last executing test programs: 9m31.969790533s ago: executing program 32 (id=9): creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") 5m12.2934219s ago: executing program 3 (id=757): socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x2, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x50) socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000000)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x1008, 0x8a0000, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 5m9.743473298s ago: executing program 3 (id=758): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, 0x0, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 5m9.501311101s ago: executing program 3 (id=762): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000008020000000000000000"], 0x0, 0x52}, 0x28) getrlimit(0xc, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) llistxattr(&(0x7f0000001400)='./file0\x00', &(0x7f00000002c0)=""/12, 0xffffffffffffff22) 5m8.482686717s ago: executing program 3 (id=763): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x8, 0x4, 0xe, 0x0, 0x36a, 0x20003f}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m5.432043952s ago: executing program 3 (id=768): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00013, &(0x7f0000000f40)={[{@block_validity}]}, 0x0, 0x54b, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() chmod(&(0x7f0000001a40)='./file0\x00', 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd28, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x10, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}, {}, {}, 0x4}}, 0xb8}}, 0x0) shutdown(r4, 0x1) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000040)='./file2/file0\x00', 0x8, &(0x7f0000001f40)=ANY=[], 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x32600) 5m3.392376123s ago: executing program 33 (id=745): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3400c0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e2000000400000002003eb5041a000002000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x4c6}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 5m2.352438748s ago: executing program 3 (id=777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5m1.384343523s ago: executing program 34 (id=777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4m20.224457247s ago: executing program 1 (id=833): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000840)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c60153a58bf745584d1bc19fe5e42b5534eab9331468478a58a0e99ba567f2e02a72b9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832c99117c65c02987d9d4ace163b3def129ff2cc6a5815c3ae28470c1b8070a07e5b478c2971cf1b6f980f3b006fb32039b54f317709cee495d345537ae5f49f224f6ca2f346d4c9bf6e70c8d693e0fe41b3f02359529159897bd7ec1e4319a7b5fa7c2bced106014cd4ffd505a12cd2cd6528d0ab175d3d514a78d9d5ff6da129327c072ef986f7e26bdb6a6244c0097da870f2b74cd102e696e55baf7ffe3685a13af34e15882722dd8e0ba7baf925be1a071ea568c32e215f37802ae93be758791a29e617", 0x1b9}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835c", 0xc6}, {&(0x7f0000000200)="057322e18609", 0x6}], 0x4}}], 0x1, 0x80c0) 4m19.567360317s ago: executing program 1 (id=834): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 4m19.110184194s ago: executing program 1 (id=836): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000001780)={[{@resuid}, {@nodiscard}, {@auto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r5 = dup2(r0, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5) 4m15.491499418s ago: executing program 1 (id=839): socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x2, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x50) socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000000)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x1008, 0x8a0000, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 4m14.213494487s ago: executing program 1 (id=841): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000600), &(0x7f0000001380)=@udp=r4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x5452, 0x0) sendmmsg$unix(r4, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 4m12.899165787s ago: executing program 1 (id=844): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3m57.768136432s ago: executing program 35 (id=844): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2m59.797523728s ago: executing program 6 (id=983): socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x48) 2m57.710090709s ago: executing program 6 (id=990): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000440)={0x0, 0x7, 0x4, 0xb10, 0x0, 0x4, 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 2m56.490011567s ago: executing program 6 (id=992): socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x2, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x50) socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x1008, 0x8a0000, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 2m53.127286438s ago: executing program 6 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) stat(0x0, &(0x7f0000001c80)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x3cb9}, 0x18) fsopen(&(0x7f0000000440)='ext4\x00', 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000800)=@sr0, 0x0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0xb2, 0x1, 0x0, 0x0, 0xd, 0xffffffffffffffff, 0x20009}) 2m49.408852733s ago: executing program 6 (id=1006): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1df, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x90, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x50) 2m48.678929884s ago: executing program 6 (id=1008): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0xc, 0xb, 0x6, 0x0, 0xfffffffffffffff0}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x2, 0x1, 0x0, 0x3, 0x7, 0x0, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @ldst={0x1, 0x1, 0x6, 0x7, 0xb, 0x10}, @alu={0x4, 0x1, 0x0, 0x3, 0xa, 0x30, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) mkdirat(0xffffffffffffffff, 0x0, 0x52) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 2m33.091550996s ago: executing program 36 (id=1008): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0xc, 0xb, 0x6, 0x0, 0xfffffffffffffff0}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x2, 0x1, 0x0, 0x3, 0x7, 0x0, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @ldst={0x1, 0x1, 0x6, 0x7, 0xb, 0x10}, @alu={0x4, 0x1, 0x0, 0x3, 0xa, 0x30, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) mkdirat(0xffffffffffffffff, 0x0, 0x52) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 2m1.220239082s ago: executing program 8 (id=1105): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x4, 0x0) 2m0.830158458s ago: executing program 8 (id=1106): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004010, &(0x7f00000001c0), 0x1, 0x790, &(0x7f0000001740)="$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") chdir(&(0x7f0000000140)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0) r4 = dup(r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x9, 0x9, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x40, 0x3, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', r5, 0x4, 0x44, 0x7, 0x80000000, 0x2a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x10, 0x8000, 0x1, 0x2}}) 2m0.05312064s ago: executing program 8 (id=1107): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x7c}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40060c0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m56.523019882s ago: executing program 8 (id=1113): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d", 0x7a}, {&(0x7f0000000840)="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", 0x1f4}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835c", 0xc6}, {&(0x7f0000000200)="057322e18609", 0x6}], 0x4}}], 0x1, 0x80c0) 1m55.850914343s ago: executing program 8 (id=1115): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 1m54.271183136s ago: executing program 8 (id=1122): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000001780)={[{@resuid}, {@nodiscard}, {@auto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r4 = dup2(r0, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) 1m52.220549827s ago: executing program 5 (id=1133): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m52.071686409s ago: executing program 5 (id=1134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m51.882931702s ago: executing program 5 (id=1135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$printer(0x7, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.212378422s ago: executing program 5 (id=1137): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d", 0x7a}, {&(0x7f0000000840)="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", 0x1f4}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835c", 0xc6}, {&(0x7f0000000200)="057322e18609", 0x6}], 0x4}}], 0x1, 0x80c0) 1m50.321026635s ago: executing program 5 (id=1140): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080)=ANY=[], 0x12) 1m50.180343937s ago: executing program 5 (id=1141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fstat(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1m38.390038843s ago: executing program 37 (id=1122): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000001780)={[{@resuid}, {@nodiscard}, {@auto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") r4 = dup2(r0, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) 1m35.081871023s ago: executing program 38 (id=1141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fstat(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 10.492660296s ago: executing program 2 (id=1378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 10.367816417s ago: executing program 2 (id=1379): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) 10.111184201s ago: executing program 2 (id=1382): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001180)={0x2a0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbN7aNL9fIghaTwFBA6UbU2Or6KHiQQQLBT3bLpttqNlkS3dTmhDQIoIXQcWDoJeefak3r75c9V/w5EEsVdNixYNEZrPTbJvdNEmTbHU/H5js88zM5pnvPDPzPLvzMBtA1xpN/+QiDkbEe0nEcGN+EhF99VRvxPHV9W4uLxXTKYmVlVd+S+rr3FheKkbTe1IHGpmHI+LbtyMO5daXW11YnCmUy6Xzjfx4bfbceHWhPyIK06Xp0tzRicnJI8eeOnZ052L944fFoavvv/j4F8f/euuhK+9+l8TxGGosa45jp4zGaGOf9KW78DYv7HRhHZZ0egPYlvTU7Fk9y+NgDEdPPQUA/Je9ERErAECXSbT/ANBlsu8BbiwvFbOps99I7K1rz0fEvtX4s/ubq0t6G/fs9tXvgw7eSG67M5JExMgOlD8aEZ989dpn6ZTmf3y2u/Y/0DlvXoqI0yOj66//yboxC1v1xAbL+huvo3fM77b2Bzrp67T/83Sr/l/uVv8nWvR/Blqcu9tx1/N//w4UsoG0//dc09i2m03xN4z0NHL/q/f5+pIzZ8ul9Nr2/4gYi76BND+xQRlj1/++3m5Zc//v9w9e/zQtP31dWyP3S+/A7e+ZKtQK9xJzs2uXIh7pbRV/cqv+kzb935ObLOOlZ975uN2yNP403mxaH380RiftjpXLEY+1rP+1EW3J2vjExcNnZ+8YnzhePxzGs4OihS9/+miwXfnN9Z9OafnZZ4G9kNb/4MbxjyTN4zWrWy/j+8vD37Rbdvf4Wx///cmr9XTWj7hYqNXOT0T0Jy+vn39k7b1ZPls/jX/s0dbn/0bHf/qZ8HSrgFrUdO/VXz/ffvy7K41/akv1v/XElZszPe3K31z9T9ZTY405m7n+bXYD72XfAQAAAAAAAAAAAAAAAAAAAAAAAMBm5SJiKJJc/lY6l8vnV3/D+8EYzJUr1dqhM5X5uamo/1b2SPTlskddDjc9D3Wi8Tz8LH/kjvyTEfFARHw4sD/JnqM41eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzoM3v/6d+Huj01gEAu2ZfpzcAANhz2n8A6D7afwDoPtp/AOg+2n8A6D7afwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZyRMn0mnlz+WlYpqfurAwP1O5cHiqVJ3Jz84X88WhOJefrlSmy6V8sTJ7t/9XrlTOTcbc/MXxWqlaG68uLJ6arczP1U6dnS1Ml06V+vYkKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYmurC4kyhXC6dl9hGYuX+2IzOJ3oah9MuFJFEROcD3HAL74/N2OFEhy9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8S/wQAAP//iZYeGw==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) 7.174520325s ago: executing program 2 (id=1387): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) close(0x3) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x19, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 6.512561355s ago: executing program 2 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d02000000000000000200000000000000000000000000000000000002"], &(0x7f0000000040)=""/202, 0x42, 0xca, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x11, &(0x7f00000001c0)={@remote, @local, @void, {@llc={0x4, {@llc={0x4e, 0x42, 't'}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009e173710ef171e7206de0102031d0902120001000000000904"], 0x0) 6.512363705s ago: executing program 9 (id=1393): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x2, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) 6.1849098s ago: executing program 9 (id=1396): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[], 0x24, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000280)='./bus\x00', 0xa0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 5.024504797s ago: executing program 0 (id=1398): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x7, 0x10001, 0xb, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x6}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socket$netlink(0x10, 0x3, 0xf) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRESOCT], 0x20) 4.348863057s ago: executing program 9 (id=1400): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xfd, 0xf5, 0x40000, @mcast2}, 0x1c, 0x0}, 0x20044b98) 4.236634318s ago: executing program 9 (id=1401): socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x48) 4.191306699s ago: executing program 4 (id=1402): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0xf, 0x2020}, 0x20) 4.181652649s ago: executing program 0 (id=1403): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000e10000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x913e0000) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, r2, 0x2000) 3.980656202s ago: executing program 4 (id=1404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 3.894058613s ago: executing program 0 (id=1405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x8000) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) socket$kcm(0x10, 0x0, 0x4) shutdown(0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 3.889606693s ago: executing program 4 (id=1406): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084) 3.308760032s ago: executing program 2 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff4affff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace35ee8b12c00", 0x48}], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009e173710ef171e7206de0102031d0902120001000000000904"], 0x0) 3.260772422s ago: executing program 7 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) stat(0x0, &(0x7f0000001c80)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x3cb9}, 0x18) fsopen(&(0x7f0000000440)='ext4\x00', 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000800)=@sr0, 0x0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0xb2, 0x1, 0x0, 0x0, 0xd, 0xffffffffffffffff, 0x20009}) 2.984555337s ago: executing program 0 (id=1409): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2.75657204s ago: executing program 7 (id=1410): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[], 0x24, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000280)='./bus\x00', 0xa0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 1.731498945s ago: executing program 0 (id=1411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x9, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xe, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x1, 0x6, 0xc, 0x2049b29, 0x6, 0x7f, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x6, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x5, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0x11, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x6, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0xfffffffe, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xa, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x88c}}, 