last executing test programs: 23m35.974770138s ago: executing program 32 (id=956): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40012003, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x400204, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x9, 0x4f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 17m57.091037421s ago: executing program 33 (id=1494): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000004180), 0xff77) recvmmsg(r4, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0xffffffe9}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x7fffffff) r5 = dup(r1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 17m9.106436798s ago: executing program 6 (id=1515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200008d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = socket(0x7d6f346af930d763, 0x5, 0xdda) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad", 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000004000000", 0x6033) connect$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0xffff, @none, 0x7}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000440)=""/86, 0xa}, {&(0x7f00000008c0)=""/119, 0x77}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f00000002c0)=""/6, 0x6}], 0x3, &(0x7f0000000380)=""/40, 0x28}}], 0x2, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) preadv(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) 17m5.952899566s ago: executing program 6 (id=1582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@block_validity}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0xfe37, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 17m3.138323266s ago: executing program 6 (id=1585): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000004180), 0xff77) recvmmsg(r4, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0xffffffe9}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x7fffffff) r5 = dup(r1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 16m47.55681757s ago: executing program 34 (id=1585): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000004180), 0xff77) recvmmsg(r4, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0xffffffe9}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x7fffffff) r5 = dup(r1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 11m36.409844749s ago: executing program 7 (id=2198): bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x201000, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) open(0x0, 0x8002, 0xa1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") 11m32.221773394s ago: executing program 7 (id=2208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 11m26.861993385s ago: executing program 1 (id=2217): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x4, 0x4002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000018c0)={0x1}, 0x8) 11m25.72435668s ago: executing program 1 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000dc0)=""/143, 0x8f}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000001640)=""/4080, 0xff0}], 0x5}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 11m25.363905309s ago: executing program 1 (id=2220): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000009208500000072000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11m25.210829908s ago: executing program 1 (id=2221): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x100) 11m25.044036897s ago: executing program 1 (id=2222): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d748000000000000000000000000001000000000000e00ff000040863fcd0d30fe1dec95c8dec17c31c5f2f76ff83574b2f0fe390944a107ee7d1583da6b5cd6d061511401c5181840960572560778c9ad4ab7185f95ee0b89daaca1cd60995930f0fcc3df780790fbd1568b83b0f73e209e8b526f9fcc7dfc87742892e6319cc0b0e014a9ed2489a400000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000001000000000000009500000000000000", @ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) getuid() setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_ethernet(0xda, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB='showexec,shortname=winnt,shortname=lower,utf8=1,iocharset=cp865,shortname=win95,uni_xlate=1,shortname=win95,check=strict,shortname=winnt,utf8=0,iocharset=iso8859-5,codepage=874,shortname=mixed,shortname=win95,shortname=mixed,nonumtail=0,shortname=mixed,shortname=mixed,uni_xlate=1,rodir,nnonuni_xlate=1,shortname=win95,shortname=win95,utf8=0,nnonumtail=1,shortname=win95,shortname=win95,nnonumtail=1,uni_xlate=1,nfs=nostale_ro,\x00'/444], 0x6, 0x2d7, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 11m24.906909617s ago: executing program 7 (id=2223): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x1, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x20) 11m24.655591286s ago: executing program 7 (id=2224): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) 11m24.374949295s ago: executing program 7 (id=2228): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000037a200000000000000000d0018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(r3, 0x0, 0x0, 0x5405, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 11m19.881421329s ago: executing program 1 (id=2236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd1bb8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) fcntl$getownex(r4, 0x10, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@deltaction={0x18, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x20000000) unshare(0x22020600) 11m19.880941849s ago: executing program 7 (id=2237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfdf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffb5) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_uring_setup(0x1378, &(0x7f0000000200)={0x0, 0x10082aa, 0x0, 0x3, 0x30f}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) eventfd(0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) r8 = dup2(r2, r2) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000400000008000500000067f4"], 0x20}}, 0x0) readv(r8, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1) 11m18.459157094s ago: executing program 35 (id=2237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfdf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffb5) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_uring_setup(0x1378, &(0x7f0000000200)={0x0, 0x10082aa, 0x0, 0x3, 0x30f}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) eventfd(0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) r8 = dup2(r2, r2) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000400000008000500000067f4"], 0x20}}, 0x0) readv(r8, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1) 11m18.440848634s ago: executing program 36 (id=2236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd1bb8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) fcntl$getownex(r4, 0x10, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@deltaction={0x18, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x20000000) unshare(0x22020600) 9m35.499244575s ago: executing program 9 (id=2475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x70bd27, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 9m35.331755254s ago: executing program 9 (id=2478): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000001440)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000580)='./file1\x00', 0x40c0, &(0x7f0000002480)=ANY=[], 0x3, 0x11f4, &(0x7f0000001280)="$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") r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8db48224ad54afa051d875397bdb22d0000b420a100005240f45f819e00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x1e, 0x28, "561bfcadb322e7a648b826f003c1851a9c242527cb3d254dada276366a87ccc588949546a12cc5809eccd37a8564cabfda4c147b3a45b8e943bced07fd3fffbf", "2b416beaef043ee1e602417940bd7c3771390871faaa7103228109660205a039", [0x3, 0x7]}) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0xa) renameat2(0xffffffffffffffff, 0x0, r3, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x400000000000000}) fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x4b}) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 9m30.910042028s ago: executing program 9 (id=2486): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m22.786094448s ago: executing program 9 (id=2502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 9m22.533713607s ago: executing program 9 (id=2504): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) utimes(&(0x7f0000000380)='./file0\x00', 0x0) 9m22.177605976s ago: executing program 9 (id=2506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 9m5.696856835s ago: executing program 37 (id=2506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 6m4.379653909s ago: executing program 8 (id=3022): openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) 6m2.976470444s ago: executing program 8 (id=3027): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x9d741df904aad753, 0x70bd27, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x1, 0x0, 0x4000000000, 0x0, 0x4, 0xa204, 0x100000000}, {0x0, 0xfffffffffffffffe, 0x0, 0x1}, {}, 0x70bd2d, 0x3, 0xa, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000383a00fe880000000000000000000000000001ff0200000000000000008be60000000102009078000000006098a35000000000fe800000000000000000000000000002fc010000000000"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000100)={0x87}, 0x8) 6m1.392114508s ago: executing program 8 (id=3031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f000013d000/0x3000)=nil, 0x3000, 0x1, 0x4010, r0, 0x386e7000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x60600) socket$can_raw(0x1d, 0x3, 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe2(0x0, 0x80080) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) sendmsg$can_raw(r7, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000240)={&(0x7f0000000100)=@can={{}, 0xfc, 0x0, 0x0, 0x0, "5d5901d3284a3d58"}, 0x10}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffe0, 0xffff}, {0xe}}, [@TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0x6, 0x278, 0x2, 0xfffffffd, 0x5, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xff, 0x7, 0xf, 0x80000000, 0x2, 0x4, 0x5, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xb, 0x80, 0x8, 0x9, 0x1, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0xf7, 0x30, 0x2]}}, {{0x1c, 0x1, {0x8, 0x6, 0x0, 0x4, 0x1, 0x1, 0x2, 0x3}}, {0xa, 0x2, [0x2, 0x4, 0x8]}}, {{0x1c, 0x1, {0x1, 0xe, 0x0, 0x4, 0x2, 0x1ff, 0x7}}, {0x4}}]}]}, 0xe0}}, 0x0) 5m56.685290851s ago: executing program 8 (id=3037): prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@errors_remount}]}, 0x1, 0x597, &(0x7f00000005c0)="$eJzs3U9oHNUfAPDvzCbNr21+pgUFlR6KChVKN0n/aPWUXsVCoQfBSwybbQjZZGN2U5vQQ3ovYkFR6aXeFPSoiHgQLx69elE8C6JFpelBVia7m7ZJNm7SJlu7nw/Mdt682f1+X2ffmz+ZYQPoWoezlzTiqYg4l0QM3FXXE43Kw/X1lm9eLtzuiUIStdr535JIIuLWzcuF5vpJ49/9EbEUEU9GxLe9EUfT9XErC4tTY6VSca5RHqxOzw5WFhaPTU6PTRQnijMnXnzp1OmTp4aPD69mcr+u/nTt7avfv3Lj2iefHVoqvDeWxEj0N+rubseDVP8/6Y2RNctP7kSwDko6nQDbkmv0rt6IeCIGIveA+hrw8Kv1RdSALpVsuf/vDWMGPAqaxwHZ+W9zuucAYWlnjz9+PVM/AcniLjemek1P/dpE/G/l3GTfH8k9ZybZ+eaBnU2NLrB0JSKGenrWf/+Txvdv+4YeRILsqG/O1DfU+u2fZtv/zU8b660df/qb107vU3P8W143/qWr41+uxfh3rs0Yf7/+84ct41+JeHrD+Mlq/GSD+GlEvNFm/OuvfXm6VV3to4gjsXH8pmTz68ODFyZLxaH664Yxvj5y6OXN2r+vRfyRTdqfLZtts/1ffPf5M612o1n855/dfPtvFD87Bn+nzfgHb338aqu6LP54i/ZvFj9bdqPN+C+MHP6xzVUBAAAAAAAAAIAtSFfuZUvS/Op8mubz9Wd4H499aalcqR69UJ6fGa/f83YgetPmnVYD9XKSlYcb9+M2y8fXlE9ExMGIeDe3d6WcL5RL451uPAAAAAAAAAAAAAAAAAAAADwk9q95/v/PXP35f6BL+Mlv6F7b7f/GDfjvu7cfJx3LA9h99uPQvfR/6F6t+v/tr3Y5EWDXtdz/9+5uHsDuc/wP3Uv/h+612v9r/vYH3cb+HwAAAAAAAAAAAAAAAAAAAAAAAAAAdsS5s2ezqXb75uVCVh6/uDA/Vb54bLxYmcpPzxfyhfLcbH6iXJ4oFfOF8vS/fV6pXJ4dipn5S4PVYqU6WFlYHJ0uz89URyenxyaKo0W/KAIAAAAAAAAAAAAAAAAAAADr9a9MSZqPiHRlPk3z+Yj/R8SB6E0uTJaKQxHxWET8kOvty8rDnU4aAAAAAAAAAAAAAAAAAAAAHjGVhcWpsVKpOLf5TNrGOo/eTEQsrVmytc8Z/Wv3cs6S3dbbk6X7ip5EpzeTmR368gMAAAAAAAAAAAAAAAAAALvqzkO/W3zjlR1KCAAAAAAAAAAAAAAAAAAAALpS+kv2mkTEkYHn+tfW7kmWcxF9sSci3rp+/v1LY9Xq3HC2/PfcSn1EVD9oLD/eifyBNi3X6qLZjwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7KguLU2OlUnFumzN9bXxOh5sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsC3/BAAA//+SBtgH") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e0010000000400008007020000d4"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 5m54.278366272s ago: executing program 8 (id=3042): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='timerslack_ns\x00') write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x5}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5m51.542131592s ago: executing program 8 (id=3046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, r0, 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$setsig(0x4203, 0x0, 0xa083, &(0x7f0000000840)={0x3a, 0x84fc, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000600)={0x2023e3, 0x0, 0x0, 0xfffffffa}) 5m35.367626782s ago: executing program 38 (id=3046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, r0, 