T3876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.767216][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.786936][ T3828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.815869][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.831939][ T5526] team0: Port device team_slave_0 added [ 272.917978][ T3876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.967969][ T5526] team0: Port device team_slave_1 added [ 272.979220][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.007675][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.044344][ T5710] loop4: detected capacity change from 0 to 1024 [ 273.051264][ T5710] hfsplus: unable to parse mount options [ 273.069882][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.077020][ T3758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.098088][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.118562][ T3769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.258908][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.608697][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.696875][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.704134][ T3758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.874125][ T5725] netlink: 32 bytes leftover after parsing attributes in process `syz.4.319'. [ 274.894450][ T3876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.007383][ T5526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.014359][ T5526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.046718][ T27] audit: type=1326 audit(1725079648.331:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.3.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x0 [ 275.138545][ T5526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.158268][ T27] audit: type=1326 audit(1725079648.441:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.3.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x0 [ 275.188408][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.278882][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 275.299131][ T5526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.311972][ T5526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.341619][ T5526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.858581][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.993289][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.038342][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.052874][ T5732] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘Ì [ 276.074130][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.102389][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.128820][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.253221][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.290256][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.786514][ T5526] device hsr_slave_0 entered promiscuous mode [ 276.822939][ T5526] device hsr_slave_1 entered promiscuous mode [ 277.316248][ T1184] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 277.692884][ T5526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.720893][ T5526] Cannot create hsr debugfs directory [ 277.727306][ T1184] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.741459][ T1184] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 277.810017][ T5754] netlink: 'syz.3.324': attribute type 21 has an invalid length. [ 277.838922][ T5754] netlink: 152 bytes leftover after parsing attributes in process `syz.3.324'. [ 277.893806][ T5761] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.918294][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.926644][ T1184] usb 3-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c [ 277.956394][ T1184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.958577][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.964476][ T1184] usb 3-1: Product: syz [ 278.040755][ T1184] usb 3-1: Manufacturer: syz [ 278.045397][ T1184] usb 3-1: SerialNumber: syz [ 278.068146][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.130046][ T1184] usb 3-1: config 0 descriptor?? [ 278.199367][ T5773] loop3: detected capacity change from 0 to 764 [ 278.238601][ T5773] rock: directory entry would overflow storage [ 278.301816][ T5773] rock: sig=0x4654, size=5, remaining=4 [ 278.987161][ T5773] rock: directory entry would overflow storage [ 278.993624][ T5773] rock: sig=0x4f50, size=4, remaining=3 [ 278.999256][ T5773] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 279.422351][ T27] audit: type=1326 audit(1725079652.691:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 279.452568][ T5783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.327'. [ 279.572398][ T27] audit: type=1326 audit(1725079652.691:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 279.640505][ T5782] fuse: Bad value for 'group_id' [ 279.675971][ T27] audit: type=1326 audit(1725079652.691:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 279.746537][ T27] audit: type=1326 audit(1725079652.691:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 279.819080][ T27] audit: type=1326 audit(1725079652.691:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 279.866423][ T27] audit: type=1326 audit(1725079652.691:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 280.029489][ T27] audit: type=1326 audit(1725079652.691:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 280.154186][ T27] audit: type=1326 audit(1725079652.691:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 280.387724][ T27] audit: type=1326 audit(1725079652.691:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 