0x20040000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 1.616343727s ago: executing program 4 (id=1412): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000002c0), 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000180)=0x401, 0x4) 1.611505987s ago: executing program 7 (id=1413): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}, {0x0}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0) 1.548617008s ago: executing program 4 (id=1414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000001440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @local, @rand_addr=0x640100fe}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1.497641579s ago: executing program 7 (id=1415): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x26020480) setsockopt$inet6_opts(r0, 0x29, 0x40, 0x0, 0xd0060) 1.37548018s ago: executing program 7 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x2004000) 1.314440471s ago: executing program 0 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d02000000000000000200000000000000000000000000000000000002"], &(0x7f0000000040)=""/202, 0x42, 0xca, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x11, &(0x7f00000001c0)={@remote, @local, @void, {@llc={0x4, {@llc={0x4e, 0x42, 't'}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009e173710ef171e7206de0102031d0902120001000000000904"], 0x0) 1.168588483s ago: executing program 7 (id=1418): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 195.647488ms ago: executing program 9 (id=1419): bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 134.579798ms ago: executing program 4 (id=1420): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 9 (id=1421): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x2, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x40020000) kernel console output (not intermixed with test programs): link becomes ready [ 378.284430][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.295714][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.396502][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.439502][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.504576][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.555016][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.568939][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.579950][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.656096][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.722993][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.774708][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.856214][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.981883][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.104425][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.294546][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.422181][ T7424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.472254][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.511075][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.536467][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.614716][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.674068][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.750389][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.811803][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.052091][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.061080][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.386283][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.469730][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.512613][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.521601][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.701500][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.725214][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.778723][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.798029][ T7632] loop1: detected capacity change from 0 to 512 [ 380.868550][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.954086][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.990924][ T7632] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 381.034294][ T7632] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.120915][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.744206][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.788672][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.697437][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.761733][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.796958][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.834175][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.937385][ T7636] lo speed is unknown, defaulting to 1000 [ 382.938990][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.098636][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.158587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.252953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.635306][ T7659] binder: 7657:7659 unknown command 779448419 [ 383.688559][ T7659] binder: 7657:7659 ioctl c0306201 2000000003c0 returned -22 [ 383.877998][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.893838][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.989747][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.294252][ T7674] loop5: detected capacity change from 0 to 256 [ 385.002781][ T7424] device veth0_vlan entered promiscuous mode [ 385.022495][ T7424] device veth1_vlan entered promiscuous mode [ 385.048414][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.092958][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.194552][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.319886][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.437653][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.452516][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.475081][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.248788][ T7424] device veth0_macvtap entered promiscuous mode [ 386.283028][ T7424] device veth1_macvtap entered promiscuous mode [ 386.323878][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.345051][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.454463][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.521271][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.716882][ T7699] loop5: detected capacity change from 0 to 2048 [ 387.060526][ T7699] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 387.876885][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.043631][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.192714][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.293622][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.363609][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.375963][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.633589][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.414617][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.546014][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.713769][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.920617][ T7714] loop2: detected capacity change from 0 to 2048 [ 390.180568][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.340368][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.492554][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.664164][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.828393][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.939186][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.098533][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.454850][ T7714] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.649647][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.009969][ T7424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.076111][ T7424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.126632][ T7721] loop5: detected capacity change from 0 to 512 [ 392.163671][ T7424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.221699][ T7721] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 392.235710][ T7424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.304763][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.332468][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.376801][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.408563][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.718249][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.781352][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.135233][ T7727] loop1: detected capacity change from 0 to 512 [ 393.452894][ T7727] EXT4-fs (loop1): 1 orphan inode deleted [ 393.459940][ T7727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 393.477031][ T7727] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.359581][ T4753] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.535652][ T4753] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.685920][ T7448] device veth0_vlan entered promiscuous mode [ 394.717228][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.754237][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 394.776681][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.807729][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.282814][ T4753] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.343616][ T4639] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 395.386405][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.416804][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.470695][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 395.487087][ T7448] device veth1_vlan entered promiscuous mode [ 395.585292][ T4753] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.599778][ T4639] usb 3-1: Using ep0 maxpacket: 16 [ 395.641687][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.654856][ T4639] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 395.680278][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.771360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 395.792620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 395.844353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.874547][ T7448] device veth0_macvtap entered promiscuous mode [ 395.942102][ T7448] device veth1_macvtap entered promiscuous mode [ 396.036967][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.067843][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.103479][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.125036][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.163501][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.202417][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.288927][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.335467][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.348849][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.360428][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.375200][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.390976][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.597926][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.215872][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.296029][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.315165][ T4639] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 397.338347][ T4639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.356480][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.371569][ T4639] r8152-cfgselector 3-1: config 0 descriptor?? [ 397.420991][ T4639] r8152-cfgselector 3-1: can't set config #0, error -71 [ 397.432857][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.486904][ T4639] r8152-cfgselector 3-1: Unknown version 0x0000 [ 397.503258][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.534979][ T4639] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 397.569953][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.654839][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.723366][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.818272][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.858079][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.890550][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.936265][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.977280][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.035586][ T7448] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.076868][ T7448] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.108573][ T7448] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.141970][ T7448] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.233809][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.295829][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.453788][ T7779] loop6: detected capacity change from 0 to 512 [ 399.542776][ T7779] EXT4-fs (loop6): Unrecognized mount option "fscontext=system_u" or missing value [ 399.899443][ T7786] syz.6.831[7786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.900221][ T7786] syz.6.831[7786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.936497][ T7786] fuse: Bad value for 'fd' [ 400.854787][ T7790] hub 2-0:1.0: USB hub found [ 400.860785][ T7790] hub 2-0:1.0: 1 port detected [ 400.897468][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.970649][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.276832][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.818086][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.853867][ T7797] loop1: detected capacity change from 0 to 512 [ 402.235710][ T7797] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 402.259295][ T7797] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.874009][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 403.117214][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 403.675618][ T7807] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 404.863868][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 405.148043][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 405.346197][ T23] usb 7-1: too many configurations: 29, using maximum allowed: 8 [ 405.763536][ T7829] process 'syz.5.842' launched './file0' with NULL argv: empty string added [ 405.844280][ T7831] loop5: detected capacity change from 0 to 128 [ 407.063953][ T7831] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 407.082023][ T7831] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 410.311212][ T7852] loop7: detected capacity change from 0 to 256 [ 411.457471][ T23] usb 7-1: unable to read config index 2 descriptor/start: -110 [ 411.530592][ T23] usb 7-1: can't read configurations, error -110 [ 411.675258][ T7854] hub 2-0:1.0: USB hub found [ 411.681153][ T7854] hub 2-0:1.0: 1 port detected [ 411.763542][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 411.993663][ T23] usb 7-1: device descriptor read/64, error -32 [ 412.116573][ T23] usb usb7-port1: attempt power cycle [ 412.744095][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 413.110612][ T7868] loop5: detected capacity change from 0 to 512 [ 413.207629][ T23] usb 7-1: device descriptor read/8, error -32 [ 413.463710][ T4316] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 413.563909][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 413.703717][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 413.734303][ T23] usb 7-1: device descriptor read/8, error -32 [ 413.753344][ T4316] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 413.854366][ T23] usb usb7-port1: unable to enumerate USB device [ 414.211613][ T7868] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 414.229122][ T7868] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.850584][ T7871] loop7: detected capacity change from 0 to 1024 [ 414.923859][ T4316] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 414.941320][ T7871] EXT4-fs (loop7): Test dummy encryption mode enabled [ 414.983381][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.033743][ T7871] EXT4-fs (loop7): inline encryption not supported [ 415.053356][ T4316] usb 3-1: Product: syz [ 415.058143][ T4316] usb 3-1: Manufacturer: syz [ 415.062871][ T4316] usb 3-1: SerialNumber: syz [ 415.151916][ T7871] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 415.226975][ T4316] r8152-cfgselector 3-1: config 0 descriptor?? [ 415.682036][ T4316] r8152-cfgselector 3-1: Unknown version 0x0000 [ 415.808663][ T7890] fuse: Bad value for 'fd' [ 415.844481][ T4316] r8152-cfgselector 3-1: Unknown version 0x0000 [ 416.420773][ T4316] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 416.767685][ T7898] loop5: detected capacity change from 0 to 256 [ 416.851657][ T7898] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.881400][ T4753] device hsr_slave_0 left promiscuous mode [ 416.896519][ T7898] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 416.930641][ T4753] device hsr_slave_1 left promiscuous mode [ 416.941678][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.990575][ T7898] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 417.083830][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.154296][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.173320][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.267045][ T4753] device bridge_slave_1 left promiscuous mode [ 417.299929][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.779000][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 417.779180][ T26] audit: type=1800 audit(1751615639.280:67): pid=7926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.855" name="file1" dev="loop5" ino=1048616 res=0 errno=0 [ 417.909805][ T4753] device bridge_slave_0 left promiscuous mode [ 417.974962][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.140790][ T4753] device veth1_macvtap left promiscuous mode [ 418.193690][ T4753] device veth0_macvtap left promiscuous mode [ 418.201285][ T4753] device veth1_vlan left promiscuous mode [ 418.245053][ T4753] device veth0_vlan left promiscuous mode [ 422.700577][ T7971] fuse: Bad value for 'fd' [ 423.456485][ T4302] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 423.582883][ T7974] loop6: detected capacity change from 0 to 1024 [ 423.705722][ T7974] EXT4-fs (loop6): Test dummy encryption mode enabled [ 423.723501][ T4302] usb 3-1: Using ep0 maxpacket: 16 [ 423.745808][ T7974] EXT4-fs (loop6): inline encryption not supported [ 423.763773][ T4302] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 423.813283][ T7974] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 423.966288][ T4753] team0 (unregistering): Port device team_slave_1 removed [ 424.044479][ T4753] team0 (unregistering): Port device team_slave_0 removed [ 424.125116][ T4753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.209386][ T4753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.424542][ T7983] fuse: Bad value for 'fd' [ 425.071534][ T4246] Bluetooth: hci4: command 0x0409 tx timeout [ 425.238931][ T4753] bond0 (unregistering): Released all slaves [ 425.464231][ T7987] loop7: detected capacity change from 0 to 2048 [ 427.104855][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 427.224656][ T7987] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 428.753730][ T4302] usb 3-1: unable to read config index 6 descriptor/start: -71 [ 428.804170][ T4302] usb 3-1: can't read configurations, error -71 [ 428.862911][ T7967] lo speed is unknown, defaulting to 1000 [ 429.943894][ T4639] Bluetooth: hci4: command 0x040f tx timeout [ 430.100522][ T8013] fuse: Bad value for 'fd' [ 430.794701][ T7967] chnl_net:caif_netlink_parms(): no params data found [ 430.795450][ T8012] loop7: detected capacity change from 0 to 512 [ 431.070560][ T8020] loop2: detected capacity change from 0 to 512 [ 431.085490][ T8012] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 431.125224][ T8012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 431.147016][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.187259][ T8012] System zones: 1-12 [ 431.192651][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.201483][ T8012] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2228: inode #15: comm syz.7.872: corrupted in-inode xattr [ 431.214895][ T8012] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.872: couldn't read orphan inode 15 (err -117) [ 431.251227][ T8012] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 431.275268][ T7967] device bridge_slave_0 entered promiscuous mode [ 431.292703][ T8020] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.877: casefold flag without casefold feature [ 431.343899][ T8020] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.877: couldn't read orphan inode 15 (err -117) [ 431.335994][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.423764][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.432677][ T8020] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 431.507365][ T7967] device bridge_slave_1 entered promiscuous mode [ 431.700408][ T7967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.762152][ T7967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.898260][ T7967] team0: Port device team_slave_0 added [ 431.900587][ T7967] team0: Port device team_slave_1 added [ 431.983701][ T4246] Bluetooth: hci4: command 0x0419 tx timeout [ 432.009440][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.009460][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.009487][ T7967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.011256][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.011271][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.011297][ T7967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.356418][ T7967] device hsr_slave_0 entered promiscuous mode [ 432.370870][ T7967] device hsr_slave_1 entered promiscuous mode [ 432.371476][ T7967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.371501][ T7967] Cannot create hsr debugfs directory [ 432.830383][ T8054] loop2: detected capacity change from 0 to 512 [ 433.243217][ T8061] device syzkaller0 entered promiscuous mode [ 433.307391][ T8065] syz.2.880[8065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.307961][ T8065] syz.2.880[8065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.149798][ T7967] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 434.294434][ T7967] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 434.356816][ T7967] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 434.518136][ T7967] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 435.264266][ T6965] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 435.529017][ T8087] loop2: detected capacity change from 0 to 2048 [ 436.848122][ T6965] usb 8-1: Using ep0 maxpacket: 16 [ 437.259361][ T8087] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 437.542272][ T6965] usb 8-1: too many configurations: 29, using maximum allowed: 8 [ 437.588949][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.735741][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.972372][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 438.827679][ T7967] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.935540][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 439.016440][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 439.056970][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.064189][ T7919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.138943][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 439.150179][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.160137][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.167689][ T7919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.176277][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 439.198638][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 439.212546][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 439.235559][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 439.272038][ T8109] siw: device registration error -23 [ 439.294099][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 439.313346][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 440.006029][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.012409][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.031494][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.050187][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.099376][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.129818][ T8114] loop5: detected capacity change from 0 to 512 [ 440.154860][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.210055][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.254357][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.301457][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 440.388032][ T8114] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.888: casefold flag without casefold feature [ 440.493645][ T8114] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.888: couldn't read orphan inode 15 (err -117) [ 440.643788][ T8114] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 440.755283][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.763101][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.838775][ T7967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.937392][ T8130] overlayfs: failed to resolve './file0': -2 [ 441.153609][ T6965] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 441.153649][ T6965] usb 8-1: can't read configurations, error -71 [ 441.292353][ T8141] loop6: detected capacity change from 0 to 256 [ 441.605186][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.680884][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.765950][ T8153] fuse: Bad value for 'fd' [ 442.600043][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.648065][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.674195][ T7967] device veth0_vlan entered promiscuous mode [ 442.702327][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.745259][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.793728][ T7967] device veth1_vlan entered promiscuous mode [ 442.926090][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.974034][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.142443][ T7967] device veth0_macvtap entered promiscuous mode [ 443.218681][ T7967] device veth1_macvtap entered promiscuous mode [ 443.297847][ T8176] siw: device registration error -23 [ 443.628525][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.741759][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.982768][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.055962][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.083529][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.095019][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.134551][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.161661][ T8181] loop7: detected capacity change from 0 to 512 [ 444.193450][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.223504][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.249457][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.288234][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.315797][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.349812][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.405903][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.463792][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.495643][ T8181] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.901: casefold flag without casefold feature [ 444.541227][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.574274][ T8181] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.901: couldn't read orphan inode 15 (err -117) [ 444.627405][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.650618][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.657624][ T8181] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 444.675348][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.816931][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.860173][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.871149][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.882278][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.892393][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.903145][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.917939][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.344096][ T4302] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 445.633749][ T4302] usb 3-1: Using ep0 maxpacket: 16 [ 445.674807][ T4302] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 445.733889][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.742817][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.805883][ T4753] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.913679][ T7967] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.913769][ T7967] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.913800][ T7967] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.913831][ T7967] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.017913][ T4753] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.080555][ T4753] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.249975][ T4753] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.292283][ T7774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.339554][ T7774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.353031][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 446.398422][ T7774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.454324][ T7774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.523843][ T4302] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 446.557703][ T7774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.573457][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.581609][ T4302] usb 3-1: Product: syz [ 446.610099][ T4302] usb 3-1: Manufacturer: syz [ 446.618989][ T4302] usb 3-1: SerialNumber: syz [ 446.671036][ T4302] r8152-cfgselector 3-1: config 0 descriptor?? [ 446.711288][ T4753] tipc: Left network mode [ 447.035844][ T8224] device syzkaller0 entered promiscuous mode [ 447.113773][ T8234] loop8: detected capacity change from 0 to 512 [ 447.307865][ T8234] EXT4-fs (loop8): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 447.370793][ T8234] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.593824][ T4254] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 448.003579][ T4302] r8152-cfgselector 3-1: Unknown version 0x0000 [ 448.023568][ T4302] r8152-cfgselector 3-1: Unknown version 0x0000 [ 448.031114][ T4254] usb 8-1: Using ep0 maxpacket: 16 [ 448.038180][ T4302] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 448.154605][ T4254] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.349600][ T4254] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.051404][ T8266] siw: device registration error -23 [ 449.993597][ T4254] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 450.043645][ T4254] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.113250][ T4254] usb 8-1: Product: syz [ 450.148169][ T4254] usb 