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$setsig(0x4203, 0x0, 0xa083, &(0x7f0000000840)={0x3a, 0x84fc, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000600)={0x2023e3, 0x0, 0x0, 0xfffffffa}) 36.904044005s ago: executing program 0 (id=3781): openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) 35.849666692s ago: executing program 0 (id=3785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 33.028226021s ago: executing program 0 (id=3790): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x0, 0x1000, 0x0, 0x0, 0x0, "030000007fffff5b000f000000462200"}) 31.062882354s ago: executing program 0 (id=3794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB='\x000\x00\x00\x00\x00\x00\x00$'], 0x44}}, 0x0) 28.533961185s ago: executing program 0 (id=3797): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x8020, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r3, 0x708430dd5bfb2afb, 0xfffffffffffffffc}, 0x53) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000400)={[{@noextent_cache}, {@nogc_merge}, {@noacl}]}, 0x1, 0x551d, &(0x7f00000079c0)="$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") mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 25.855358215s ago: executing program 0 (id=3801): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @mcast1, 0x8000005}}}, 0x9bbdb4cf1c6c741d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000440)={0x0, 0xfffffd33, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000e100000000050000000800010000000000"], 0x28}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[]) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1900) unshare(0x40020000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32=r6, @ANYBLOB="08000200ac"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15.989630959s ago: executing program 5 (id=3787): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10f501, 0x32) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x3, 0x200) linkat(r0, &(0x7f0000000280)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xccf4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 12.413626076s ago: executing program 5 (id=3832): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) 9.641705545s ago: executing program 39 (id=3801): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @mcast1, 0x8000005}}}, 0x9bbdb4cf1c6c741d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000440)={0x0, 0xfffffd33, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000e100000000050000000800010000000000"], 0x28}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[]) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1900) unshare(0x40020000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32=r6, @ANYBLOB="08000200ac"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.562428925s ago: executing program 5 (id=3842): keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000035c0), &(0x7f0000003600)={'syz', 0x0}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 7.817822268s ago: executing program 4 (id=3846): prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@errors_remount}]}, 0x1, 0x597, &(0x7f00000005c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e0010000000400008007020000d4"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 7.279514796s ago: executing program 4 (id=3848): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d748000000000000000000000000001000000000000e00ff000040863fcd0d30fe1dec95c8dec17c31c5f2f76ff83574b2f0fe390944a107ee7d1583da6b5cd6d061511401c518"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000001000000000000009500000000000000", @ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB='showexec,shortname=winnt,shortname=lower,utf8=1,iocharset=cp865,shortname=win95,uni_xlate=1,shortname=win95,check=strict,shortname=winnt,utf8=0,iocharset=iso8859-5,codepage=874,shortname=mixed,shortname=win95,shortname=mixed,nonumtail=0,shortname=mixed,shortname=mixed,uni_xlate=1,rodir,nnonuni_xlate=1,shortname=win95,shortname=win95,utf8=0,nnonumtail=1,shortname=win95,shortname=win95,nnonumtail=1,uni_xlate=1,nfs=nostale_ro,\x00'/444], 0x6, 0x2d7, &(0x7f0000000340)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6.273647983s ago: executing program 5 (id=3851): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 6.054697452s ago: executing program 5 (id=3852): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) 5.940271521s ago: executing program 3 (id=3853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 5.923089352s ago: executing program 2 (id=3854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) mkdir(0x0, 0x92) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x2, 0x800, 0x100, 0x4, 0x2, 0x6, 0x10001, 0x1}}) 5.921975581s ago: executing program 4 (id=3855): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x28, 0x80002, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edaff0c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.487794776s ago: executing program 4 (id=3856): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x29, 0x0, 0x4081000, 0xfffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}}, 0x50) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0801, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.487231216s ago: executing program 2 (id=3857): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000) sched_setaffinity(0x0, 0x58, &(0x7f00000002c0)=0xffffffffffffe5f6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) r4 = dup2(r3, r3) recvfrom$unix(r4, &(0x7f0000000300)=""/225, 0xe1, 0x40012000, 0x0, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x2}}, 0xb) sched_setscheduler(0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.486787636s ago: executing program 3 (id=3858): prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@errors_remount}]}, 0x1, 0x597, &(0x7f00000005c0)="$eJzs3U9oHNUfAPDvzCbNr21+pgUFlR6KChVKN0n/aPWUXsVCoQfBSwybbQjZZGN2U5vQQ3ovYkFR6aXeFPSoiHgQLx69elE8C6JFpelBVia7m7ZJNm7SJlu7nw/Mdt682f1+X2ffmz+ZYQPoWoezlzTiqYg4l0QM3FXXE43Kw/X1lm9eLtzuiUIStdr535JIIuLWzcuF5vpJ49/9EbEUEU9GxLe9EUfT9XErC4tTY6VSca5RHqxOzw5WFhaPTU6PTRQnijMnXnzp1OmTp4aPD69mcr+u/nTt7avfv3Lj2iefHVoqvDeWxEj0N+rubseDVP8/6Y2RNctP7kSwDko6nQDbkmv0rt6IeCIGIveA+hrw8Kv1RdSALpVsuf/vDWMGPAqaxwHZ+W9zuucAYWlnjz9+PVM/AcniLjemek1P/dpE/G/l3GTfH8k9ZybZ+eaBnU2NLrB0JSKGenrWf/+Txvdv+4YeRILsqG/O1DfU+u2fZtv/zU8b660df/qb107vU3P8W143/qWr41+uxfh3rs0Yf7/+84ct41+JeHrD+Mlq/GSD+GlEvNFm/OuvfXm6VV3to4gjsXH8pmTz68ODFyZLxaH664Yxvj5y6OXN2r+vRfyRTdqfLZtts/1ffPf5M612o1n855/dfPtvFD87Bn+nzfgHb338aqu6LP54i/ZvFj9bdqPN+C+MHP6xzVUBAAAAAAAAAIAtSFfuZUvS/Op8mubz9Wd4H499aalcqR69UJ6fGa/f83YgetPmnVYD9XKSlYcb9+M2y8fXlE9ExMGIeDe3d6WcL5RL451uPAAAAAAAAAAAAAAAAAAAADwk9q95/v/PXP35f6BL+Mlv6F7b7f/GDfjvu7cfJx3LA9h99uPQvfR/6F6t+v/tr3Y5EWDXtdz/9+5uHsDuc/wP3Uv/h+612v9r/vYH3cb+HwAAAAAAAAAAAAAAAAAAAAAAAAAAdsS5s2ezqXb75uVCVh6/uDA/Vb54bLxYmcpPzxfyhfLcbH6iXJ4oFfOF8vS/fV6pXJ4dipn5S4PVYqU6WFlYHJ0uz89URyenxyaKo0W/KAIAAAAAAAAAAAAAAAAAAADr9a9MSZqPiHRlPk3z+Yj/R8SB6E0uTJaKQxHxWET8kOvty8rDnU4aAAAAAAAAAAAAAAAAAAAAHjGVhcWpsVKpOLf5TNrGOo/eTEQsrVmytc8Z/Wv3cs6S3dbbk6X7ip5EpzeTmR368gMAAAAAAAAAAAAAAAAAALvqzkO/W3zjlR1KCAAAAAAAAAAAAAAAAAAAALpS+kv2mkTEkYHn+tfW7kmWcxF9sSci3rp+/v1LY9Xq3HC2/PfcSn1EVD9oLD/eifyBNi3X6qLZjwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7KguLU2OlUnFumzN9bXxOh5sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsC3/BAAA//+SBtgH") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e0010000000400008007020000d4"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 4.040457605s ago: executing program 4 (id=3859): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x7, 0x0) fcntl$setstatus(r4, 0x4, 0x7c00) dup3(r5, r4, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/19, &(0x7f0000000080)=0x13) 3.446030412s ago: executing program 3 (id=3860): keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000035c0), &(0x7f0000003600)={'syz', 0x0}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.200189248s ago: executing program 2 (id=3861): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$igmp6(0xa, 0x3, 0x2) add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000300), 0x0, 0xffffffffffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x0, 0x1000, 0x0, 0x0, 0x0, "030000007fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x11, "00000000000000000000279600"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1ff, 0x0, "f937267f0f7ba57603a6a12e3f0a7f64c64c56"}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[@ANYBLOB="04010000160001"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 1.892294797s ago: executing program 3 (id=3862): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.151277774s ago: executing program 3 (id=3863): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x690, 0x0, 0x4f0, 0x3f8, 0xd0, 0x3f8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, &(0x7f0000000400), {[{{@ipv6={@mcast1, @mcast2, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xff], 'geneve1\x00', 'wg0\x00', {0xff}, {}, 0x2c, 0x84, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @loopback, [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 'bond_slave_0\x00', 'veth1_to_hsr\x00', {}, {}, 0x2b, 0x2, 0x1, 0xc}, 0x0, 0x1e0, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x7bb9, [0x3e, 0x7], 0x8, 0x30, 0x3, [@private2, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @mcast2, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @dev={0xfe, 0x80, '\x00', 0x1b}], 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5}, {0x2, 0x2}, 0x0, 0xffffffff}}}, {{@ipv6={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xff000000, 0xffffffff], 'sit0\x00', 'rose0\x00', {0xff}, {}, 0x62, 0x2, 0x2, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x2f, 0x1c, 0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @remote}, [0xff000000, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0xff, 0xff], 'vcan0\x00', 'pim6reg0\x00', {}, {0xff}, 0x5c, 0x8, 0x4, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @mcast2, [0xff, 0xff000000, 0xffffff00, 0x101ffff00], [0xffffff00, 0xff, 0xffffffff], 'wlan1\x00', 'geneve1\x00', {}, {}, 0x88, 0x28, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 1.084826024s ago: executing program 2 (id=3864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) setresuid(0xee00, 0xee01, 0x0) 892.073273ms ago: executing program 5 (id=3865): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) close(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0xffffffffffffffff}, 0x18) write$binfmt_misc(r3, 0x0, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}], 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001000"/27], 0x48) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r7, @ANYBLOB="cbf30000000100", @ANYRESHEX=r9, @ANYBLOB=',k']) 891.666053ms ago: executing program 2 (id=3866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) tee(r0, r2, 0x100000000000, 0x2) 735.829492ms ago: executing program 2 (id=3867): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000063691c100000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB='\x00'/10, @ANYRESHEX=r1], 0x48) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r6, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf943", 0x44, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x101) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7ff, 0x3, 0xf, 0x0, 0xf42, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe8) 68.28694ms ago: executing program 3 (id=3868): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x1d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x95, [@loopback, @multicast2]}]}}}], 0x28}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xae08, 0x0) dup3(r0, r1, 0x0) r9 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) 0s ago: executing program 4 (id=3869): prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@errors_remount}]}, 0x1, 0x597, &(0x7f00000005c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e0010000000400008007020000d4"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) kernel console output (not intermixed with test programs): _slave_0 [ 1579.408127][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.418060][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.428829][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.455418][T17473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.494749][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.608825][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.690979][T17473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.727786][ T26] audit: type=1326 audit(1735336065.884:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.3.2848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4307b85d29 code=0x0 [ 