280.398551][ T3625] usb 3-1: USB disconnect, device number 16 [ 280.656712][ T27] audit: type=1326 audit(1725079652.691:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5098379eb9 code=0x7ffc0000 [ 280.943625][ T5801] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 281.675842][ T5803] loop4: detected capacity change from 0 to 1024 [ 281.721269][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.730698][ T5803] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 281.749846][ T3915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.796603][ T5803] hfsplus: failed to load root directory [ 281.852152][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.421612][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.433002][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.459862][ T5803] loop4: detected capacity change from 0 to 1024 [ 282.468948][ T5803] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.501264][ T5803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.647261][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.657188][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.672198][ T5357] device veth0_vlan entered promiscuous mode [ 282.765851][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.777346][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.793846][ T5357] device veth1_vlan entered promiscuous mode [ 282.885202][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.906350][ T1184] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 282.924500][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.943791][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.963340][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.226376][ T1184] usb 5-1: Using ep0 maxpacket: 32 [ 283.528630][ T5357] device veth0_macvtap entered promiscuous mode [ 283.544476][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.556525][ T1184] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44346, setting to 1024 [ 283.599242][ T1184] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 283.621376][ T5357] device veth1_macvtap entered promiscuous mode [ 283.665557][ T1184] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 283.694884][ T1184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.763694][ T5803] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 283.782142][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.811137][ T1184] hub 5-1:4.0: bad descriptor, ignoring hub [ 283.844222][ T1184] hub: probe of 5-1:4.0 failed with error -5 [ 283.873860][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.894385][ T1184] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 283.901443][ T5830] loop3: detected capacity change from 0 to 1024 [ 283.908323][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.956768][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.969424][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.981521][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.991898][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.003651][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.014319][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.025395][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.053001][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.066332][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.078571][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.089427][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.110907][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.204625][ T5833] ecryptfs_parse_options: eCryptfs: unrecognized option [l] [ 284.222309][ T5833] ecryptfs_parse_options: eCryptfs: unrecognized option [io%bfq.io_serviced_recuÔèrsiÆ‹¡}͸ʼ(©zmÔbE1ôƬÐqd1 ˜K/dev/nullb0] [ 284.260289][ T5833] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 284.305538][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.319735][ T5833] Error parsing options; rc = [-22] [ 284.327308][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.383564][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.402395][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.456376][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.498388][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.516088][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.536380][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.552891][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.571177][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.587397][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.600439][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.610715][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.629241][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.640180][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.661046][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.681291][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.709984][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.740882][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.790215][ T3876] device hsr_slave_0 left promiscuous mode [ 284.812491][ T3876] device hsr_slave_1 left promiscuous mode [ 284.830478][ T3876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.839845][ T4669] hfsplus: bad catalog entry type [ 284.871429][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.886236][ T3876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.895852][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.910182][ T3876] device