8-1: Manufacturer: syz [ 450.194825][ T4254] usb 8-1: SerialNumber: syz [ 450.393763][ T4254] usb 8-1: cannot find UAC_HEADER [ 450.405320][ T4643] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 450.656282][ T4254] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 450.681883][ T4254] usb 8-1: USB disconnect, device number 4 [ 451.044463][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.463588][ T4643] usb 7-1: Using ep0 maxpacket: 16 [ 451.593716][ T4643] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.636424][ T4643] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.214030][ T4643] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.648491][ T4643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.680421][ T4643] usb 7-1: Product: syz [ 452.733492][ T4643] usb 7-1: Manufacturer: syz [ 452.739530][ T4643] usb 7-1: SerialNumber: syz [ 452.903620][ T4643] usb 7-1: can't set config #1, error -71 [ 452.913830][ T4643] usb 7-1: USB disconnect, device number 6 [ 454.013587][ T4639] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 454.038115][ T4753] device hsr_slave_0 left promiscuous mode [ 454.091279][ T4753] device hsr_slave_1 left promiscuous mode [ 454.154767][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.179175][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.224529][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.260690][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.309001][ T4639] usb 9-1: Using ep0 maxpacket: 16 [ 454.324353][ T4753] device bridge_slave_1 left promiscuous mode [ 454.330801][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.353801][ T4639] usb 9-1: too many configurations: 29, using maximum allowed: 8 [ 454.362854][ T4753] device bridge_slave_0 left promiscuous mode [ 454.371374][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.395867][ T4753] device veth1_macvtap left promiscuous mode [ 454.433064][ T4753] device veth0_macvtap left promiscuous mode [ 454.441052][ T4753] device veth1_vlan left promiscuous mode [ 454.453581][ T4753] device veth0_vlan left promiscuous mode [ 454.783933][ T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 455.043897][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 455.084062][ T7] usb 8-1: too many configurations: 29, using maximum allowed: 8 [ 455.163913][ T4639] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 455.190771][ T4639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.206660][ T4639] usb 9-1: Product: syz [ 455.215373][ T4639] usb 9-1: Manufacturer: syz [ 455.220940][ T4639] usb 9-1: SerialNumber: syz [ 455.248871][ T4639] r8152-cfgselector 9-1: config 0 descriptor?? [ 455.369568][ T4753] team0 (unregistering): Port device team_slave_1 removed [ 455.412560][ T4753] team0 (unregistering): Port device team_slave_0 removed [ 455.430144][ T4753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.814280][ T4753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.349691][ T4753] bond0 (unregistering): Released all slaves [ 457.165854][ T8320] device veth1_macvtap left promiscuous mode [ 457.194777][ T8320] device macsec0 entered promiscuous mode [ 457.234604][ T4639] r8152-cfgselector 9-1: Unknown version 0x0000 [ 457.273594][ T4639] r8152-cfgselector 9-1: Unknown version 0x0000 [ 457.314399][ T4639] r8152-cfgselector 9-1: USB disconnect, device number 2 [ 460.524030][ T7] usb 8-1: string descriptor 0 read error: -71 [ 460.531214][ T7] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 460.580714][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.630627][ T7] r8152-cfgselector 8-1: config 0 descriptor?? [ 460.683707][ T7] r8152-cfgselector 8-1: can't set config #0, error -71 [ 460.703717][ T7] r8152-cfgselector 8-1: Unknown version 0x0000 [ 460.760930][ T7] r8152-cfgselector 8-1: USB disconnect, device number 5 [ 463.949914][ T8411] loop8: detected capacity change from 0 to 512 [ 464.273822][ T8411] EXT4-fs (loop8): Ignoring removed nobh option [ 464.300970][ T8411] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.360981][ T8411] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.943: iget: bad i_size value: 38620345925642 [ 464.455555][ T8424] overlayfs: failed to clone upperpath [ 464.479625][ T8411] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.943: couldn't read orphan inode 15 (err -117) [ 464.491564][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 464.532550][ T8411] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 464.764432][ T8411] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz.8.943: iget: bad i_size value: 38620345925642 [ 464.783130][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 465.393580][ T7] usb 7-1: too many configurations: 29, using maximum allowed: 8 [ 465.691891][ T8445] loop8: detected capacity change from 0 to 1024 [ 465.810189][ T8445] EXT4-fs (loop8): Test dummy encryption mode enabled [ 465.833739][ T7] usb 7-1: unable to read config index 3 descriptor/all [ 465.849172][ T7] usb 7-1: can't read configurations, error -71 [ 465.864324][ T8445] EXT4-fs (loop8): inline encryption not supported [ 466.078388][ T8445] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 466.253568][ T4302] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 466.993589][ T8461] fuse: Bad value for 'fd' [ 467.633570][ T4302] usb 8-1: Using ep0 maxpacket: 16 [ 467.683785][ T4302] usb 8-1: too many configurations: 29, using maximum allowed: 8 [ 467.808668][ T8470] loop6: detected capacity change from 0 to 512 [ 469.118648][ T8470] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 469.135587][ T8470] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.136907][ T8497] lo speed is unknown, defaulting to 1000 [ 470.833094][ T8502] loop6: detected capacity change from 0 to 2048 [ 470.993951][ T8502] loop6: p3 p4 < > [ 471.303908][ T7] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 471.563680][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 471.565324][ T21] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 471.583936][ T4302] usb 8-1: unable to read config index 1 descriptor/start: -71 [ 471.635433][ T4302] usb 8-1: can't read configurations, error -71 [ 471.683856][ T7] usb 7-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 471.723722][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.923656][ T7] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.981867][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.043667][ T7] usb 7-1: Product: syz [ 472.049467][ T21] usb 9-1: Using ep0 maxpacket: 16 [ 472.113794][ T21] usb 9-1: too many configurations: 29, using maximum allowed: 8 [ 472.114022][ T7] usb 7-1: Manufacturer: syz [ 472.168543][ T7] usb 7-1: SerialNumber: syz [ 472.768036][ T7] usb 7-1: 0:2 : does not exist [ 472.981509][ T8537] loop7: detected capacity change from 0 to 1024 [ 473.033970][ T21] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 473.094792][ T21] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.103961][ T8537] EXT4-fs (loop7): Test dummy encryption mode enabled [ 473.111565][ T8537] EXT4-fs (loop7): inline encryption not supported [ 473.164667][ T21] usb 9-1: Product: syz [ 473.168958][ T21] usb 9-1: Manufacturer: syz [ 473.214122][ T21] usb 9-1: SerialNumber: syz [ 473.246105][ T8502] xt_connbytes: Forcing CT accounting to be enabled [ 473.254745][ T8502] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 473.264002][ T21] r8152-cfgselector 9-1: config 0 descriptor?? [ 473.275927][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.6.958'. [ 473.285381][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.6.958'. [ 473.306083][ T8537] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 473.481032][ T8502] lo speed is unknown, defaulting to 1000 [ 474.660382][ T23] usb 7-1: USB disconnect, device number 9 [ 475.654673][ T8567] loop7: detected capacity change from 0 to 512 [ 475.737160][ T8567] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 475.753168][ T8567] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.846903][ T26] audit: type=1326 audit(1751615697.350:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 475.943671][ T21] r8152-cfgselector 9-1: Unknown version 0x0000 [ 475.973697][ T21] r8152-cfgselector 9-1: Unknown version 0x0000 [ 475.987098][ T26] audit: type=1326 audit(1751615697.410:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 476.003413][ T21] r8152-cfgselector 9-1: USB disconnect, device number 3 [ 476.096754][ T26] audit: type=1326 audit(1751615697.470:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 476.189374][ T26] audit: type=1326 audit(1751615697.530:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 476.504074][ T26] audit: type=1326 audit(1751615697.590:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 476.538448][ T26] audit: type=1326 audit(1751615697.650:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 476.614595][ T26] audit: type=1326 audit(1751615697.710:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 477.404587][ T26] audit: type=1326 audit(1751615697.780:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 477.435079][ T26] audit: type=1326 audit(1751615698.070:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e9607929 code=0x7fc00000 [ 477.612228][ T8600] device syzkaller0 entered promiscuous mode [ 477.668138][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 477.783213][ T8602] loop7: detected capacity change from 0 to 1024 [ 478.712515][ T8602] EXT4-fs (loop7): Test dummy encryption mode enabled [ 478.719942][ T8602] EXT4-fs (loop7): inline encryption not supported [ 479.114077][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 479.137942][ T8602] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 479.153838][ T7] usb 7-1: too many configurations: 29, using maximum allowed: 8 [ 480.063650][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 480.071304][ T7] usb 7-1: can't read configurations, error -71 [ 480.302196][ T8632] fuse: Bad value for 'fd' [ 480.555254][ T8638] loop2: detected capacity change from 0 to 16 [ 480.841578][ T8638] erofs: (device loop2): mounted with root inode @ nid 36. [ 480.917670][ T8638] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 20 of nid 36 [ 480.952633][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 481.013550][ T8638] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 481.065045][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 481.116161][ T8638] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 481.225588][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 481.275846][ T8652] loop7: detected capacity change from 0 to 512 [ 481.308218][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 481.406632][ T8652] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 481.422587][ T8652] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.453510][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 481.538265][ T8638] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 90111 of nid 36 [ 481.634096][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 481.714374][ T8638] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 86015 of nid 36 [ 481.790351][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 481.879377][ T8638] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 81919 of nid 36 [ 482.019293][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 482.099887][ T8638] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 77823 of nid 36 [ 482.179998][ T8660] loop8: detected capacity change from 0 to 512 [ 482.194751][ T8638] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 482.242061][ T8638] attempt to access beyond end of device [ 482.242061][ T8638] loop2: rw=524288, want=67108896, limit=16 [ 482.447154][ T8638] attempt to access beyond end of device [ 482.447154][ T8638] loop2: rw=524288, want=736, limit=16 [ 482.460329][ T8638] attempt to access beyond end of device [ 482.460329][ T8638] loop2: rw=524288, want=744, limit=16 [ 482.482255][ T8638] attempt to access beyond end of device [ 482.482255][ T8638] loop2: rw=524288, want=525160, limit=16 [ 483.032017][ T4302] Bluetooth: hci1: command 0x0406 tx timeout [ 483.054000][ T8638] attempt to access beyond end of device [ 483.054000][ T8638] loop2: rw=524288, want=525168, limit=16 [ 483.093948][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 483.096402][ T8638] attempt to access beyond end of device [ 483.096402][ T8638] loop2: rw=524288, want=24, limit=16 [ 483.216317][ T8660] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.989: casefold flag without casefold feature [ 483.234322][ T8660] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.989: couldn't read orphan inode 15 (err -117) [ 483.238493][ T8638] attempt to access beyond end of device [ 483.238493][ T8638] loop2: rw=524288, want=32, limit=16 [ 483.257723][ T8638] attempt to access beyond end of device [ 483.257723][ T8638] loop2: rw=524288, want=13478624056, limit=16 [ 483.373471][ T8660] EXT4-fs (loop8): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 485.903893][ T4233] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 486.163768][ T4233] usb 3-1: Using ep0 maxpacket: 16 [ 486.204726][ T4233] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 486.713693][ T8694] loop8: detected capacity change from 0 to 1024 [ 486.768260][ T8694] EXT4-fs (loop8): Test dummy encryption mode enabled [ 486.793647][ T8694] EXT4-fs (loop8): inline encryption not supported [ 486.984079][ T8694] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 488.408730][ T8717] loop7: detected capacity change from 0 to 512 [ 488.592438][ T8717] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 488.610556][ T8717] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.820469][ T8723] loop2: detected capacity change from 0 to 1024 [ 489.742058][ T8723] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 489.789225][ T8723] EXT4-fs (loop2): Ignoring removed bh option [ 489.816147][ T8723] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 490.274324][ T8723] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 490.510283][ T4233] usb 3-1: string descriptor 0 read error: -71 [ 490.929130][ T4233] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 490.938509][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.966494][ T4233] r8152-cfgselector 3-1: config 0 descriptor?? [ 490.994410][ T4233] r8152-cfgselector 3-1: can't set config #0, error -71 [ 491.053665][ T4233] r8152-cfgselector 3-1: Unknown version 0x0000 [ 491.101939][ T4233] r8152-cfgselector 3-1: USB disconnect, device number 21 [ 491.737482][ T8754] loop6: detected capacity change from 0 to 512 [ 491.873791][ T8754] EXT4-fs (loop6): 1 orphan inode deleted [ 491.880400][ T8754] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 491.890937][ T8759] loop7: detected capacity change from 0 to 512 [ 491.893309][ T8754] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.987825][ T8759] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1007: casefold flag without casefold feature [ 492.117572][ T8759] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1007: couldn't read orphan inode 15 (err -117) [ 492.200050][ T8759] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 498.287520][ T8829] loop7: detected capacity change from 0 to 1024 [ 498.573478][ T4643] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 498.797265][ T8829] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 499.003461][ T8829] EXT4-fs (loop7): Ignoring removed bh option [ 499.204470][ T8839] fuse: Bad value