1579.783384][T17473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.864258][T17473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.926956][T17473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.957206][T17473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.966239][T17473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.975056][T17473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.067294][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'. [ 1580.092185][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1580.131975][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1580.192838][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1580.204232][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1580.217990][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1580.238853][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1580.584550][ T5104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.595579][ T5104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.341252][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1581.525206][T13207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.571803][T13207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.645936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1582.737582][T17863] syz.0.2858[17863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1582.737679][T17863] syz.0.2858[17863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1582.799406][T17863] x_tables: duplicate underflow at hook 1 [ 1585.027205][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1585.039864][T17885] futex_wake_op: syz.0.2861 tries to shift op by -1; fix this program [ 1585.803554][T17898] fuse: Bad value for 'fd' [ 1588.640317][T17891] device wireguard0 entered promiscuous mode [ 1589.983927][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 1591.129948][T17926] loop0: detected capacity change from 0 to 512 [ 1591.194843][T17926] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1591.231535][T17929] syz.2.2872[17929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1591.231636][T17929] syz.2.2872[17929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1591.244934][T17929] x_tables: duplicate underflow at hook 1 [ 1591.289945][T17926] EXT4-fs (loop0): 1 truncate cleaned up [ 1591.295776][T17926] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1592.003124][ T4292] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1592.166820][T17951] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2878'. [ 1592.179700][T17951] futex_wake_op: syz.8.2878 tries to shift op by -1; fix this program [ 1592.322867][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1592.698714][ T4292] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1592.748988][ T4292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.825054][ T4292] usb 6-1: Product: syz [ 1592.840195][ T4292] usb 6-1: Manufacturer: syz [ 1592.845663][ T4292] usb 6-1: SerialNumber: syz [ 1592.869614][T17957] loop8: detected capacity change from 0 to 1024 [ 1592.909293][ T4292] usb 6-1: config 0 descriptor?? [ 1593.104045][T17957] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1593.112676][T17957] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.512922][T17622] Bluetooth: hci2: command 0x1003 tx timeout [ 1593.519549][T11290] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1593.777122][ T4292] usb 6-1: USB disconnect, device number 8 [ 1593.960246][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1594.022387][T14809] EXT4-fs (loop8): unmounting filesystem. [ 1594.171057][T14792] udevd[14792]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1595.156707][T18001] fuse: Bad value for 'fd' [ 1595.305406][T17999] device wireguard0 entered promiscuous mode [ 1595.439767][T18010] loop5: detected capacity change from 0 to 512 [ 1595.467947][T18010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1595.566200][T17984] 9pnet: Could not find request transport: fd0x0000000000000009Ëó [ 1595.763373][T18010] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1595.799949][T18010] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2887: bg 0: block 248: padding at end of block bitmap is not set [ 1595.818477][T18010] Quota error (device loop5): write_blk: dquota write failed [ 1595.826222][T18010] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1595.836357][T18010] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.2887: Failed to acquire dquot type 1 [ 1595.857861][T18010] EXT4-fs (loop5): 1 truncate cleaned up [ 1595.867092][T18010] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1596.672422][T18018] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1596.838175][T18014] lo speed is unknown, defaulting to 1000 [ 1596.938236][T18024] loop3: detected capacity change from 0 to 512 [ 1597.018858][T18027] syz.2.2891[18027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1597.018962][T18027] syz.2.2891[18027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1597.132204][T18027] x_tables: duplicate underflow at hook 1 [ 1597.153624][T18024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1597.189804][T18024] EXT4-fs (loop3): 1 truncate cleaned up [ 1597.209130][T18024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1597.596544][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1599.514078][ T4326] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1599.719686][T17622] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1600.395138][ T4326] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1600.413761][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.423891][ T4326] usb 3-1: config 0 descriptor?? [ 1600.424436][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1600.700698][T18079] loop0: detected capacity change from 0 to 512 [ 1600.735756][T18079] EXT4-fs: Ignoring removed i_version option [ 1600.741824][T18079] EXT4-fs: Ignoring removed mblk_io_submit option [ 1600.793175][T18069] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1600.806111][T18079] ext4: Unknown parameter 'seclabel' [ 1600.866898][ T4326] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1601.070018][T18086] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1601.081068][ T4326] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 20 got 0 [ 1601.099626][ T4326] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 1601.191088][T18088] usb usb8: usbfs: process 18088 (syz.0.2904) did not claim interface 0 before use [ 1601.265104][T18088] loop0: detected capacity change from 0 to 1024 [ 1601.274084][T18088] ext4: Unknown parameter 'fowner<00000000000000000000' [ 1601.681174][T18084] lo speed is unknown, defaulting to 1000 [ 1601.814526][ T4326] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 1601.823536][ T4326] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 1601.856367][ T4326] playstation: probe of 0003:054C:0DF2.0008 failed with error -22 [ 1601.885172][ T4326] usb 3-1: USB disconnect, device number 7 [ 1603.482127][T11290] Bluetooth: hci5: command 0x0406 tx timeout [ 1603.716526][T18123] IPv6: NLM_F_CREATE should be specified when creating new route [ 1604.991056][T18137] lo speed is unknown, defaulting to 1000 [ 1606.563816][ T26] audit: type=1326 audit(1735336346.983:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.3.2919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4307b85d29 code=0x0 [ 1608.146438][T18163] loop5: detected capacity change from 0 to 256 [ 1608.253942][T18163] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1612.839279][T18214] futex_wake_op: syz.5.2932 tries to shift op by -1; fix this program [ 1613.696137][ T26] audit: type=1326 audit(1735336353.652:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18202 comm="syz.0.2933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x0 [ 1614.210305][T18221] lo speed is unknown, defaulting to 1000 [ 1614.239268][T18225] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1614.273929][T18224] bridge0: port 3(gretap0) entered blocking state [ 1614.367490][T18224] bridge0: port 3(gretap0) entered disabled state [ 1614.433055][T18224] device gretap0 entered promiscuous mode [ 1614.884774][T18224] bridge0: port 3(gretap0) entered blocking state [ 1614.891380][T18224] bridge0: port 3(gretap0) entered listening state [ 1616.998618][T18246] loop5: detected capacity change from 0 to 512 [ 1617.735891][T18246] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1617.746484][T18246] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1617.756091][T18246] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.2941: Failed to acquire dquot type 0 [ 1617.779907][T18246] EXT4-fs (loop5): Remounting filesystem read-only [ 1617.791197][T18246] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1617.801765][T18246] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1617.811254][T18246] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.2941: Failed to acquire dquot type 0 [ 1617.828451][T18246] EXT4-fs (loop5): Remounting filesystem read-only [ 1617.840329][T18246] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1617.850920][T18246] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1617.860359][T18246] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.2941: Failed to acquire dquot type 0 [ 1617.874226][T18246] EXT4-fs (loop5): Remounting filesystem read-only [ 1617.881375][T18246] EXT4-fs (loop5): 1 orphan inode deleted [ 1617.887262][T18246] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1617.896599][T18246] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1620.229556][T17622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1620.240239][T17622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1620.252636][T17622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1620.261417][T17622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1620.269085][T17622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1620.280853][ T8586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1620.404057][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1620.585982][T18257] lo speed is unknown, defaulting to 1000 [ 1622.560107][T11290] Bluetooth: hci2: command 0x0409 tx timeout [ 1623.256284][T18291] loop5: detected capacity change from 0 to 512 [ 1623.346921][T18291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1623.507711][T18291] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1623.522046][T18291] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2949: bg 0: block 248: padding at end of block bitmap is not set [ 1623.539088][T18291] Quota error (device loop5): write_blk: dquota write failed [ 1623.546779][T18291] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1623.556879][T18291] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.2949: Failed to acquire dquot type 1 [ 1623.584732][T18291] EXT4-fs (loop5): 1 truncate cleaned up [ 1623.669266][T18291] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1624.321541][T18257] chnl_net:caif_netlink_parms(): no params data found [ 1624.711294][T18257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.772784][T18257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.818807][T18257] device bridge_slave_0 entered promiscuous mode [ 1624.858996][T18257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.866370][T11290] Bluetooth: hci2: command 0x041b tx timeout [ 1624.996520][T18257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.005615][T18257] device bridge_slave_1 entered promiscuous mode [ 1625.234255][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1625.244559][T18257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.030309][T18257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.260707][T18257] team0: Port device team_slave_0 added [ 1626.306115][T18257] team0: Port device team_slave_1 added [ 1626.393950][T18257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.400916][T18257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.428924][T18257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.792388][T18257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.799639][T18257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.102898][T18257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.138642][T11290] Bluetooth: hci2: command 0x040f tx timeout [ 1627.395582][T18335] loop8: detected capacity change from 0 to 128 [ 1627.423171][T18257] device hsr_slave_0 entered promiscuous mode [ 1627.455928][T18257] device hsr_slave_1 entered promiscuous mode [ 1627.496664][T18257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1627.519792][T18338] fuse: Bad value for 'fd' [ 1627.531505][T18257] Cannot create hsr debugfs directory [ 1627.896061][ T4611] tipc: Left network mode [ 1628.282288][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2963'. [ 1628.293241][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2963'. [ 1628.308273][T18354] futex_wake_op: syz.8.2963 tries to shift op by -1; fix this program [ 1628.315469][T18257] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.358728][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1628.524764][T18257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.674025][T18257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.177574][T18257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.321749][T11290] Bluetooth: hci2: command 0x0419 tx timeout [ 1630.719422][T18391] loop8: detected capacity change from 0 to 256 [ 1630.922220][ T4611] bridge0: port 1(gretap0) entered disabled state [ 1630.975240][ T4611] device gretap0 left promiscuous mode [ 1630.984303][ T4611] bridge0: port 1(gretap0) entered disabled state [ 1631.105026][T18257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1631.124196][T18257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1631.277608][ C0] bridge0: port 3(gretap0) entered learning state [ 1631.291847][T18257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1631.369936][T18257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1632.550829][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2975'. [ 1632.976976][T18257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.037209][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1633.071607][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1633.135622][ T4611] device hsr_slave_0 left promiscuous mode [ 1633.149275][ T4611] device hsr_slave_1 left promiscuous mode [ 1633.316458][ T4611] device veth1_to_batadv left promiscuous mode [ 1633.331409][ T4611] device veth1_macvtap left promiscuous mode [ 1633.337534][ T4611] device veth0_macvtap left promiscuous mode [ 1633.343718][ T4611] device veth1_vlan left promiscuous mode [ 1633.349494][ T4611] device veth0_vlan left promiscuous mode [ 1634.403534][T18443] loop0: detected capacity change from 0 to 512 [ 1634.405116][ T5541] infiniband syz2: ib_query_port failed (-19) [ 1634.467354][T18443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1634.569445][T18443] EXT4-fs (loop0): 1 truncate cleaned up [ 1634.578512][T18443] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1634.709587][T18451] loop5: detected capacity change from 0 to 256 [ 1634.894995][T18443] Bluetooth: hci4: Frame reassembly failed (-84) [ 1635.010889][ T4419] Bluetooth: hci4: Frame reassembly failed (-84) [ 1637.108999][T11290] Bluetooth: hci4: command 0x1003 tx timeout [ 1637.115477][ T8586] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1637.891441][ T4611] bond0 (unregistering): Released all slaves [ 1637.979410][T18257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.080956][T18257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1638.142842][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1638.159567][T18257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1638.228385][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1638.275540][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1638.298546][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.305733][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.361368][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1638.383773][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1638.409046][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.416167][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.464658][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1638.483993][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1638.516531][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1638.572800][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1638.604509][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1638.616531][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1638.644832][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1638.664337][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1638.675695][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1638.685874][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1638.730316][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1638.751963][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1638.760262][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1638.783267][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1640.281871][T18504] loop3: detected capacity change from 0 to 512 [ 1640.315940][T18504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1640.401813][T18504] EXT4-fs (loop3): 1 truncate cleaned up [ 1640.470085][T18257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.507200][T18257] device veth0_vlan entered promiscuous mode [ 1640.520410][T18257] device veth1_vlan entered promiscuous mode [ 1640.545761][T18257] device veth0_macvtap entered promiscuous mode [ 1640.554804][T18504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1640.596569][T18257] device veth1_macvtap entered promiscuous mode [ 1640.723841][T18257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.796910][T18257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.857553][T18257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.908221][T18257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.955711][T18257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.004738][T18257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.016031][T18257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.073744][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1641.086401][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1641.107826][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1641.136177][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1641.154464][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1641.164703][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1641.180946][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1641.194186][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1641.205431][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1641.256752][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1641.298900][T18523] loop0: detected capacity change from 0 to 512 [ 1641.317521][T18523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1641.537048][T18523] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1641.550480][T18523] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3003: bg 0: block 248: padding at end of block bitmap is not set [ 1641.570924][T18523] Quota error (device loop0): write_blk: dquota write failed [ 1641.578823][T18523] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1641.588992][T18523] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.3003: Failed to acquire dquot type 1 [ 1641.614701][T18523] EXT4-fs (loop0): 1 truncate cleaned up [ 1641.638579][T18523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1641.721418][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1641.907896][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1642.114934][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1642.142418][T18257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.160653][T18257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.170490][T18257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.246288][T18257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.296337][T18257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.340696][T18257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.351988][T18257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1642.399359][T18525] Bluetooth: hci4: Frame reassembly failed (-84) [ 1642.446924][ T5104] Bluetooth: hci4: Frame reassembly failed (-84) [ 1642.495224][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1642.503697][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1642.512923][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1642.524283][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1642.533082][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1642.555772][T18257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.575629][T18257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.620780][T18257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.629523][T18257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.274524][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.282824][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.328369][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1643.487470][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1643.519007][ T5298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.527156][ T5298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.580149][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1644.510571][T18547] hub 2-0:1.0: USB hub found [ 1644.518379][T18547] hub 2-0:1.0: 1 port detected [ 1644.647685][T11290] Bluetooth: hci4: command 0x1003 tx timeout [ 1644.654210][ T8586] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1645.037189][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1645.043558][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1645.475732][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1646.970413][T18577] loop5: detected capacity change from 0 to 512 [ 1647.291902][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1647.308454][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1647.320837][T18580] futex_wake_op: syz.0.3013 tries to shift op by -1; fix this program [ 1647.849856][ C0] bridge0: port 3(gretap0) entered forwarding state [ 1647.856500][ C0] bridge0: topology change detected, propagating [ 1647.866985][T18577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1648.195131][T18577] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1648.299918][T18577] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3014: bg 0: block 248: padding at end of block bitmap is not set [ 1648.326932][T18577] Quota error (device loop5): write_blk: dquota write failed [ 1648.334693][T18577] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1648.344770][T18577] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.3014: Failed to acquire dquot type 1 [ 1648.373326][T18577] EXT4-fs (loop5): 1 truncate cleaned up [ 1648.385507][T18577] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1649.059279][ T26] audit: type=1326 audit(1735336386.681:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.0.3017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x0 [ 1650.157232][T18597] device wireguard0 entered promiscuous mode [ 1650.214439][T18600] fuse: Bad value for 'fd' [ 1650.576251][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1650.803551][T18613] loop5: detected capacity change from 0 to 1024 [ 1650.864208][T18613] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1650.872793][T18613] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1651.866548][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3022'. [ 1652.339246][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1652.363151][T18643] loop0: detected capacity change from 0 to 128 [ 1652.611287][T18646] loop8: detected capacity change from 0 to 512 [ 1652.641268][T18646] EXT4-fs: Ignoring removed i_version option [ 1652.698672][T18646] EXT4-fs: Ignoring removed mblk_io_submit option [ 1652.763901][T18646] ext4: Unknown parameter 'seclabel' [ 1655.403469][T18667] loop5: detected capacity change from 0 to 512 [ 1656.203239][T18667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1657.112756][T18667] EXT4-fs: failed to create workqueue [ 1657.118354][T18667] EXT4-fs (loop5): mount failed [ 1657.976864][T18685] fuse: Bad value for 'fd' [ 1658.186726][T18683] device wireguard0 entered promiscuous mode [ 1659.312280][T18699] loop8: detected capacity change from 0 to 1024 [ 1659.376915][T18699] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1659.385532][T18699] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.810786][ T26] audit: type=1326 audit(1735336396.793:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18698 comm="syz.5.3036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1557985d29 code=0x0 [ 1660.157416][T18718] IPv6: NLM_F_CREATE should be specified when creating new route [ 1661.070235][T14809] EXT4-fs (loop8): unmounting filesystem. [ 1664.196909][T18751] loop8: detected capacity change from 0 to 512 [ 1664.241349][T18751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1664.280779][T18751] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1664.292297][T18751] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3046: bg 0: block 248: padding at end of block bitmap is not set [ 1664.307708][T18751] Quota error (device loop8): write_blk: dquota write failed [ 1664.315246][T18751] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1664.325315][T18751] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.3046: Failed to acquire dquot type 1 [ 1664.342811][T18751] EXT4-fs (loop8): 1 truncate cleaned up [ 1664.473310][T18751] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1667.821856][T18790] loop5: detected capacity change from 0 to 1024 [ 1667.897726][T18790] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1667.906822][T18790] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1668.442222][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3055'. [ 