bridge_slave_1 left promiscuous mode [ 284.922213][ T3876] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.937710][ T3876] device bridge_slave_0 left promiscuous mode [ 284.948656][ T3876] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.035277][ T3876] device veth1_macvtap left promiscuous mode [ 285.048422][ T3876] device veth0_macvtap left promiscuous mode [ 285.059093][ T3876] device veth1_vlan left promiscuous mode [ 285.070556][ T3876] device veth0_vlan left promiscuous mode [ 285.433006][ T5803] syz.4.331 (5803) used greatest stack depth: 18720 bytes left [ 285.534830][ T3648] EXT4-fs (loop4): unmounting filesystem. [ 285.626501][ T1184] usb 5-1: USB disconnect, device number 11 [ 286.026253][ T1184] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.079426][ T3876] team0 (unregistering): Port device team_slave_1 removed [ 286.130762][ T3876] team0 (unregistering): Port device team_slave_0 removed [ 286.174374][ T3876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.217639][ T3876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.406430][ T1184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.417549][ T1184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.427804][ T1184] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 286.599232][ T1184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.615860][ T1184] usb 5-1: config 0 descriptor?? [ 286.867142][ T5837] loop4: detected capacity change from 0 to 256 [ 286.922025][ T3876] bond0 (unregistering): Released all slaves [ 287.090711][ T5357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.106243][ T5357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.126239][ T5357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.134973][ T5357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.208372][ T1184] sony 0003:054C:0268.0003: item fetching failed at offset 3/5 [ 287.219623][ T5526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 287.236757][ T1184] sony 0003:054C:0268.0003: parse failed [ 287.246871][ T1184] sony: probe of 0003:054C:0268.0003 failed with error -22 [ 288.289426][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 288.309047][ T5526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.332865][ T5526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.341250][ T5704] usb 5-1: USB disconnect, device number 12 [ 288.395224][ T5526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.604270][ T3864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.683112][ T3864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.748680][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.806512][ T5526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.936428][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.944375][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.039192][ T5526] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.069752][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.130384][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.166883][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.174026][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.179236][ T5853] loop4: detected capacity change from 0 to 128 [ 289.246518][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.282401][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 289.282417][ T27] audit: type=1804 audit(1725079662.561:198): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.341" name="/newroot/86/file0/file0" dev="loop4" ino=1048633 res=1 errno=0 [ 289.441255][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.451028][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.464243][ T3642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.473942][ T3642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.484000][ T3642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.491849][ T3642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.499405][ T3642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.506645][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.507536][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.522103][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.622346][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.660608][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.747112][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.770153][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.868178][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.922386][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.940608][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.950494][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.962046][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.084069][ T3899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.483742][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.497113][ T3647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 290.507681][ T3647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 290.515808][ T3647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 290.523801][ T3647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 290.532921][ T3647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 290.540828][ T3647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.574856][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.613208][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.648766][ T3899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.898359][ T3899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.956833][ T5880] loop4: detected capacity change from 0 to 1024 [ 290.963891][ T5880] hfsplus: unable to parse mount options [ 291.018968][ T3769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.171805][ T3899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.301163][ T5889] loop4: detected capacity change from 0 to 256 [ 291.548491][ T5889] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 292.525354][ T5889] tty tty29: ldisc open failed (-12), clearing slot 28 [ 292.532941][ T5892] tty tty1: ldisc open failed (-12), clearing slot 0 [ 292.657012][ T3638] Bluetooth: hci1: command tx timeout [ 292.657383][ T3647] Bluetooth: hci6: command tx timeout [ 292.741550][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.772226][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.813456][ T5526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.844113][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 292.904512][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 292.931662][ T27] audit: type=1326 audit(1725079666.211:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.4.344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67d8579eb9 code=0x0 [ 293.349968][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.373291][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.307460][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.314572][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.387408][ T5857] device bridge_slave_0 entered promiscuous mode [ 294.454742][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.473370][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.497994][ T5857] device bridge_slave_1 entered promiscuous mode [ 294.532605][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.610561][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.668516][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.737817][ T3647] Bluetooth: hci1: command tx timeout [ 294.743339][ T3638] Bluetooth: hci6: command tx timeout [ 294.900468][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.178266][ T5526] device veth0_vlan entered promiscuous mode [ 295.187760][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.195135][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.203577][ T5871] device bridge_slave_0 entered promiscuous mode [ 295.243865][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.266591][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.275369][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.305233][ T5871] device bridge_slave_1 entered promiscuous mode [ 295.376095][ T5526] device veth1_vlan entered promiscuous mode [ 295.400906][ T5930] loop4: detected capacity change from 0 to 512 [ 295.472473][ T3769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.668548][ T5937] loop4: detected capacity change from 0 to 16 [ 295.686773][ T5937] erofs: (device loop4): mounted with root inode @ nid 36. [ 296.325976][ T3899] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.375854][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.410829][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.454660][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.473947][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.513742][ T5932] tun0: tun_chr_ioctl cmd 1074025675 [ 296.528963][ T5932] tun0: persist enabled [ 296.551105][ T5922] tun0: tun_chr_ioctl cmd 1074025675 [ 296.557282][ T5922] tun0: persist disabled [ 296.594165][ T5939] tun0: tun_chr_ioctl cmd 1342215226 [ 296.641340][ T3899] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.750185][ T3899] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.761339][ T3638] Bluetooth: hci6: command tx timeout [ 296.766781][ T3638] Bluetooth: hci1: command tx timeout [ 296.845491][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.878336][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.899825][ T5857] team0: Port device team_slave_0 added [ 296.910205][ T5871] team0: Port device team_slave_0 added [ 296.920525][ T5526] device veth0_macvtap entered promiscuous mode [ 296.962051][ T5857] team0: Port device team_slave_1 added [ 296.970943][ T5871] team0: Port device team_slave_1 added [ 296.979088][ T5526] device veth1_macvtap entered promiscuous mode [ 297.046856][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.599158][ T3647] Bluetooth: hci1: command tx timeout [ 300.604753][ T3647] Bluetooth: hci6: command tx timeout [ 300.669444][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.744765][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.765365][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.786310][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.826364][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.851125][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.890056][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.890074][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.890090][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.890100][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.890113][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.892109][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.004698][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.016193][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.036162][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.066262][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.099008][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.128889][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.158549][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.213946][ T5526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.246449][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.253417][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.317353][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.352889][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.372027][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.381033][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.391361][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.405653][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 301.452771][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.486368][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.499658][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.510476][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.520751][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.531559][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.542970][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.574563][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.584740][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.606962][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.617118][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.627785][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.642934][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.654418][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.678808][ T5526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.688188][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.695718][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.752876][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.775361][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.796870][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.867783][ T5526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.879556][ T5526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.902459][ T5526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.916409][ T5526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.982300][ T5857] device hsr_slave_0 entered promiscuous mode [ 301.996084][ T5857] device hsr_slave_1 entered promiscuous mode [ 302.013570][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.024021][ T5857] Cannot create hsr debugfs directory [ 303.750049][ T5871] device hsr_slave_0 entered promiscuous mode [ 303.765077][ T5871] device hsr_slave_1 entered promiscuous mode [ 303.777158][ T5871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.784748][ T5871] Cannot create hsr debugfs directory [ 304.111292][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.120475][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.156424][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.164718][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.638391][ T5997] xt_CT: No such helper "pptp" [ 304.649314][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.687428][ T3876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.112070][ T6010] netlink: 'syz.0.289': attribute type 1 has an invalid length. [ 307.261048][ T6012] device bridge_slave_1 left promiscuous mode [ 307.280772][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.336861][ T6012] device bridge_slave_0 left promiscuous mode [ 307.343121][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.418300][ T6018] overlayfs: failed to resolve './file0': -2 [ 307.515137][ T3647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.524435][ T3647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.535336][ T3647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.543195][ T3647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.552417][ T3647] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.655186][ T3647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.766166][ T6022] overlayfs: './file0' not a directory [ 308.313090][ T6028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 309.021330][ T6035] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 309.717468][ T3638] Bluetooth: hci4: command tx timeout [ 311.593863][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 311.796356][ T3638] Bluetooth: hci4: command tx timeout [ 311.858895][ T6020] chnl_net:caif_netlink_parms(): no params data found [ 311.943934][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.973282][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.154560][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.264672][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.591851][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.616655][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.625026][ T6020] device bridge_slave_0 entered promiscuous mode [ 312.769389][ T3899] device hsr_slave_0 left promiscuous mode [ 312.792340][ T3899] device hsr_slave_1 left promiscuous mode [ 312.825824][ T3899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.861147][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.878378][ T3899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.893350][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.907148][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.924530][ T3899] device bridge_slave_1 left promiscuous mode [ 312.936513][ T3899] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.962420][ T3899] device bridge_slave_0 left promiscuous mode [ 312.972076][ T3899] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.995646][ T3899] device hsr_slave_0 left promiscuous mode [ 