for 'fd' [ 499.232221][ T8829] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 499.987674][ T8829] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 500.188363][ T8845] loop8: detected capacity change from 0 to 512 [ 500.421839][ T8845] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.1024: casefold flag without casefold feature [ 500.575547][ T8845] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1024: couldn't read orphan inode 15 (err -117) [ 500.799829][ T8845] EXT4-fs (loop8): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 501.430079][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.430301][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.035108][ T4643] usb 3-1: device descriptor read/64, error -110 [ 504.340177][ T4643] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 504.674838][ T4643] usb 3-1: device descriptor read/64, error -32 [ 505.713596][ T4643] usb usb3-port1: attempt power cycle [ 506.433109][ T8895] fuse: Bad value for 'fd' [ 506.731317][ T8906] loop2: detected capacity change from 0 to 1024 [ 506.931277][ T8906] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 506.953480][ T8906] EXT4-fs (loop2): Ignoring removed bh option [ 507.000389][ T8906] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 507.087143][ T8906] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 508.405384][ T8929] fuse: Bad value for 'fd' [ 509.445699][ T8931] lo speed is unknown, defaulting to 1000 [ 510.896298][ T8957] syz.5.1045[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.896404][ T8957] syz.5.1045[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.786386][ T4302] Bluetooth: hci2: command 0x0409 tx timeout [ 513.169595][ T8931] chnl_net:caif_netlink_parms(): no params data found [ 513.560331][ T8970] fuse: Bad value for 'fd' [ 514.599395][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.621238][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.632538][ T8931] device bridge_slave_0 entered promiscuous mode [ 514.653686][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.856452][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.931068][ T8931] device bridge_slave_1 entered promiscuous mode [ 515.034118][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 515.147653][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.200891][ T8981] loop2: detected capacity change from 0 to 512 [ 515.985270][ T8981] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1050: casefold flag without casefold feature [ 516.078085][ T8981] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1050: couldn't read orphan inode 15 (err -117) [ 516.245425][ T8981] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 517.416132][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.613896][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 517.722160][ T8931] team0: Port device team_slave_0 added [ 517.826264][ T8931] team0: Port device team_slave_1 added [ 518.938741][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.971359][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.063120][ T8931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.087546][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.108349][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.142246][ T8931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.162748][ T9020] loop2: detected capacity change from 0 to 128 [ 519.189565][ T7915] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.215176][ T4233] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 519.250588][ T9020] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 519.293056][ T9020] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 519.366050][ T8931] device hsr_slave_0 entered promiscuous mode [ 519.431682][ T8931] device hsr_slave_1 entered promiscuous mode [ 519.487129][ T4233] usb 8-1: Using ep0 maxpacket: 8 [ 519.758021][ T9027] loop8: detected capacity change from 0 to 2048 [ 519.772207][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 519.929234][ T7915] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.824976][ T4233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.089579][ T4233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 522.093981][ T7915] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.099728][ T4233] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 522.119625][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.141870][ T9027] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.813887][ T4233] usb 8-1: can't set config #1, error -71 [ 522.821310][ T4233] usb 8-1: USB disconnect, device number 8 [ 523.656910][ T7915] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.790508][ T8931] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 526.035746][ T8931] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 526.101030][ T8931] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 526.953057][ T8931] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 528.121189][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.141877][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.177485][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 528.330518][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 529.808749][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 529.865004][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 529.912988][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.921183][ T7919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.182331][ T4246] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 530.214352][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 530.245857][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.294436][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.331825][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.339783][ T7919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.377225][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 530.430778][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 530.489333][ T4246] usb 3-1: device descriptor read/64, error -71 [ 530.545268][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 530.637766][ T9133] siw: device registration error -23 [ 530.733307][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 530.804128][ T4246] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 531.084665][ T4246] usb 3-1: device descriptor read/64, error -71 [ 531.354849][ T8931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.427655][ T8931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.444527][ T4246] usb usb3-port1: attempt power cycle [ 531.474362][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.490038][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.525223][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.547650][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.582741][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.613615][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.641823][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.659202][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.867043][ T9151] lo speed is unknown, defaulting to 1000 [ 532.889469][ T9153] serio: Serial port ptm0 [ 533.119702][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.148464][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.180714][ T8931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.223780][ T7915] device hsr_slave_0 left promiscuous mode [ 533.249165][ T7915] device hsr_slave_1 left promiscuous mode [ 533.282536][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.334889][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.388070][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.406653][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.444365][ T7915] device bridge_slave_1 left promiscuous mode [ 533.461796][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.502062][ T7915] device bridge_slave_0 left promiscuous mode [ 533.527002][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.607169][ T7915] device veth1_macvtap left promiscuous mode [ 533.613292][ T7915] device veth0_macvtap left promiscuous mode [ 533.653901][ T7915] device veth1_vlan left promiscuous mode [ 533.693473][ T7915] device veth0_vlan left promiscuous mode [ 533.826662][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1087'. [ 534.488432][ T9184] loop7: detected capacity change from 0 to 512 [ 534.909872][ T9184] EXT4-fs (loop7): 1 orphan inode deleted [ 535.079209][ T9184] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 535.426633][ T9184] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.678421][ T9204] loop2: detected capacity change from 0 to 512 [ 535.817161][ T9204] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1093: casefold flag without casefold feature [ 535.863094][ T9204] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1093: couldn't read orphan inode 15 (err -117) [ 535.883096][ T9204] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 536.189274][ T7915] team0 (unregistering): Port device team_slave_1 removed [ 536.216285][ T7915] team0 (unregistering): Port device team_slave_0 removed [ 536.255547][ T7915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.290094][ T7915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.704775][ T7915] bond0 (unregistering): Released all slaves [ 538.137700][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 538.187047][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.569020][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 538.606888][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.673974][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.712066][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.742354][ T8931] device veth0_vlan entered promiscuous mode [ 538.788126][ T8931] device veth1_vlan entered promiscuous mode [ 538.902205][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 538.928436][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 538.984270][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 539.036547][ T9262] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.040408][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.108888][ T9262] FAT-fs (loop17): unable to read boot sector [ 539.132783][ T8931] device veth0_macvtap entered promiscuous mode [ 539.167801][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 539.202202][ T8931] device veth1_macvtap entered promiscuous mode [ 539.307740][ T9263] loop8: detected capacity change from 0 to 2048 [ 539.331007][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.362547][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.421481][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.498275][ T9263] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 539.540605][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.645898][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.692298][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.710101][ T9242] loop2: detected capacity change from 0 to 40427 [ 539.723426][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.764456][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.796917][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.846958][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 539.877978][ T9242] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 539.908483][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 539.923983][ T9242] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 539.956090][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.009453][ T9242] F2FS-fs (loop2): Found nat_bits in checkpoint [ 540.033309][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.079650][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.123423][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.166672][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.209999][ T9242] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 540.217838][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.233676][ T9242] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 540.251948][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.283473][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.283592][ T21] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 540.317538][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.358417][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 540.370323][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 540.389968][ T8931] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.406279][ T4185] attempt to access beyond end of device [ 540.406279][ T4185] loop2: rw=2049, want=45104, limit=40427 [ 540.427006][ T8931] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.444191][ T8931] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.455883][ T8931] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.690306][ T7919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.724212][ T21] usb 9-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 540.739944][ T7919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.758034][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.782463][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 540.829734][ T21] usb 9-1: config 0 descriptor?? [ 540.898190][ T7906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.920202][ T7906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.995046][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 541.488798][ T21] microsoft 0003:045E:00F9.0004: unknown main item tag 0x0 [ 541.496910][ T21] microsoft 0003:045E:00F9.0004: unknown main item tag 0x0 [ 541.506900][ T21] microsoft 0003:045E:00F9.0004: hidraw0: USB HID v1.01 Device [HID 045e:00f9] on usb-dummy_hcd.8-1/input0 [ 541.518497][ T21] microsoft 0003:045E:00F9.0004: no inputs found [ 541.524954][ T21] microsoft 0003:045E:00F9.0004: could not initialize ff, continuing anyway [ 542.289834][ T21] usb 9-1: USB disconnect, device number 4 [ 542.449970][ T9289] fido_id[9289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 542.554570][ T9295] loop7: detected capacity change from 0 to 512 [ 542.674372][ T9295] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1110: casefold flag without casefold feature [ 542.785581][ T9295] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1110: couldn't read orphan inode 15 (err -117) [ 542.811611][ T9295] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 544.755645][ T9318] loop9: detected capacity change from 0 to 2048 [ 545.003777][ T9318] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 545.114213][ T9318] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 545.298053][ T9334] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1116: bg 0: block 234: padding at end of block bitmap is not set [ 545.476457][ T9334] EXT4-fs (loop9): Remounting filesystem read-only [ 545.515317][ T9338] device syzkaller0 entered promiscuous mode [ 546.064850][ T9349] loop8: detected capacity change from 0 to 512 [ 546.075615][ T9351] fuse: Bad value for 'fd' [ 546.231525][ T9349] EXT4-fs (loop8): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 546.283741][ T9349] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 546.330925][ T7903] Bluetooth: hci0: Frame reassembly failed (-84) [ 546.340238][ T7903] Bluetooth: hci0: Frame reassembly failed (-84) [ 546.385495][ T9366] loop7: detected capacity change from 0 to 512 [ 546.506433][ T9366] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1128: casefold flag without