1669.509486][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1669.837602][T18821] loop5: detected capacity change from 0 to 128 [ 1670.676515][ T8586] Bluetooth: hci4: sending frame failed (-49) [ 1670.685623][T11290] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1672.431877][T18848] loop0: detected capacity change from 0 to 512 [ 1672.654328][T18848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1672.672257][T18848] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1673.737576][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1673.805785][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3068'. [ 1674.124125][T18883] loop5: detected capacity change from 0 to 1024 [ 1674.181429][T18872] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1674.202227][T18883] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1674.210805][T18883] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.469641][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1675.696450][T18904] loop0: detected capacity change from 0 to 512 [ 1675.752644][T18904] EXT4-fs: Ignoring removed oldalloc option [ 1676.004706][T18904] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1676.453969][T18904] EXT4-fs (loop0): 1 truncate cleaned up [ 1676.459808][T18904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1677.568855][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1678.075918][T18933] loop3: detected capacity change from 0 to 256 [ 1679.628588][T18949] loop3: detected capacity change from 0 to 256 [ 1679.697584][T18949] exfat: Deprecated parameter 'utf8' [ 1679.746505][T18949] exfat: Deprecated parameter 'namecase' [ 1679.776085][T18949] exfat: Deprecated parameter 'utf8' [ 1679.792769][T14809] EXT4-fs (loop8): unmounting filesystem. [ 1679.889086][T18949] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1679.937881][T18951] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1680.584124][ T8586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1680.614282][ T8586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1680.624333][ T8586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1680.632541][ T8586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1680.681057][ T8586] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1680.689754][ T8586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1680.867373][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1682.147515][T18982] input: syz0 as /devices/virtual/input/input25 [ 1682.934785][T17622] Bluetooth: hci4: command 0x0409 tx timeout [ 1683.067682][T18997] loop3: detected capacity change from 0 to 256 [ 1683.124646][T18997] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1683.745855][T18998] device wireguard0 entered promiscuous mode [ 1685.158603][T17622] Bluetooth: hci4: command 0x041b tx timeout [ 1685.501724][T17622] Bluetooth: hci0: command 0x0406 tx timeout [ 1686.231329][T19035] loop0: detected capacity change from 0 to 512 [ 1686.308515][T19035] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1686.308992][T13209] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.380326][T19035] EXT4-fs (loop0): 1 truncate cleaned up [ 1686.386330][T19035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1686.406311][T18959] chnl_net:caif_netlink_parms(): no params data found [ 1686.541811][T13209] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.924129][T13209] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.117603][T19068] loop5: detected capacity change from 0 to 512 [ 1687.374052][T19068] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1687.384000][T19068] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1687.461408][T17622] Bluetooth: hci4: command 0x040f tx timeout [ 1688.095702][T13209] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.250566][T18959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.331153][T13207] Bluetooth: hci3: Frame reassembly failed (-84) [ 1688.593529][T18959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.602503][T18959] device bridge_slave_0 entered promiscuous mode [ 1688.614636][T18959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.621741][T18959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.630214][T18959] device bridge_slave_1 entered promiscuous mode [ 1690.194964][ T8586] Bluetooth: hci4: command 0x0419 tx timeout [ 1690.209057][T19039] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1690.546620][T17622] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1690.662015][T19082] bridge0: port 3(gretap0) entered blocking state [ 1690.669132][T19082] bridge0: port 3(gretap0) entered disabled state [ 1690.677598][T19082] device gretap0 entered promiscuous mode [ 1690.683752][T19082] bridge0: port 3(gretap0) entered blocking state [ 1690.690302][T19082] bridge0: port 3(gretap0) entered listening state [ 1690.703244][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1690.796918][T18959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.862030][T18959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.969376][T19102] device wireguard0 entered promiscuous mode [ 1691.109780][T18959] team0: Port device team_slave_0 added [ 1691.199968][T18959] team0: Port device team_slave_1 added [ 1691.343917][T13209] tipc: Left network mode [ 1691.379741][T18959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.387169][T18959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.445299][T18959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.604122][T18959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.622431][T18959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.698783][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1691.726425][T18959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.172074][ T26] audit: type=1326 audit(1735336426.959:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19117 comm="syz.0.3116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x0 [ 1692.711179][T18959] device hsr_slave_0 entered promiscuous mode [ 1692.734531][T18959] device hsr_slave_1 entered promiscuous mode [ 1693.844429][T19140] loop0: detected capacity change from 0 to 512 [ 1694.055264][T19140] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1694.100400][T19137] loop5: detected capacity change from 0 to 512 [ 1694.122567][T19140] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1694.309587][T19137] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1695.228996][T19137] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.3119: attempt to clear invalid blocks 1024 len 1 [ 1695.616362][T19137] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3119: invalid indirect mapped block 1819239214 (level 0) [ 1695.774973][T19137] EXT4-fs (loop5): 1 truncate cleaned up [ 1695.781390][T19137] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1696.372140][T19157] netlink: 'syz.0.3120': attribute type 4 has an invalid length. [ 1696.424924][T19158] netlink: 'syz.0.3120': attribute type 4 has an invalid length. [ 1696.545122][T13209] bridge0: port 3(gretap0) entered disabled state [ 1696.563892][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1696.682938][T13209] device gretap0 left promiscuous mode [ 1696.688504][T13209] bridge0: port 3(gretap0) entered disabled state [ 1696.891259][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1696.937930][T19175] loop0: detected capacity change from 0 to 512 [ 1696.965687][T19175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1697.082187][T19175] EXT4-fs (loop0): 1 truncate cleaned up [ 1697.087916][T19175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1700.386678][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1702.002669][T19217] bridge0: port 3(gretap0) entered blocking state [ 1702.010300][T19217] bridge0: port 3(gretap0) entered disabled state [ 1702.018037][T19217] device gretap0 entered promiscuous mode [ 1702.024138][T19217] bridge0: port 3(gretap0) entered blocking state [ 1702.030669][T19217] bridge0: port 3(gretap0) entered listening state [ 1702.357645][T13209] device hsr_slave_0 left promiscuous mode [ 1702.407467][T13209] device hsr_slave_1 left promiscuous mode [ 1702.493138][T13209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1702.530719][T13209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.592047][T13209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.646587][T13209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.689892][T13209] device bridge_slave_1 left promiscuous mode [ 1702.722310][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.858446][T13209] device bridge_slave_0 left promiscuous mode [ 1702.873061][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.992056][T13209] device veth1_macvtap left promiscuous mode [ 1702.998135][T13209] device veth0_macvtap left promiscuous mode [ 1703.217854][T13209] device veth1_vlan left promiscuous mode [ 1703.223722][T13209] device veth0_vlan left promiscuous mode [ 1704.034694][T19225] loop0: detected capacity change from 0 to 40427 [ 1704.108176][T19225] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 1704.128998][T19225] F2FS-fs (loop0): invalid crc value [ 1704.142214][T19225] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1704.255463][T19225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1704.334041][T19246] 9pnet: Could not find request transport: fd0x0000000000000009Ëó [ 1704.833623][T17622] Bluetooth: hci3: sending frame failed (-49) [ 1704.841260][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 1706.949947][T19269] loop5: detected capacity change from 0 to 128 [ 1707.223684][ C0] bridge0: port 3(gretap0) entered learning state [ 1707.770781][T13209] team0 (unregistering): Port device team_slave_1 removed [ 1708.492528][T13209] team0 (unregistering): Port device team_slave_0 removed [ 1708.570785][T13209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.648313][T13209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1709.788702][T13209] bond0 (unregistering): Released all slaves [ 1710.199885][T18959] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1710.220864][T18959] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1710.230508][T19305] loop3: detected capacity change from 0 to 512 [ 1710.273476][T19305] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1710.287347][T18959] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1710.323215][T18959] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1710.364040][T19305] EXT4-fs (loop3): 1 truncate cleaned up [ 1710.377692][T19305] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1710.633661][T18959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.647744][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1710.654072][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1710.756443][T18959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.791974][T18676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1710.816907][T18676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1710.898081][T12835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1710.911631][T12835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1710.941727][T12835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.948911][T12835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.987161][T12835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1711.017688][T12835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1711.062290][T12835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.069421][T12835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.121357][T12835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1711.153588][T12835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1711.160983][T19329] syz.2.3164[19329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1711.179377][T19329] syz.2.3164[19329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1711.200786][T12835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1711.242039][T19329] x_tables: duplicate underflow at hook 1 [ 1711.264931][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1711.274204][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1711.323818][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1711.352004][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1711.394879][T18959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1711.468038][T18959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1711.567051][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1711.575350][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1711.584173][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1711.593092][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1711.602314][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1711.614426][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1712.392862][T17622] Bluetooth: hci3: sending frame failed (-49) [ 