313.042133][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.090032][ T3899] device hsr_slave_1 left promiscuous mode [ 313.125534][ T3899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.207037][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.432228][ T3899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.445435][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.787022][ T3899] device bridge_slave_1 left promiscuous mode [ 313.806149][ T28] INFO: task syz.3.132:4580 blocked for more than 143 seconds. [ 313.877459][ T3638] Bluetooth: hci4: command tx timeout [ 313.881080][ T3899] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.916836][ T28] Not tainted 6.1.107-syzkaller #0 [ 313.994789][ T6063] caif:caif_disconnect_client(): nothing to disconnect [ 314.006260][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.048404][ T28] task:syz.3.132 state:D stack:23832 pid:4580 ppid:3634 flags:0x00004004 [ 314.076264][ T28] Call Trace: [ 314.079579][ T28] [ 314.093117][ T28] __schedule+0x143f/0x4570 [ 314.103250][ T28] ? release_firmware_map_entry+0x186/0x186 [ 314.109241][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 314.124907][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 314.130220][ T28] schedule+0xbf/0x180 [ 314.134309][ T28] schedule_preempt_disabled+0xf/0x20 [ 314.150814][ T28] __mutex_lock+0x6b9/0xd80 [ 314.155354][ T28] ? __mutex_lock+0x53c/0xd80 [ 314.170040][ T28] ? exfat_sync_fs+0x67/0x100 [ 314.174746][ T28] ? mutex_lock_nested+0x10/0x10 [ 314.179895][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 314.185619][ T28] exfat_sync_fs+0x67/0x100 [ 314.190345][ T28] iterate_supers+0x127/0x1e0 [ 314.195035][ T28] ? sync_inodes_one_sb+0x60/0x60 [ 314.201210][ T28] ksys_sync+0xd7/0x1c0 [ 314.205390][ T28] ? sync_filesystem+0x220/0x220 [ 314.211096][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 314.217219][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 314.223218][ T28] __do_sys_sync+0xa/0x10 [ 314.227744][ T28] do_syscall_64+0x3b/0xb0 [ 314.232179][ T28] ? clear_bhb_loop+0x45/0xa0 [ 314.246185][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.254766][ T28] RIP: 0033:0x7fdb43b79eb9 [ 314.266231][ T28] RSP: 002b:00007fdb4488f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 314.274669][ T28] RAX: ffffffffffffffda RBX: 00007fdb43d15f80 RCX: 00007fdb43b79eb9 [ 314.295283][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.303530][ T28] RBP: 00007fdb43be793e R08: 0000000000000000 R09: 0000000000000000 [ 314.312570][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.321329][ T28] R13: 0000000000000000 R14: 00007fdb43d15f80 R15: 00007ffe4c630348 [ 314.329427][ T28] [ 314.335457][ T3899] device bridge_slave_0 left promiscuous mode [ 314.335669][ T28] INFO: task syz.0.139:4612 blocked for more than 143 seconds. [ 314.345386][ T3899] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.349297][ T28] Not tainted 6.1.107-syzkaller #0 [ 314.361995][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.371980][ T28] task:syz.0.139 state:D stack:24512 pid:4612 ppid:4212 flags:0x00004004 [ 314.381592][ T28] Call Trace: [ 314.384885][ T28] [ 314.388788][ T28] __schedule+0x143f/0x4570 [ 314.393349][ T28] ? release_firmware_map_entry+0x186/0x186 [ 314.399350][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 314.404840][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 314.410130][ T28] schedule+0xbf/0x180 [ 314.414221][ T28] schedule_preempt_disabled+0xf/0x20 [ 314.420454][ T28] __mutex_lock+0x6b9/0xd80 [ 314.424981][ T28] ? __mutex_lock+0x53c/0xd80 [ 314.430291][ T28] ? exfat_sync_fs+0x67/0x100 [ 314.434995][ T28] ? mutex_lock_nested+0x10/0x10 [ 314.441579][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 314.446854][ T28] exfat_sync_fs+0x67/0x100 [ 314.451383][ T28] iterate_supers+0x127/0x1e0 [ 314.456068][ T28] ? sync_inodes_one_sb+0x60/0x60 [ 314.461219][ T28] ksys_sync+0xd7/0x1c0 [ 314.465388][ T28] ? sync_filesystem+0x220/0x220 [ 314.470431][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 314.486154][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 314.492684][ T28] __do_sys_sync+0xa/0x10 [ 314.506150][ T28] do_syscall_64+0x3b/0xb0 [ 314.510590][ T28] ? clear_bhb_loop+0x45/0xa0 [ 314.515280][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.533331][ T28] RIP: 0033:0x7fbd3e779eb9 [ 314.543895][ T28] RSP: 002b:00007fbd3e5ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 314.564324][ T28] RAX: ffffffffffffffda RBX: 00007fbd3e915f80 RCX: 00007fbd3e779eb9 [ 314.575606][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.593141][ T28] RBP: 00007fbd3e7e793e R08: 0000000000000000 R09: 0000000000000000 [ 314.603408][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.623332][ T28] R13: 0000000000000000 R14: 00007fbd3e915f80 R15: 00007ffe6d395168 [ 314.635869][ T28] [ 314.647338][ T28] [ 314.647338][ T28] Showing all locks held in the system: [ 314.655077][ T28] 1 lock held by rcu_tasks_kthre/12: [ 314.662286][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 314.672865][ T28] 1 lock held by rcu_tasks_trace/13: [ 314.678311][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 314.689390][ T28] 1 lock held by khungtaskd/28: [ 314.694252][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 314.704983][ T28] 3 locks held by kworker/u4:4/97: [ 314.710191][ T28] #0: ffff888146eb8138 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.720818][ T28] #1: ffffc900020cfd20 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.734406][ T28] #2: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbb/0x610 [ 314.745250][ T28] 1 lock held by dhcpcd/3305: [ 314.750732][ T28] #0: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 314.770289][ T28] 2 locks held by getty/3395: [ 314.775000][ T28] #0: ffff88814bbfc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 314.784942][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 314.795108][ T28] 3 locks held by syz-executor/3637: [ 314.801405][ T28] 3 locks held by kworker/0:7/3685: [ 314.806708][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.817183][ T28] #1: ffffc900044cfd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.827649][ T28] #2: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 314.838110][ T28] 3 locks held by kworker/u4:20/3886: [ 314.843481][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.855198][ T28] #1: ffffc9000307fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.867150][ T28] #2: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 314.876468][ T28] 2 locks held by kworker/u4:21/3888: [ 314.881957][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.893540][ T28] #1: ffff8880b8f27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 314.917828][ T28] 5 locks held by kworker/u4:24/3899: [ 314.923302][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.943617][ T28] #1: ffffc9000320fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 314.965760][ T28] #2: ffffffff8e4eca90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 314.986158][ T28] #3: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0x9d0 [ 315.008562][ T28] #4: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 315.026226][ T28] 2 locks held by syz.3.132/4580: [ 315.031267][ T28] #0: ffff88806a01c0e0 (&type->s_umount_key#75){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 315.053209][ T28] #1: ffff88806a01e0e0 (&sbi->s_lock#3){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 315.074629][ T28] 2 locks held by syz.0.139/4612: [ 315.080553][ T28] #0: ffff88806a01c0e0 (&type->s_umount_key#75){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 315.092991][ T28] #1: ffff88806a01e0e0 (&sbi->s_lock#3){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 315.102441][ T28] 2 locks held by kworker/1:15/5702: [ 315.108739][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 315.119172][ T28] #1: ffffc90003a0fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 315.130654][ T28] 1 lock held by syz-executor/5857: [ 315.135851][ T28] #0: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 315.145352][ T28] 6 locks held by syz-executor/5871: [ 315.150691][ T28] #0: ffff88807e188460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 315.159814][ T28] #1: ffff88804b21c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 315.169680][ T28] #2: ffff888144f843a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 315.179923][ T28] #3: ffffffff8de22548 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 315.190410][ T28] #4: ffff8880763f30e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 315.201110][ T28] #5: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x2b1/0xa00 [ 315.211732][ T28] 1 lock held by syz-executor/6020: [ 315.217047][ T28] #0: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 315.236151][ T28] 2 locks held by syz.2.362/6066: [ 315.241193][ T28] #0: ffffffff8e557e70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 315.261337][ T28] #1: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x8a0 [ 315.282669][ T28] 2 locks held by syz.2.362/6067: [ 315.287843][ T28] #0: ffffffff8e557e70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 315.296052][ T28] #1: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x8a0 [ 315.329695][ T28] 2 locks held by syz.2.362/6068: [ 315.334734][ T28] #0: ffffffff8e557e70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 315.343211][ T28] #1: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x8a0 [ 315.366214][ T28] [ 315.368590][ T28] ============================================= [ 315.368590][ T28] [ 315.386281][ T28] NMI backtrace for cpu 1 [ 315.390629][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0 [ 315.398521][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 315.408666][ T28] Call Trace: [ 315.411949][ T28] [ 315.414887][ T28] dump_stack_lvl+0x1e3/0x2cb [ 315.419582][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 315.425070][ T28] ? panic+0x764/0x764 [ 315.429144][ T28] ? vprintk_emit+0x622/0x740 [ 315.433833][ T28] ? printk_sprint+0x490/0x490 [ 315.438615][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 315.443744][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 315.448870][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 315.455048][ T28] ? _printk+0xd1/0x111 [ 315.459209][ T28] ? panic+0x764/0x764 [ 315.463293][ T28] ? __wake_up_klogd+0xcc/0x100 [ 315.468148][ T28] ? panic+0x764/0x764 [ 315.472219][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 315.478308][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 315.484393][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 315.490396][ T28] watchdog+0xf88/0xfd0 [ 315.494567][ T28] ? watchdog+0x1f8/0xfd0 [ 315.498908][ T28] kthread+0x28d/0x320 [ 315.502982][ T28] ? hungtask_pm_notify+0x50/0x50 [ 315.508011][ T28] ? kthread_blkcg+0xd0/0xd0 [ 315.512605][ T28] ret_from_fork+0x1f/0x30 [ 315.517047][ T28] [ 315.520853][ T28] Sending NMI from CPU 1 to CPUs 0: [ 315.526254][ C0] NMI backtrace for cpu 0 [ 315.526263][ C0] CPU: 0 PID: 3897 Comm: kworker/u4:23 Not tainted 6.1.107-syzkaller #0 [ 