casefold feature [ 546.631319][ T9366] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1128: couldn't read orphan inode 15 (err -117) [ 546.774882][ T9366] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,usrjquota=,,errors=continue. Quota mode: writeback. [ 547.457880][ T9371] loop9: detected capacity change from 0 to 40427 [ 547.520034][ T9371] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 547.560239][ T9371] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 547.618674][ T9371] F2FS-fs (loop9): invalid crc value [ 547.665644][ T9371] F2FS-fs (loop9): Found nat_bits in checkpoint [ 547.844188][ T9371] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 547.865000][ T9371] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 548.383497][ T4246] Bluetooth: hci0: command 0x1003 tx timeout [ 548.390068][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 548.639525][ T9440] siw: device registration error -23 [ 549.583666][ T4246] Bluetooth: hci4: command 0x0406 tx timeout [ 550.463726][ T4246] Bluetooth: hci0: command 0x1001 tx timeout [ 550.469969][ T4199] Bluetooth: hci0: sending frame failed (-49) [ 551.388515][ T9483] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 552.543710][ T4302] Bluetooth: hci0: command 0x1009 tx timeout [ 556.310560][ T9525] loop9: detected capacity change from 0 to 1024 [ 559.337646][ T9525] EXT4-fs: failed to create workqueue [ 559.344667][ T9525] EXT4-fs (loop9): mount failed [ 563.419842][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.426865][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.506600][ T9552] siw: device registration error -23 [ 564.048951][ T9561] lo speed is unknown, defaulting to 1000 [ 565.286777][ T9561] chnl_net:caif_netlink_parms(): no params data found [ 565.794255][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.824111][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.865500][ T9561] device bridge_slave_0 entered promiscuous mode [ 565.910425][ T9587] lo speed is unknown, defaulting to 1000 [ 565.918008][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.944517][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.973188][ T9561] device bridge_slave_1 entered promiscuous mode [ 566.063697][ T6965] Bluetooth: hci0: command 0x0409 tx timeout [ 566.168534][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.239100][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.388882][ T9561] team0: Port device team_slave_0 added [ 566.524684][ T9561] team0: Port device team_slave_1 added [ 566.666806][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.723608][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.783807][ T9561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.856738][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.893499][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.013737][ T9561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.068173][ T9587] chnl_net:caif_netlink_parms(): no params data found [ 567.229903][ T9561] device hsr_slave_0 entered promiscuous mode [ 567.258139][ T9561] device hsr_slave_1 entered promiscuous mode [ 567.283479][ T9561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.333987][ T9561] Cannot create hsr debugfs directory [ 567.410761][ T9615] loop9: detected capacity change from 0 to 512 [ 567.513272][ T9615] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 567.574387][ T9615] EXT4-fs (loop9): Unrecognized mount option "seclabel" or missing value [ 567.583496][ T4331] Bluetooth: hci6: command 0x0409 tx timeout [ 567.722984][ T7915] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.855458][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.891060][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.266967][ T6965] Bluetooth: hci0: command 0x041b tx timeout [ 568.348736][ T9587] device bridge_slave_0 entered promiscuous mode [ 568.392993][ T9605] loop7: detected capacity change from 0 to 40427 [ 568.426496][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.451829][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.526416][ T9605] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 568.541540][ T9587] device bridge_slave_1 entered promiscuous mode [ 568.557961][ T9605] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 568.568688][ T7915] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.613893][ T9605] F2FS-fs (loop7): invalid crc value [ 568.737634][ T9605] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 568.798788][ T7915] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.817929][ T9605] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 569.001214][ T9587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.018537][ T9605] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 569.026118][ T9605] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 569.479735][ T9587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.714884][ T9644] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 569.780740][ T21] Bluetooth: hci6: command 0x041b tx timeout [ 570.294179][ T7915] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.305152][ T6965] Bluetooth: hci0: command 0x040f tx timeout [ 571.057354][ T9587] team0: Port device team_slave_0 added [ 571.142535][ T9587] team0: Port device team_slave_1 added [ 571.174770][ T9653] siw: device registration error -23 [ 572.032949][ T6965] Bluetooth: hci6: command 0x040f tx timeout [ 572.080743][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.089178][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.143396][ T9587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.256505][ T9663] loop7: detected capacity change from 0 to 256 [ 572.302380][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.346619][ T9663] FAT-fs (loop7): "posix" option is obsolete, not supported now [ 572.374374][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.401216][ T6965] Bluetooth: hci0: command 0x0419 tx timeout [ 572.412948][ T9587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.432048][ T4331] Bluetooth: hci6: command 0x0419 tx timeout [ 574.765961][ T9676] loop9: detected capacity change from 0 to 256 [ 574.870988][ T9676] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 574.903635][ T9667] lo speed is unknown, defaulting to 1000 [ 575.060740][ T9587] device hsr_slave_0 entered promiscuous mode [ 575.124713][ T9587] device hsr_slave_1 entered promiscuous mode [ 575.169826][ T9587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.198907][ T9587] Cannot create hsr debugfs directory [ 575.248338][ T9683] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.262621][ T9682] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 575.288115][ T9683] FAT-fs (loop15): unable to read boot sector [ 577.695891][ T9696] syz.9.1177[9696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.695996][ T9696] syz.9.1177[9696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.716301][ T9696] loop9: detected capacity change from 0 to 256 [ 577.759272][ T9696] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 577.770163][ T9696] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 577.786409][ T9696] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 578.170864][ T9700] siw: device registration error -23 [ 579.524676][ T9710] loop2: detected capacity change from 0 to 512 [ 579.627936][ T9710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 579.897583][ T9710] EXT4-fs (loop2): 1 truncate cleaned up [ 579.903840][ T9710] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 580.815741][ T9716] syz.7.1183[9716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 580.815861][ T9716] syz.7.1183[9716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 580.833703][ T9716] loop7: detected capacity change from 0 to 256 [ 580.940114][ T9716] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 580.950883][ T9716] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 580.971746][ T9716] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 581.659726][ T9723] loop9: detected capacity change from 0 to 1024 [ 581.739411][ T7915] device hsr_slave_0 left promiscuous mode [ 581.757803][ T7915] device hsr_slave_1 left promiscuous mode [ 581.772401][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.780464][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.799496][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.821289][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.830998][ T9723] EXT4-fs (loop9): Ignoring removed bh option [ 581.831706][ T7915] device bridge_slave_1 left promiscuous mode [ 581.844128][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.865817][ T7915] device bridge_slave_0 left promiscuous mode [ 581.872971][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.996877][ T7915] device veth0_macvtap left promiscuous mode [ 582.012720][ T7915] device veth1_vlan left promiscuous mode [ 582.038388][ T7915] device veth0_vlan left promiscuous mode [ 582.548147][ T9723] loop9: detected capacity change from 0 to 512 [ 583.122029][ T9723] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 583.122029][ T9723] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 583.122029][ T9723] [ 583.173022][ T9723] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 583.218431][ T9723] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 583.441234][ T7915] team0 (unregistering): Port device team_slave_1 removed [ 583.589405][ T7915] team0 (unregistering): Port device team_slave_0 removed [ 583.630758][ T7915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.647794][ T7915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.784643][ T9734] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 583.808427][ T7915] bond0 (unregistering): Released all slaves [ 583.960459][ T9723] loop9: detected capacity change from 0 to 40427 [ 584.074851][ T9561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 584.103541][ T9737] loop2: detected capacity change from 0 to 128 [ 584.125916][ T9561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.143180][ T9723] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 584.164351][ T9561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.171731][ T9723] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 584.219982][ T9561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.248918][ T9723] F2FS-fs (loop9): invalid crc value [ 584.258484][ T9738] attempt to access beyond end of device [ 584.258484][ T9738] loop2: rw=2049, want=417, limit=128 [ 584.345016][ T9737] attempt to access beyond end of device [ 584.345016][ T9737] loop2: rw=524288, want=369, limit=128 [ 584.373951][ T9723] F2FS-fs (loop9): Found nat_bits in checkpoint [ 584.424284][ T9737] attempt to access beyond end of device [ 584.424284][ T9737] loop2: rw=0, want=153, limit=128 [ 584.484143][ T9737] attempt to access beyond end of device [ 584.484143][ T9737] loop2: rw=0, want=153, limit=128 [ 584.495496][ T9587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 584.575400][ T9737] attempt to access beyond end of device [ 584.575400][ T9737] loop2: rw=0, want=153, limit=128 [ 584.601279][ T9587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 584.611576][ T9723] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 584.630637][ T9723] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 584.653932][ T9737] attempt to access beyond end of device [ 584.653932][ T9737] loop2: rw=0, want=153, limit=128 [ 584.674043][ T9587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 584.735122][ T9587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 584.812506][ T9750] loop2: detected capacity change from 0 to 512 [ 585.138384][ T9750] EXT4-fs (loop2): 1 orphan inode deleted [ 585.155516][ T9750] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 585.169159][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.274867][ T9750] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.307560][ T9763] siw: device registration error -23 [ 585.726368][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 585.903557][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.998042][ T9561] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.694968][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.768192][ T9773] syz.7.1194[9773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.768796][ T9773] syz.7.1194[9773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.111800][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 587.261044][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.268380][ T4702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.327811][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 587.374527][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.418693][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.426030][ T4702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.477870][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 587.521380][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 587.568660][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 587.604541][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 587.644374][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 587.704263][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 587.783726][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.791940][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.031082][ T9561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.568928][ T9779] loop2: detected capacity change from 0 to 2048 [ 588.944243][ T9779] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 589.404033][ T9561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.665295][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 589.699895][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 589.730116][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 590.685545][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 590.997164][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 591.889937][ T9791] loop9: detected capacity change from 0 to 512 [ 592.002245][ T9791] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,norecovery,bsdgroups,. Quota mode: writeback. [ 592.005335][ T9587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.017306][ T9791] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 592.211792][ T9587] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.372734][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 592.409943][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 592.688618][ T23] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 592.790621][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 593.130787][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 593.139825][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.147060][ T9385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.210050][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 593.219429][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.228640][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.236232][ T9385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.245492][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 593.254961][ T23] usb 10-1: Using ep0 maxpacket: 32 [ 593.274438][ T9385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 593.292076][ T9810] lo speed is unknown, defaulting to 1000 [ 593.314314][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 593.393890][ T23] usb 10-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 593.410401][ T23] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.424763][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.444932][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.463460][ T23] usb 10-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 593.472651][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.489959][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 593.514578][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.529592][ T23] usb 10-1: config 0 descriptor?? [ 593.535976][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 593.567888][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.600176][ T23] usb 10-1: bad CDC descriptors [ 593.608034][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.674589][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.695387][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 593.708310][ T4302] usb 10-1: USB disconnect, device number 2 [ 593.722844][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 593.761492][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 593.886082][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 593.938893][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.187664][ T9807] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 594.297977][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.344868][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.365735][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.396514][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.435604][ T9561] device veth0_vlan entered promiscuous mode [ 594.537882][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.580657][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 595.603273][ T9587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.112723][ T9561] device veth1_vlan entered promiscuous mode [ 596.175531][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 596.183183][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 596.606806][ T9587] device veth0_vlan entered promiscuous mode [ 596.633018][ T9855] loop7: detected capacity change from 0 to 40427 [ 596.645219][ T9587] device veth1_vlan entered promiscuous mode [ 596.674614][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 596.799976][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 596.809598][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 596.811044][ T9855] F2FS-fs (loop7): Found nat_bits in checkpoint [ 596.819752][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 596.833167][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 596.842946][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 596.864805][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 596.892221][ T9855] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 596.926050][ T9561] device veth0_macvtap entered promiscuous mode [ 596.940027][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 596.966311][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 597.002476][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 597.055076][ T9871] overlayfs: failed to resolve './file1': -2 [ 597.876182][ T9587] device veth0_macvtap entered promiscuous mode [ 597.944402][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 597.984229][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 598.014686][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 598.044216][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 598.121627][ T9561] device veth1_macvtap entered promiscuous mode [ 598.153080][ T9587] device veth1_macvtap entered promiscuous mode [ 598.252481][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.348994][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.451011][ T9879] loop2: detected capacity change from 0 to 4096 [ 598.489330][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.555493][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.565791][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.577118][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.580311][ T9879] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 598.587087][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.587109][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.589129][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.602529][ T7448] attempt to access beyond end of device [ 598.602529][ T7448] loop7: rw=2049, want=45104, limit=40427 [ 598.658040][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.706409][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.716556][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.727341][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.737354][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.748359][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.758747][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.894329][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.936473][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.980275][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 599.004678][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 599.244603][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 599.742523][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 600.136410][ T9561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.147123][ T9561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.156680][ T9561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.166294][ T9561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.185192][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.198393][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.212929][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.235559][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.246493][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.257383][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.270065][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.280891][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.280925][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.280942][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.283196][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.330547][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 600.345824][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 600.371805][ T7915] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.396328][ T21] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 600.398354][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.426081][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.444261][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.461499][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.471908][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.483051][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.493911][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.511935][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.523894][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.541469][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.571227][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.651572][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 600.661323][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 600.687685][ T9587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.881488][ T9587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.894872][ T21] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.965683][ T21] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 601.011969][ T9587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.121032][ T9587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.254525][ T21] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.433913][ T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.442621][ T21] usb 8-1: Product: syz [ 601.484135][ T21] usb 8-1: Manufacturer: syz [ 601.499236][ T21] usb 8-1: SerialNumber: syz [ 601.538113][ T7915] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.555065][ T21] cdc_mbim 8-1:1.0: skipping garbage [ 601.678270][ T7915] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.757581][ T9894] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 601.804654][ T7915] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.822807][ T9911] loop2: detected capacity change from 0 to 1024 [ 601.842398][ T9387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.883211][ T9387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.898365][ T9911] EXT4-fs (loop2): Test dummy encryption mode enabled [ 601.932151][ T9911] EXT4-fs (loop2): inline encryption not supported [ 601.940217][ T7928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.975301][ T7919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 601.987956][ T7928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.002984][ T9911] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 602.078755][ T7928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.088120][ T7928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.117802][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.147806][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 602.214688][ T9387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.228245][ T9387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.263655][ T21] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS [ 602.270407][ T21] cdc_mbim 8-1:1.0: bind() failure [ 602.276765][ T7928] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 602.318185][ T21] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 602.333122][ T21] cdc_ncm 8-1:1.1: bind() failure [ 602.747509][ T9940] device veth0_to_bridge entered promiscuous mode [ 603.387367][ T9940] loop2: detected capacity change from 0 to 512 [ 603.476384][ T9940] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 603.538902][ T9935] lo speed is unknown, defaulting to 1000 [ 603.595483][ T9940] EXT4-fs (loop2): 1 truncate cleaned up [ 603.608874][ T9940] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000012,i_version,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 603.681433][ T9939] device veth0_to_bridge left promiscuous mode [ 604.874262][ T9965] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 604.910507][ T21] usb 8-1: USB disconnect, device number 9 [ 605.151816][ T9973] loop0: detected capacity change from 0 to 1024 [ 605.243075][ T9973] EXT4-fs (loop0): Test dummy encryption mode enabled [ 605.366975][ T9973] EXT4-fs (loop0): inline encryption not supported [ 605.568202][ T9973] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 605.599138][ T9986] loop2: detected capacity change from 0 to 512 [ 605.670197][ T9986] EXT4-fs (loop2): Test dummy encryption mode enabled [ 605.715157][ T9986] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 605.860748][ T9993] loop9: detected capacity change from 0 to 2048 [ 606.124005][ T9986] EXT4-fs (loop2): 1 truncate cleaned up [ 606.196842][ T9993] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 607.202929][ T9986] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 607.996225][ T9988] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 611.694189][ T4331] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 612.193048][T10047] loop0: detected capacity change from 0 to 2048 [ 612.583292][ T4331] usb 8-1: Using ep0 maxpacket: 16 [ 612.998170][T10047] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 614.804569][T10057] loop9: detected capacity change from 0 to 2048 [ 615.116144][ T7915] device hsr_slave_0 left promiscuous mode [ 615.327901][ T7915] device hsr_slave_1 left promiscuous mode [ 615.477804][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.618165][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.673639][ T4331] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 615.681956][ T4331] usb 8-1: can't read configurations, error -71 [ 615.998860][T10057] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 616.473175][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.493666][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.564299][ T7915] device bridge_slave_1 left promiscuous mode [ 616.615163][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.636628][ T7915] device bridge_slave_0 left promiscuous mode [ 616.678139][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.484909][T10087] loop2: detected capacity change from 0 to 512 [ 617.698524][T10087] EXT4-fs (loop2): Test dummy encryption mode enabled [ 617.746555][ T7915] device veth1_macvtap left promiscuous mode [ 617.752662][ T7915] device veth0_macvtap left promiscuous mode [ 617.800121][T10087] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 617.813461][ T7915] device veth1_vlan left promiscuous mode [ 617.819332][ T7915] device veth0_vlan left promiscuous mode [ 618.052743][T10087] EXT4-fs (loop2): 1 truncate cleaned up [ 618.074110][T10087] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 618.374329][T10100] siw: device registration error -23 [ 619.441615][T10103] loop4: detected capacity change from 0 to 2048 [ 619.740858][T10107] loop7: detected capacity change from 0 to 512 [ 620.473266][T10107] EXT4-fs (loop7): Unrecognized mount option "subj_user=sched_switch" or missing value [ 620.485770][T10103] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 621.632321][ T7915] team0 (unregistering): Port device team_slave_1 removed [ 621.651159][ T7915] team0 (unregistering): Port device team_slave_0 removed [ 621.667779][ T7915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.682821][ T7915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.771873][ T7915] bond0 (unregistering): Released all slaves [ 621.793594][ T1324] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 621.891811][T10126] netlink: 'syz.0.1265': attribute type 1 has an invalid length. [ 621.900073][T10126] netlink: 'syz.0.1265': attribute type 4 has an invalid length. [ 621.918865][T10126] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1265'. [ 621.983601][T10067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 622.204732][ T1324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.230821][ T1324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.476143][T10142] fuse: Bad value for 'fd' [ 622.626871][T10142] lo speed is unknown, defaulting to 1000 [ 622.720922][T10144] siw: device registration error -23 [ 624.165338][ T1324] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.197230][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.262982][ T1324] usb 5-1: Product: syz [ 624.263250][T10151] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 624.289932][ T1324] usb 5-1: Manufacturer: syz [ 624.316153][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.322609][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.331644][ T1324] usb 5-1: SerialNumber: syz [ 625.693076][ T1324] usb 5-1: 0:2 : does not exist [ 625.857162][T10174] loop4: detected capacity change from 0 to 1024 [ 625.872439][ T1324] usb 5-1: USB disconnect, device number 5 [ 625.939564][T10178] netlink: 64535 bytes leftover after parsing attributes in process `syz.7.1278'. [ 626.033235][T10174] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 626.231785][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.890033][T10195] netlink: 'syz.9.1283': attribute type 16 has an invalid length. [ 627.011530][T10195] netlink: 'syz.9.1283': attribute type 17 has an invalid length. [ 628.720599][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 628.782714][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 