1712.400539][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 1712.536464][T19349] loop5: detected capacity change from 0 to 16 [ 1712.685887][T19349] erofs: (device loop5): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 1714.001270][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1714.030154][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1714.135789][T18959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.707617][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3173'. [ 1715.123784][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1715.507044][T19410] syz.3.3178[19410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1715.507142][T19410] syz.3.3178[19410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1715.575481][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1715.606374][T19410] x_tables: duplicate underflow at hook 1 [ 1715.624145][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1715.660359][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1715.692616][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1715.714628][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1715.809859][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1715.825022][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1715.865944][T18959] device veth0_vlan entered promiscuous mode [ 1715.985168][T18959] device veth1_vlan entered promiscuous mode [ 1716.091275][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1716.110196][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1716.157427][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1716.175105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1716.193963][T18959] device veth0_macvtap entered promiscuous mode [ 1716.216432][T18959] device veth1_macvtap entered promiscuous mode [ 1716.323383][T18959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.344341][T18959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.413008][T18959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.440534][T18959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.563940][T18959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1716.610076][T18959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.637110][T18959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.660131][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1716.675027][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1716.697903][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1716.711273][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1716.808655][T18959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.035969][T18959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.208545][T18959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.371821][T18959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.433382][T18959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.453779][T18959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.469341][T18959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1717.489525][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1717.514083][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1717.535923][T18959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.567410][T18959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.576399][T18959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.610389][T18959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.936255][T12835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.960199][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.989479][T12835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.002951][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1718.023623][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.170915][ C1] bridge0: port 3(gretap0) entered learning state [ 1718.884257][T19444] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1718.979349][T12835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1719.227630][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'. [ 1720.514652][T19478] loop4: detected capacity change from 0 to 512 [ 1720.555369][T19478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1720.677595][T19478] EXT4-fs (loop4): 1 truncate cleaned up [ 1720.710075][T19478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1720.928492][T19487] loop0: detected capacity change from 0 to 256 [ 1720.973643][T19478] Bluetooth: hci3: Frame reassembly failed (-84) [ 1721.022158][T19487] exfat: Deprecated parameter 'utf8' [ 1721.057388][T19487] exfat: Deprecated parameter 'namecase' [ 1721.089723][T19487] exfat: Deprecated parameter 'utf8' [ 1721.144896][T19487] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1722.546050][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'. [ 1723.131540][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1723.370123][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1723.644657][ C0] bridge0: port 3(gretap0) entered forwarding state [ 1723.651315][ C0] bridge0: topology change detected, propagating [ 1724.192418][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3193'. [ 1724.545900][T19534] loop3: detected capacity change from 0 to 128 [ 1724.904438][T19541] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1728.164348][T19551] 9pnet: Could not find request transport: fd0xffffffffffffffffËó [ 1728.494694][T19576] IPv6: NLM_F_CREATE should be specified when creating new route [ 1729.056870][T19583] loop3: detected capacity change from 0 to 256 [ 1729.513656][T19596] loop5: detected capacity change from 0 to 128 [ 1730.542450][T19571] loop0: detected capacity change from 0 to 40427 [ 1730.633945][T19571] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 1730.703660][T19571] F2FS-fs (loop0): invalid crc value [ 1730.780208][T19571] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1730.963037][T19620] netlink: 'syz.2.3210': attribute type 4 has an invalid length. [ 1731.717691][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3212'. [ 1732.476241][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'. [ 1733.876735][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3217'. [ 1734.602552][ C1] bridge0: port 3(gretap0) entered forwarding state [ 1734.609201][ C1] bridge0: topology change detected, propagating [ 1735.676998][T19661] 9pnet: Could not find request transport: fd0xffffffffffffffffËó [ 1737.251932][T19657] loop3: detected capacity change from 0 to 256 [ 1737.373432][T19678] loop0: detected capacity change from 0 to 128 [ 1738.000435][T19690] fuse: Unknown parameter 'grou00000000000000000000' [ 1738.311488][T19693] loop4: detected capacity change from 0 to 256 [ 1738.335363][T19693] exfat: Unknown parameter './file0' [ 1738.654601][T19695] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1738.877183][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'. [ 1739.531819][T19705] device wireguard0 entered promiscuous mode [ 1739.722684][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3230'. [ 1740.104280][T19725] 9pnet: Could not find request transport: fd0x0000000000000009Ëó [ 1740.645948][ T26] audit: type=1326 audit(1735336472.392:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19736 comm="syz.4.3235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3bf85d29 code=0x0 [ 1742.237117][ T26] audit: type=1326 audit(1735336473.626:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1742.526533][ T26] audit: type=1326 audit(1735336473.626:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1742.695088][ T26] audit: type=1326 audit(1735336473.626:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1742.876955][ T26] audit: type=1326 audit(1735336473.626:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1743.064375][ T26] audit: type=1326 audit(1735336473.626:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1743.278105][ T26] audit: type=1326 audit(1735336473.626:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1743.376054][T19767] loop0: detected capacity change from 0 to 128 [ 1743.484905][ T26] audit: type=1326 audit(1735336473.626:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1743.633625][ T26] audit: type=1326 audit(1735336473.626:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1743.667964][ T26] audit: type=1326 audit(1735336473.626:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.0.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6061585d29 code=0x7ffc0000 [ 1743.889308][T19771] fuse: Unknown parameter 'group_i00000000000000000000' [ 1744.217276][T19780] loop0: detected capacity change from 0 to 256 [ 1744.278189][T19780] exfat: Deprecated parameter 'utf8' [ 1744.283556][T19780] exfat: Deprecated parameter 'namecase' [ 1744.330853][T19780] exfat: Deprecated parameter 'utf8' [ 1744.366376][T19780] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1744.828082][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3243'. [ 1746.517441][T19804] bridge0: port 3(gretap0) entered blocking state [ 1746.524067][T19804] bridge0: port 3(gretap0) entered disabled state [ 1746.531733][T19804] device gretap0 entered promiscuous mode [ 1747.176029][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1747.176044][ T26] audit: type=1326 audit(1735336478.528:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.2.3247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2547b85d29 code=0x0 [ 1747.293639][T19816] loop5: detected capacity change from 0 to 128 [ 1748.146666][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3250'. [ 1748.162366][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3250'. [ 1748.174275][T19825] futex_wake_op: syz.5.3250 tries to shift op by -1; fix this program [ 1748.864092][T19831] fuse: Unknown parameter 'group_i00000000000000000000' [ 1749.425717][T19846] loop5: detected capacity change from 0 to 512 [ 1749.489964][T19846] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1749.591781][T19846] EXT4-fs (loop5): 1 truncate cleaned up [ 1749.597482][T19846] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1749.725586][T19846] Bluetooth: hci3: Frame reassembly failed (-84) [ 1750.390559][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3256'. [ 1751.186098][T11290] Bluetooth: hci2: command 0x0406 tx timeout [ 1752.193722][T17622] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1752.428155][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1753.014655][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 1753.030814][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 1753.042881][T19893] futex_wake_op: syz.2.3261 tries to shift op by -1; fix this program [ 1757.035890][T19938] loop0: detected capacity change from 0 to 512 [ 1757.156850][T19938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1757.194247][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'. [ 1757.238609][T19914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.269678][T19938] EXT4-fs (loop0): 1 truncate cleaned up [ 1757.284058][T19938] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1758.142539][T19938] Bluetooth: hci3: Frame reassembly failed (-84) [ 1759.243185][T19960] loop4: detected capacity change from 0 to 128 [ 1759.572062][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3274'. [ 1759.587448][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3274'. [ 1759.599548][T19966] futex_wake_op: syz.3.3274 tries to shift op by -1; fix this program [ 1760.263780][T19972] syz.3.3275[19972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.263878][T19972] syz.3.3275[19972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.319102][T19975] x_tables: duplicate underflow at hook 1 [ 1760.345807][T17622] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1760.491560][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1762.392639][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3283'. [ 1762.482802][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 1762.835697][T20012] 9pnet: Could not find request transport: fd0x0000000000000009Ëó [ 1764.102325][T20031] loop3: detected capacity change from 0 to 512 [ 1764.174182][T20031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1764.214982][T20035] syz.4.3288[20035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1764.215095][T20035] syz.4.3288[20035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1764.294438][T20038] x_tables: duplicate underflow at hook 1 [ 1764.380670][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3285'. [ 1764.396466][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3285'. [ 1764.408470][T20039] futex_wake_op: syz.0.3285 tries to shift op by -1; fix this program [ 1764.732342][T20031] EXT4-fs (loop3): 1 truncate cleaned up [ 1764.893143][T20031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1765.568911][T13219] Bluetooth: hci3: Frame reassembly failed (-84) [ 1766.494922][T20071] loop5: detected capacity change from 0 to 512 [ 