315.526277][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 315.526286][ C0] Workqueue: events_unbound toggle_allocation_gate [ 315.526307][ C0] RIP: 0010:check_preemption_disabled+0x14/0x110 [ 315.526325][ C0] Code: cc cc cc cc cc cc 48 c7 c7 60 69 5d 8b 48 c7 c6 a0 69 5d 8b eb 00 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 <48> 89 44 24 08 65 8b 1d d0 95 5b 75 65 8b 05 71 eb 5b 75 a9 ff ff [ 315.526336][ C0] RSP: 0018:ffffc900031ef8a8 EFLAGS: 00000082 [ 315.526347][ C0] RAX: 37aa38c7dfab2b00 RBX: ffffc900031ef940 RCX: ffffffff816a82fb [ 315.526358][ C0] RDX: 0000000000000000 RSI: ffffffff8b0c0f40 RDI: ffffffff8b5d69c0 [ 315.526367][ C0] RBP: ffffc900031efa28 R08: dffffc0000000000 R09: fffffbfff1d33b4e [ 315.526377][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200063df24 [ 315.526387][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000046 [ 315.526396][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 315.526408][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.526417][ C0] CR2: 00007ffbccae8178 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 315.526430][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.526438][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 315.526446][ C0] Call Trace: [ 315.526450][ C0] [ 315.526455][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 315.526474][ C0] ? read_lock_is_recursive+0x10/0x10 [ 315.526493][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 315.526511][ C0] ? nmi_handle+0x25/0x440 [ 315.526536][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 315.526554][ C0] ? nmi_handle+0x12e/0x440 [ 315.526571][ C0] ? nmi_handle+0x25/0x440 [ 315.526588][ C0] ? check_preemption_disabled+0x14/0x110 [ 315.526603][ C0] ? default_do_nmi+0x62/0x150 [ 315.526616][ C0] ? exc_nmi+0xa8/0x100 [ 315.526628][ C0] ? end_repeat_nmi+0x16/0x31 [ 315.526649][ C0] ? lock_acquire+0xeb/0x5a0 [ 315.526665][ C0] ? check_preemption_disabled+0x14/0x110 [ 315.526680][ C0] ? check_preemption_disabled+0x14/0x110 [ 315.526696][ C0] ? check_preemption_disabled+0x14/0x110 [ 315.526711][ C0] [ 315.526715][ C0] [ 315.526721][ C0] lock_acquire+0x1bd/0x5a0 [ 315.526737][ C0] ? static_key_enable_cpuslocked+0x12e/0x250 [ 315.526755][ C0] ? read_lock_is_recursive+0x10/0x10 [ 315.526772][ C0] ? text_poke_sync+0x20/0x20 [ 315.526787][ C0] ? text_poke_sync+0x20/0x20 [ 315.526801][ C0] ? on_each_cpu_cond_mask+0x5e/0x80 [ 315.526819][ C0] ? _raw_spin_lock_irqsave+0xac/0x120 [ 315.526836][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 315.526850][ C0] ? prepare_to_wait_event+0x27/0x3f0 [ 315.526868][ C0] ? _raw_spin_lock+0x40/0x40 [ 315.526882][ C0] ? __might_sleep+0xb0/0xb0 [ 315.526895][ C0] ? rcu_read_lock_any_held+0xb3/0x160 [ 315.526912][ C0] prepare_to_wait_event+0x27/0x3f0 [ 315.526933][ C0] toggle_allocation_gate+0x1d2/0x480 [ 315.526948][ C0] ? show_object+0xa0/0xa0 [ 315.526962][ C0] ? wake_bit_function+0x210/0x210 [ 315.526980][ C0] ? print_irqtrace_events+0x210/0x210 [ 315.526996][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 315.527018][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 315.527034][ C0] ? process_one_work+0x7a9/0x11d0 [ 315.527049][ C0] process_one_work+0x8a9/0x11d0 [ 315.527069][ C0] ? worker_detach_from_pool+0x260/0x260 [ 315.527085][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 315.527099][ C0] ? kthread_data+0x4e/0xc0 [ 315.527118][ C0] ? wq_worker_running+0x97/0x190 [ 315.527140][ C0] worker_thread+0xa47/0x1200 [ 315.527156][ C0] ? release_firmware_map_entry+0x186/0x186 [ 315.527183][ C0] kthread+0x28d/0x320 [ 315.527194][ C0] ? worker_clr_flags+0x190/0x190 [ 315.527207][ C0] ? kthread_blkcg+0xd0/0xd0 [ 315.527220][ C0] ret_from_fork+0x1f/0x30 [ 315.527242][ C0] [ 315.956675][ T3647] Bluetooth: hci4: command tx timeout [ 315.995037][ T3899] device veth1_macvtap left promiscuous mode [ 316.009208][ T3899] device veth0_macvtap left promiscuous mode [ 316.022083][ T3899] device veth1_vlan left promiscuous mode [ 316.035546][ T3899] device veth0_vlan left promiscuous mode [ 316.056504][ T3899] device veth1_macvtap left promiscuous mode [ 316.064810][ T3899] device veth0_macvtap left promiscuous mode [ 316.081546][ T3899] device veth1_vlan left promiscuous mode [ 316.094188][ T3899] device veth0_vlan left promiscuous mode [ 316.106227][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 316.113113][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0 [ 316.120992][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 316.131052][ T28] Call Trace: [ 316.134331][ T28] [ 316.137261][ T28] dump_stack_lvl+0x1e3/0x2cb [ 316.141956][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 316.147409][ T28] ? panic+0x764/0x764 [ 316.151460][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 316.157436][ T28] ? vscnprintf+0x59/0x80 [ 316.161756][ T28] panic+0x318/0x764 [ 316.165636][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 316.171780][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 316.177142][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 316.183286][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 316.189432][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 316.195577][ T28] watchdog+0xfc7/0xfd0 [ 316.199725][ T28] ? watchdog+0x1f8/0xfd0 [ 316.204048][ T28] kthread+0x28d/0x320 [ 316.208100][ T28] ? hungtask_pm_notify+0x50/0x50 [ 316.213109][ T28] ? kthread_blkcg+0xd0/0xd0 [ 316.217682][ T28] ret_from_fork+0x1f/0x30 [ 316.222094][ T28] [ 316.225225][ T28] Kernel Offset: disabled [ 316.229534][ T28] Rebooting in 86400 seconds..