628.839157][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 628.847290][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 629.251520][T10206] loop0: detected capacity change from 0 to 4096 [ 629.300305][T10215] loop7: detected capacity change from 0 to 1024 [ 629.397908][T10206] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 629.433122][T10215] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.1287: Invalid block bitmap block 0 in block_group 0 [ 629.452898][T10215] Quota error (device loop7): write_blk: dquota write failed [ 629.461215][T10215] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 629.471259][T10215] EXT4-fs error (device loop7): ext4_acquire_dquot:6207: comm syz.7.1287: Failed to acquire dquot type 0 [ 629.488059][T10215] EXT4-fs error (device loop7): ext4_free_blocks:6223: comm syz.7.1287: Freeing blocks not in datazone - block = 0, count = 4096 [ 629.503262][T10215] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.1287: Invalid inode bitmap blk 0 in block_group 0 [ 629.517291][T10215] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 629.526252][T10215] EXT4-fs (loop7): 1 orphan inode deleted [ 629.532077][T10215] EXT4-fs (loop7): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,max_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 629.570728][ T9385] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 629.580348][ T9385] EXT4-fs error (device loop7): ext4_release_dquot:6243: comm kworker/u4:34: Failed to release dquot type 0 [ 631.598647][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 632.151637][T10238] netlink: 'syz.2.1293': attribute type 21 has an invalid length. [ 632.165118][T10238] IPv6: NLM_F_CREATE should be specified when creating new route [ 632.182090][T10238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.189714][T10238] IPv6: NLM_F_CREATE should be set when creating new route [ 632.197206][T10238] IPv6: NLM_F_CREATE should be set when creating new route [ 632.204501][T10238] IPv6: NLM_F_CREATE should be set when creating new route [ 632.531179][T10258] loop7: detected capacity change from 0 to 1024 [ 632.583973][T10258] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 632.591225][T10258] EXT4-fs (loop7): Ignoring removed bh option [ 632.597899][T10258] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 632.691459][T10258] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 633.923503][T10271] overlayfs: failed to resolve './file1': -2 [ 636.397670][T10291] syz.2.1309 uses obsolete (PF_INET,SOCK_PACKET) [ 639.657995][T10355] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1326'. [ 639.712246][T10355] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1326'. [ 639.790995][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1326'. [ 639.862772][T10357] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1326'. [ 640.323049][T10369] siw: device registration error -23 [ 641.465831][T10382] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 643.834302][T10415] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1341'. [ 643.893620][T10415] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1341'. [ 643.949604][T10412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1341'. [ 644.048348][T10417] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1341'. [ 644.250613][T10427] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1344'. [ 644.789245][T10444] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 645.160524][T10461] netlink: 'syz.4.1353': attribute type 29 has an invalid length. [ 645.173753][T10461] netlink: 'syz.4.1353': attribute type 29 has an invalid length. [ 645.204282][T10461] netlink: 'syz.4.1353': attribute type 29 has an invalid length. [ 646.617192][T10490] netlink: 'syz.2.1364': attribute type 29 has an invalid length. [ 646.669157][T10490] netlink: 'syz.2.1364': attribute type 29 has an invalid length. [ 646.691415][T10494] loop4: detected capacity change from 0 to 1024 [ 646.692539][T10496] netlink: 'syz.2.1364': attribute type 29 has an invalid length. [ 646.732603][T10498] netlink: 'syz.2.1364': attribute type 29 has an invalid length. [ 646.751549][T10494] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 646.758842][T10494] EXT4-fs (loop4): Ignoring removed bh option [ 646.765070][T10494] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 646.815063][T10490] netlink: 'syz.2.1364': attribute type 29 has an invalid length. [ 646.859930][T10494] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 647.661848][T10504] loop9: detected capacity change from 0 to 4096 [ 648.101504][T10504] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 649.912749][T10564] loop2: detected capacity change from 0 to 2048 [ 650.589758][T10564] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 651.515622][T10576] loop4: detected capacity change from 0 to 4096 [ 651.690417][T10576] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 654.223767][ T1324] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 655.453368][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 655.503714][ T1324] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 656.037496][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1406'. [ 656.135900][T10658] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 656.524992][ T1324] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 656.554677][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.611847][ T1324] r8152-cfgselector 3-1: config 0 descriptor?? [ 656.633782][ T1324] r8152-cfgselector 3-1: can't set config #0, error -71 [ 656.676352][ T1324] r8152-cfgselector 3-1: Unknown version 0x0000 [ 656.732931][ T1324] r8152-cfgselector 3-1: USB disconnect, device number 28 [ 657.463510][ T1324] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 657.803658][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 657.854261][ T1324] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 659.053036][T10685] crypto_alloc_aead failed rc=-4 [ 659.073876][ T4302] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 659.114106][ T1324] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 659.219429][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.383888][ T4302] usb 1-1: Using ep0 maxpacket: 16 [ 659.434686][ T4302] usb 1-1: too many configurations: 29, using maximum allowed: 8 [ 659.501191][ T1324] usb 3-1: Product: syz [ 659.573497][ T1324] usb 3-1: Manufacturer: syz [ 659.578172][ T1324] usb 3-1: SerialNumber: syz [ 659.663083][ T1324] r8152-cfgselector 3-1: config 0 descriptor?? [ 659.737551][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 659.847318][T10718] ================================================================== [ 659.856073][T10718] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 659.863319][T10718] Read of size 8 at addr ffff888148bfe408 by task syz.4.1420/10718 [ 659.871438][T10718] [ 659.873789][T10718] CPU: 1 PID: 10718 Comm: syz.4.1420 Not tainted 5.15.186-syzkaller #0 [ 659.882054][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 659.892167][T10718] Call Trace: [ 659.895473][T10718] [ 659.898431][T10718] dump_stack_lvl+0x168/0x230 [ 659.903154][T10718] ? show_regs_print_info+0x20/0x20 [ 659.908487][T10718] ? _printk+0xcc/0x110 [ 659.912689][T10718] ? ax25_release+0x5ca/0x870 [ 659.917419][T10718] ? load_image+0x3b0/0x3b0 [ 659.921975][T10718] print_address_description+0x60/0x2d0 [ 659.927561][T10718] ? ax25_release+0x5ca/0x870 [ 659.932424][T10718] kasan_report+0xdf/0x130 [ 659.936897][T10718] ? ax25_release+0x5ca/0x870 [ 659.941629][T10718] ax25_release+0x5ca/0x870 [ 659.946181][T10718] sock_close+0xd5/0x240 [ 659.950454][T10718] ? sock_mmap+0x90/0x90 [ 659.954730][T10718] __fput+0x234/0x930 [ 659.958757][T10718] task_work_run+0x125/0x1a0 [ 659.963382][T10718] exit_to_user_mode_loop+0x10f/0x130 [ 659.968790][T10718] exit_to_user_mode_prepare+0xb1/0x140 [ 659.974379][T10718] syscall_exit_to_user_mode+0x16/0x40 [ 659.979872][T10718] do_syscall_64+0x58/0xa0 [ 659.984457][T10718] ? clear_bhb_loop+0x30/0x80 [ 659.989242][T10718] ? clear_bhb_loop+0x30/0x80 [ 659.993988][T10718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 659.999944][T10718] RIP: 0033:0x7f60919f7929 [ 660.004641][T10718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.024279][T10718] RSP: 002b:00007ffc59696c58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 660.032738][T10718] RAX: 0000000000000000 RBX: 00000000000a10bf RCX: 00007f60919f7929 [ 660.040748][T10718] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 660.048752][T10718] RBP: 00007f6091c20ba0 R08: 0000000000000001 R09: 0000000d59696f4f [ 660.056765][T10718] R10: 00007f6091869000 R11: 0000000000000246 R12: 00007f6091c1efac [ 660.064779][T10718] R13: 00007f6091c1efa0 R14: ffffffffffffffff R15: 00007ffc59696d70 [ 660.067951][T10723] lo speed is unknown, defaulting to 1000 [ 660.072938][T10718] [ 660.072988][T10718] [ 660.072994][T10718] Allocated by task 10719: [ 660.073007][T10718] __kasan_kmalloc+0xb5/0xf0 [ 660.093126][T10718] ax25_dev_device_up+0x50/0x580 [ 660.098114][T10718] ax25_device_event+0x483/0x4f0 [ 660.103097][T10718] raw_notifier_call_chain+0xcb/0x160 [ 660.108510][T10718] __dev_notify_flags+0x178/0x2d0 [ 660.113655][T10718] dev_change_flags+0xe3/0x1a0 [ 660.118466][T10718] dev_ifsioc+0x147/0xe70 [ 660.122826][T10718] dev_ioctl+0x55f/0xe50 [ 660.127098][T10718] sock_do_ioctl+0x222/0x2f0 [ 660.131727][T10718] sock_ioctl+0x4ed/0x6e0 [ 660.136097][T10718] __se_sys_ioctl+0xfa/0x170 [ 660.140723][T10718] do_syscall_64+0x4c/0xa0 [ 660.145168][T10718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.151219][T10718] [ 660.153604][T10718] Freed by task 10719: [ 660.157959][T10718] kasan_set_track+0x4b/0x70 [ 660.162585][T10718] kasan_set_free_info+0x1f/0x40 [ 660.167557][T10718] ____kasan_slab_free+0xd5/0x110 [ 660.172622][T10718] slab_free_freelist_hook+0xea/0x170 [ 660.178144][T10718] kfree+0xef/0x2a0 [ 660.181994][T10718] ax25_device_event+0x4b4/0x4f0 [ 660.186974][T10718] raw_notifier_call_chain+0xcb/0x160 [ 660.192386][T10718] __dev_notify_flags+0x178/0x2d0 [ 660.197448][T10718] dev_change_flags+0xe3/0x1a0 [ 660.202353][T10718] dev_ifsioc+0x147/0xe70 [ 660.206737][T10718] dev_ioctl+0x55f/0xe50 [ 660.211008][T10718] sock_do_ioctl+0x222/0x2f0 [ 660.215630][T10718] sock_ioctl+0x4ed/0x6e0 [ 660.220001][T10718] __se_sys_ioctl+0xfa/0x170 [ 660.224620][T10718] do_syscall_64+0x4c/0xa0 [ 660.229075][T10718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.235005][T10718] [ 660.237353][T10718] The buggy address belongs to the object at ffff888148bfe400 [ 660.237353][T10718] which belongs to the cache kmalloc-192 of size 192 [ 660.251434][T10718] The buggy address is located 8 bytes inside of [ 660.251434][T10718] 192-byte region [ffff888148bfe400, ffff888148bfe4c0) [ 660.264571][T10718] The buggy address belongs to the page: [ 660.270241][T10718] page:ffffea000522ff80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148bfe [ 660.280510][T10718] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 660.288190][T10718] raw: 057ff00000000200 ffffea000086fb40 0000000400000004 ffff888016841a00 [ 660.296812][T10718] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 660.305644][T10718] page dumped because: kasan: bad access detected [ 660.312096][T10718] page_owner tracks the page as allocated [ 660.317844][T10718] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 13565762987, free_ts 0 [ 660.332641][T10718] get_page_from_freelist+0x1b77/0x1c60 [ 660.338227][T10718] __alloc_pages+0x1e1/0x470 [ 660.342876][T10718] alloc_page_interleave+0x24/0x1e0 [ 660.348111][T10718] new_slab+0xc0/0x4b0 [ 660.352218][T10718] ___slab_alloc+0x81e/0xdf0 [ 660.356844][T10718] __kmalloc+0x1cd/0x330 [ 660.361122][T10718] usb_alloc_urb+0x3f/0x140 [ 660.365744][T10718] usb_control_msg+0x115/0x3e0 [ 660.370546][T10718] usb_get_descriptor+0xad/0x3d0 [ 660.375649][T10718] usb_get_configuration+0x2a8/0x4cb0 [ 660.381245][T10718] usb_new_device+0x138/0x1640 [ 660.386052][T10718] register_root_hub+0x278/0x580 [ 660.391030][T10718] usb_add_hcd+0xa88/0xef0 [ 660.395943][T10718] vhci_hcd_probe+0x140/0x370 [ 660.400675][T10718] platform_probe+0x137/0x1c0 [ 660.405406][T10718] really_probe+0x284/0xc80 [ 660.410101][T10718] page_owner free stack trace missing [ 660.412942][ T1324] r8152-cfgselector 3-1: can't set config #0, error -71 [ 660.415599][T10718] [ 660.415606][T10718] Memory state around the buggy address: [ 660.415618][T10718] ffff888148bfe300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 660.415633][T10718] ffff888148bfe380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 660.415647][T10718] >ffff888148bfe400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 660.454002][ T1324] r8152-cfgselector 3-1: Unknown version 0x0000 [ 660.455008][T10718] ^ [ 660.455024][T10718] ffff888148bfe480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 660.455039][T10718] ffff888148bfe500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 660.455049][T10718] ================================================================== [ 660.455057][T10718] Disabling lock debugging due to kernel taint [ 660.575818][ T1324] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 660.596470][T10718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 660.603728][T10718] CPU: 0 PID: 10718 Comm: syz.4.1420 Tainted: G B 5.15.186-syzkaller #0 [ 660.613506][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.623588][T10718] Call Trace: [ 660.626898][T10718] [ 660.629862][T10718] dump_stack_lvl+0x168/0x230 [ 660.634579][T10718] ? show_regs_print_info+0x20/0x20 [ 660.639819][T10718] ? load_image+0x3b0/0x3b0 [ 660.644372][T10718] panic+0x2c9/0x7f0 [ 660.648301][T10718] ? bpf_jit_dump+0xd0/0xd0 [ 660.652848][T10718] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 660.658775][T10718] ? _raw_spin_unlock+0x40/0x40 [ 660.663658][T10718] ? print_memory_metadata+0x314/0x400 [ 660.669151][T10718] ? ax25_release+0x5ca/0x870 [ 660.674043][T10718] check_panic_on_warn+0x80/0xa0 [ 660.679016][T10718] ? ax25_release+0x5ca/0x870 [ 660.683724][T10718] end_report+0x6d/0xf0 [ 660.687947][T10718] kasan_report+0x102/0x130 [ 660.692503][T10718] ? ax25_release+0x5ca/0x870 [ 660.697211][T10718] ax25_release+0x5ca/0x870 [ 660.701866][T10718] sock_close+0xd5/0x240 [ 660.706171][T10718] ? sock_mmap+0x90/0x90 [ 660.710534][T10718] __fput+0x234/0x930 [ 660.714553][T10718] task_work_run+0x125/0x1a0 [ 660.719173][T10718] exit_to_user_mode_loop+0x10f/0x130 [ 660.724580][T10718] exit_to_user_mode_prepare+0xb1/0x140 [ 660.730334][T10718] syscall_exit_to_user_mode+0x16/0x40 [ 660.735843][T10718] do_syscall_64+0x58/0xa0 [ 660.740419][T10718] ? clear_bhb_loop+0x30/0x80 [ 660.745135][T10718] ? clear_bhb_loop+0x30/0x80 [ 660.749860][T10718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.755787][T10718] RIP: 0033:0x7f60919f7929 [ 660.760245][T10718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.779878][T10718] RSP: 002b:00007ffc59696c58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 660.788324][T10718] RAX: 0000000000000000 RBX: 00000000000a10bf RCX: 00007f60919f7929 [ 660.796325][T10718] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 660.804331][T10718] RBP: 00007f6091c20ba0 R08: 0000000000000001 R09: 0000000d59696f4f [ 660.812329][T10718] R10: 00007f6091869000 R11: 0000000000000246 R12: 00007f6091c1efac [ 660.820335][T10718] R13: 00007f6091c1efa0 R14: ffffffffffffffff R15: 00007ffc59696d70 [ 660.828342][T10718] [ 660.831661][T10718] Kernel Offset: disabled [ 660.836002][T10718] Rebooting in 86400 seconds..