1766.631038][T20071] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.5.3293: corrupted xattr block 95 [ 1766.646911][T20071] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3293: bg 0: block 7: invalid block bitmap [ 1766.663094][T20071] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1766.673493][T20071] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2925: inode #11: comm syz.5.3293: corrupted xattr block 95 [ 1766.687371][T20071] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 1766.696785][T20071] EXT4-fs (loop5): 1 orphan inode deleted [ 1766.702621][T20071] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1767.775462][T17622] Bluetooth: hci3: command 0x1003 tx timeout [ 1767.784009][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1768.554864][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1770.970593][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1771.185762][ T26] audit: type=1326 audit(1735336500.977:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20097 comm="syz.0.3298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x0 [ 1771.347777][T20121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1771.358589][T20121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1771.368352][T20121] futex_wake_op: syz.4.3300 tries to shift op by -1; fix this program [ 1776.341693][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1776.348059][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1776.567584][T20178] loop0: detected capacity change from 0 to 256 [ 1776.583159][T20178] exfat: Deprecated parameter 'utf8' [ 1776.612453][T20178] exfat: Deprecated parameter 'namecase' [ 1776.624252][T20178] exfat: Deprecated parameter 'utf8' [ 1776.693976][T20178] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1776.710883][T20183] loop5: detected capacity change from 0 to 512 [ 1776.775195][T20183] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1776.852045][T20183] EXT4-fs (loop5): 1 truncate cleaned up [ 1776.857741][T20183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1777.267928][T20193] Bluetooth: hci3: Frame reassembly failed (-84) [ 1777.377758][ T4377] Bluetooth: hci3: Frame reassembly failed (-84) [ 1778.881860][ T26] audit: type=1326 audit(1735336508.171:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20214 comm="syz.0.3314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x0 [ 1779.433663][T17622] Bluetooth: hci3: command 0x1003 tx timeout [ 1779.440059][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1780.268964][T20236] loop0: detected capacity change from 0 to 128 [ 1781.335729][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1781.559259][T20261] loop3: detected capacity change from 0 to 512 [ 1781.565801][T20260] device wireguard0 entered promiscuous mode [ 1781.718653][T20261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1781.738850][T20261] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1782.476517][T20275] netlink: 'syz.3.3323': attribute type 4 has an invalid length. [ 1782.963146][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1784.196036][ T26] audit: type=1326 audit(1735336513.072:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.5.3326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1557985d29 code=0x0 [ 1786.904253][T20328] fuse: Bad value for 'fd' [ 1787.102031][T20334] loop3: detected capacity change from 0 to 512 [ 1787.300488][T20334] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1787.731875][T20334] EXT4-fs (loop3): 1 truncate cleaned up [ 1787.783345][T20334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1788.484380][T20355] Bluetooth: hci6: Frame reassembly failed (-84) [ 1788.713040][ T51] Bluetooth: hci6: Frame reassembly failed (-84) [ 1788.756814][ T51] Bluetooth: hci6: Frame reassembly failed (-84) [ 1789.072790][ T8586] Bluetooth: hci3: command 0x1003 tx timeout [ 1789.079290][T17622] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1790.699807][T13539] Bluetooth: hci6: command 0x1003 tx timeout [ 1790.728349][T11290] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1790.803668][T20382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3341'. [ 1790.901464][T20382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.492903][T20378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3342'. [ 1791.827209][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'. [ 1791.837782][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'. [ 1791.847599][T20406] futex_wake_op: syz.2.3345 tries to shift op by -1; fix this program [ 1792.175610][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1797.085094][T20462] loop0: detected capacity change from 0 to 256 [ 1797.121725][T20462] exfat: Deprecated parameter 'utf8' [ 1797.127096][T20462] exfat: Deprecated parameter 'namecase' [ 1797.173785][T20462] exfat: Deprecated parameter 'utf8' [ 1797.272700][T20462] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1797.467134][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1797.477461][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1797.487330][T20474] futex_wake_op: syz.5.3359 tries to shift op by -1; fix this program [ 1797.762751][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1800.654974][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'. [ 1800.875135][T20501] binder: BINDER_SET_CONTEXT_MGR already set [ 1800.881681][T20501] binder: 20499:20501 ioctl 4018620d 20000040 returned -16 [ 1801.643165][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1803.095756][T20538] loop3: detected capacity change from 0 to 256 [ 1803.141646][T20538] exfat: Deprecated parameter 'utf8' [ 1803.168367][T20539] IPv6: NLM_F_CREATE should be specified when creating new route [ 1803.173938][T20538] exfat: Deprecated parameter 'namecase' [ 1803.182094][T20538] exfat: Deprecated parameter 'utf8' [ 1803.225967][T20538] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1805.542244][T20552] ptrace attach of "./syz-executor exec"[20553] was attempted by "./syz-executor exec"[20552] [ 1807.780031][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1809.162635][ T26] audit: type=1326 audit(1735336536.401:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20568 comm="syz.5.3379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1557985d29 code=0x0 [ 1812.280402][T11290] Bluetooth: hci4: command 0x0406 tx timeout [ 1815.567526][T20612] loop5: detected capacity change from 0 to 128 [ 1815.776298][ T4290] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1815.991946][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.032755][ T4290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1816.128430][ T4290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1816.154256][T20617] loop5: detected capacity change from 0 to 512 [ 1816.214745][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.270101][T20617] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1816.319094][ T4290] usb 3-1: config 0 descriptor?? [ 1816.338498][T20617] EXT4-fs (loop5): 1 truncate cleaned up [ 1816.345569][T20617] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1817.568757][T20639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.640889][T20639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.894710][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3390'. [ 1819.519964][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1819.675440][ T4290] usbhid 3-1:0.0: can't add hid device: -71 [ 1819.685624][ T4290] usbhid: probe of 3-1:0.0 failed with error -71 [ 1819.723669][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1819.765007][ T4290] usb 3-1: USB disconnect, device number 8 [ 1820.340897][T20665] loop4: detected capacity change from 0 to 128 [ 1823.810378][T20696] loop0: detected capacity change from 0 to 512 [ 1823.978018][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3404'. [ 1824.530426][T20702] loop4: detected capacity change from 0 to 512 [ 1824.674327][T20702] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1824.736167][T20696] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3403: inode #1: comm syz.0.3403: iget: illegal inode # [ 1824.866153][T20702] EXT4-fs (loop4): 1 truncate cleaned up [ 1824.871871][T20702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1826.085847][T20696] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3403: error while reading EA inode 1 err=-117 [ 1826.102082][T20696] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3403: inode #1: comm syz.0.3403: iget: illegal inode # [ 1826.116741][T20696] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3403: error while reading EA inode 1 err=-117 [ 1826.132172][T20696] EXT4-fs (loop0): 1 orphan inode deleted [ 1826.140237][T20696] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1826.346768][T20697] EXT4-fs error (device loop0): ext4_lookup:1858: inode #13: comm syz.0.3403: iget: bad extended attribute block 7177 [ 1826.555332][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1827.760437][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1827.767274][ T8586] Bluetooth: hci3: command 0x1003 tx timeout [ 1827.962867][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1828.065558][T20732] 9pnet: Could not find request transport: fd0x0000000000000009Ëó [ 1832.981585][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3427'. [ 1838.877095][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'. [ 1842.097545][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1842.116043][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1842.751892][T20891] loop4: detected capacity change from 0 to 512 [ 1842.847096][T20891] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1842.867113][T20891] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.956942][T20898] syz.3.3446[20898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1842.957045][T20898] syz.3.3446[20898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1843.997411][T20910] netlink: 'syz.4.3447': attribute type 4 has an invalid length. [ 1844.215775][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1844.367602][T20881] loop0: detected capacity change from 0 to 256 [ 1846.537990][T20935] loop4: detected capacity change from 0 to 40427 [ 1846.559977][T20935] F2FS-fs (loop4): Unrecognized mount option " " or missing value [ 1847.252071][T14792] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1852.570657][T21014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3472'. [ 1853.542860][T21028] x_tables: duplicate underflow at hook 1 [ 1853.930648][T21026] 9pnet: Could not find request transport: fd0x0000000000000009Ëó [ 1854.251171][T21047] loop4: detected capacity change from 0 to 512 [ 1854.298035][T21047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1854.412812][T21047] EXT4-fs (loop4): 1 truncate cleaned up [ 1854.418616][T21047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1855.008918][T13207] Bluetooth: hci3: Frame reassembly failed (-84) [ 1856.028187][T21075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1856.076499][T21075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.259210][T21080] loop0: detected capacity change from 0 to 256 [ 1856.296522][T21080] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1856.374668][T21080] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1856.421873][T21080] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1856.449461][T21080] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1856.507428][ T26] audit: type=1800 audit(1735336580.776:394): pid=21080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3485" name="file0" dev="loop0" ino=1048681 res=0 errno=0 [ 1857.063552][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1857.226059][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1858.405577][T21088] loop3: detected capacity change from 0 to 256 [ 1858.551549][T21108] x_tables: duplicate underflow at hook 1 [ 1859.791935][T21133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3493'. [ 1861.031479][T21151] loop0: detected capacity change from 0 to 256 [ 1861.153659][T21151] exfat: Deprecated parameter 'utf8' [ 1861.226180][T21151] exfat: Deprecated parameter 'namecase' [ 1861.630765][T21151] exfat: Deprecated parameter 'utf8' [ 1861.659072][T21151] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1862.260612][T21161] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1863.539721][T21174] device wireguard0 entered promiscuous mode [ 1864.118823][T21187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3503'. [ 1865.322796][T21208] loop0: detected capacity change from 0 to 512 [ 1865.338033][T21208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1865.369742][T21208] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1865.548606][T21208] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3511: bg 0: block 248: padding at end of block bitmap is not set [ 1865.742250][T21208] Quota error (device loop0): write_blk: dquota write failed [ 1865.853281][T21208] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1866.107682][T21208] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.3511: Failed to acquire dquot type 1 [ 1866.179317][T21208] EXT4-fs (loop0): 1 truncate cleaned up [ 1866.217101][T21208] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1866.425369][T21221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1867.209202][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1867.355825][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1867.540484][T21238] device wireguard0 entered promiscuous mode [ 1867.937512][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3516'. [ 1867.980445][T21241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.586540][T21257] ptrace attach of "./syz-executor exec"[21258] was attempted by "./syz-executor exec"[21257] [ 1870.512139][ T26] audit: type=1326 audit(1735336593.863:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21255 comm="syz.0.3518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x0 [ 1870.903040][T21276] loop4: detected capacity change from 0 to 128 [ 1877.624324][T21345] loop3: detected capacity change from 0 to 128 [ 1877.971040][T21356] IPv6: NLM_F_CREATE should be specified when creating new route [ 1880.761516][T21386] loop3: detected capacity change from 0 to 512 [ 1880.817155][T21386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1880.902095][T21386] EXT4-fs (loop3): 1 truncate cleaned up [ 1880.924983][T21386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1882.746038][T21404] device wireguard0 entered promiscuous mode [ 1884.260367][ T8586] Bluetooth: hci3: command 0x1003 tx timeout [ 1884.268613][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1884.404767][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1884.485475][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3555'. [ 1887.794558][T21468] netlink: 'syz.0.3565': attribute type 4 has an invalid length. [ 1890.153968][T21476] loop3: detected capacity change from 0 to 40427 [ 1890.166721][T21476] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 1890.369788][T21501] netlink: 'syz.5.3572': attribute type 32 has an invalid length. [ 1890.377758][T21501] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1891.655145][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 1891.671578][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 1891.683601][T21519] futex_wake_op: syz.3.3580 tries to shift op by -1; fix this program [ 1892.341049][T21530] bridge0: port 3(gretap0) entered blocking state [ 1892.348411][T21530] bridge0: port 3(gretap0) entered disabled state [ 1892.368017][T21530] device gretap0 entered promiscuous mode [ 1892.377128][T21530] bridge0: port 3(gretap0) entered blocking state [ 1892.383616][T21530] bridge0: port 3(gretap0) entered forwarding state [ 1892.512150][T21531] loop5: detected capacity change from 0 to 512 [ 1893.477055][T21531] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1893.487970][T21531] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1893.497462][T21531] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.3581: Failed to acquire dquot type 0 [ 1893.516303][T21531] EXT4-fs (loop5): Remounting filesystem read-only [ 1893.526340][T21531] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1893.537351][T21531] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1893.546803][T21531] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.3581: Failed to acquire dquot type 0 [ 1893.564186][T21531] EXT4-fs (loop5): Remounting filesystem read-only [ 1893.580783][T21531] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1893.591385][T21531] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1893.600895][T21531] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.3581: Failed to acquire dquot type 0 [ 1893.618891][T21531] EXT4-fs (loop5): Remounting filesystem read-only [ 1893.626070][T21531] EXT4-fs (loop5): 1 orphan inode deleted [ 1893.631910][T21531] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1893.642368][T21531] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1894.415678][T21527] loop3: detected capacity change from 0 to 2048 [ 1894.458111][T21540] block device autoloading is deprecated and will be removed. [ 1894.481383][T21540] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1894.617482][T21527] loop3: p2 < > p4 [ 1894.632404][T21527] loop3: p4 size 8192 extends beyond EOD, truncated [ 1894.848924][ T3622] loop3: p2 < > p4 [ 1894.874092][ T3622] loop3: p4 size 8192 extends beyond EOD, truncated [ 1895.273567][T16338] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1895.283147][T14792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1895.292749][T14792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1895.296799][T17128] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1895.357683][T14792] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1895.395106][T14792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1895.418967][T17128] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1895.461271][T14792] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1895.491190][T17128] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 1895.514292][T14792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1895.566984][T14792] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1895.601893][T14792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1895.653358][T14792] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1895.703549][T14792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1895.746262][T14792] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1895.867302][T21550] device wireguard0 entered promiscuous mode [ 1895.886583][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1895.946881][T14792] udevd[14792]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1895.967738][T17128] udevd[17128]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1896.068459][T14792] udevd[14792]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1896.395541][T17128] udevd[17128]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1896.753055][T21566] loop5: detected capacity change from 0 to 256 [ 1896.819683][T21566] exfat: Deprecated parameter 'utf8' [ 1896.852427][T17128] udevd[17128]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1896.868947][T14792] udevd[14792]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1896.887727][T21566] exfat: Deprecated parameter 'namecase' [ 1896.902091][T21566] exfat: Deprecated parameter 'utf8' [ 1896.915270][T21566] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1897.726117][T21560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3592'. [ 1897.741369][T21560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3592'. [ 1897.839123][T21575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1898.182395][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1900.334824][T21592] loop4: detected capacity change from 0 to 40427 [ 1900.375685][T21592] F2FS-fs (loop4): Unrecognized mount option " " or missing value [ 1900.727890][ T26] audit: type=1326 audit(1735336622.093:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21595 comm="syz.0.3601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x0 [ 1901.694594][T21604] loop4: detected capacity change from 0 to 16 [ 1901.749796][T21604] erofs: (device loop4): mounted with root inode @ nid 36. [ 1901.774307][T21604] overlayfs: unrecognized mount option "/fat" or missing value [ 1903.232194][T21614] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1903.414388][T21619] loop4: detected capacity change from 0 to 128 [ 1903.454533][T21619] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1903.507117][T21612] loop5: detected capacity change from 0 to 256 [ 1903.539420][T21619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1903.587732][T21619] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1907.091050][T21646] loop3: detected capacity change from 0 to 512 [ 1907.146615][T21646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1907.196846][T21646] EXT4-fs (loop3): 1 truncate cleaned up [ 1907.215311][T21646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1907.223611][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1907.672973][T11330] Bluetooth: hci3: Frame reassembly failed (-84) [ 1907.701156][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1907.709692][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1907.740734][T11330] Bluetooth: hci3: Frame reassembly failed (-84) [ 1908.230487][T21665] fuse: Bad value for 'fd' [ 1909.440240][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3619'. [ 1909.834069][ T8586] Bluetooth: hci3: command 0x1003 tx timeout [ 1909.844102][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1910.867294][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1911.546515][T21698] bridge0: port 4(vlan2) entered blocking state [ 1911.552966][T21698] bridge0: port 4(vlan2) entered disabled state [ 1915.002721][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3627'. [ 1915.438140][T21717] loop3: detected capacity change from 0 to 512 [ 1915.450917][T21717] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1915.896468][T21717] EXT4-fs (loop3): 1 truncate cleaned up [ 1915.950496][T21717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1918.897775][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1919.059112][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1919.428710][T21753] loop4: detected capacity change from 0 to 256 [ 1919.554475][T21753] FAT-fs (loop4): Directory bread(block 64) failed [ 1919.571799][T21753] FAT-fs (loop4): Directory bread(block 65) failed [ 1919.608682][T21753] FAT-fs (loop4): Directory bread(block 66) failed [ 1919.636895][T21753] FAT-fs (loop4): Directory bread(block 67) failed [ 1919.675909][T21753] FAT-fs (loop4): Directory bread(block 68) failed [ 1919.720917][T21753] FAT-fs (loop4): Directory bread(block 69) failed [ 1919.723866][T21760] loop5: detected capacity change from 0 to 128 [ 1919.749181][T21753] FAT-fs (loop4): Directory bread(block 70) failed [ 1919.770681][T21753] FAT-fs (loop4): Directory bread(block 71) failed [ 1919.809611][T21753] FAT-fs (loop4): Directory bread(block 72) failed [ 1919.816188][T21753] FAT-fs (loop4): Directory bread(block 73) failed [ 1920.197215][ T26] audit: type=1326 audit(1735336640.361:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21759 comm="syz.5.3646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1557985d29 code=0x0 [ 1920.961508][T21766] loop4: detected capacity change from 0 to 256 [ 1921.016055][T21766] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1922.032632][T21781] loop5: detected capacity change from 0 to 16 [ 1922.042643][T21781] erofs: (device loop5): mounted with root inode @ nid 36. [ 1922.759877][T21799] loop5: detected capacity change from 0 to 1024 [ 1923.858832][T21799] EXT4-fs: Ignoring removed i_version option [ 1923.947004][T21799] EXT4-fs: inline encryption not supported [ 1924.041257][T21799] EXT4-fs: Ignoring removed mblk_io_submit option [ 1924.112249][T21799] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1924.334422][T21799] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1925.751884][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1925.892906][T21822] fuse: Unknown parameter '0x0000000000000003' [ 1926.084222][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3664'. [ 1929.504697][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3673'. [ 1929.642757][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3673'. [ 1931.790684][T21871] Bluetooth: hci3: Frame reassembly failed (-84) [ 1932.302931][ T4377] Bluetooth: hci3: Frame reassembly failed (-84) [ 1932.617127][T21875] loop3: detected capacity change from 0 to 512 [ 1932.708786][T21875] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1932.857486][T21878] loop4: detected capacity change from 0 to 512 [ 1932.873471][T21875] EXT4-fs (loop3): 1 truncate cleaned up [ 1932.879499][T21875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1932.947448][T21878] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1933.161131][T21878] EXT4-fs (loop4): 1 truncate cleaned up [ 1933.166829][T21878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1934.343203][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3679'. [ 1934.779688][T13539] Bluetooth: hci3: command 0x1003 tx timeout [ 1935.125754][T11290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1935.747572][T21888] Bluetooth: hci3: Frame reassembly failed (-84) [ 1935.782942][ T11] Bluetooth: hci3: Frame reassembly failed (-84) [ 1936.876489][ T8586] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1937.200895][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1937.971161][T17622] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1938.103251][T21914] loop5: detected capacity change from 0 to 256 [ 1938.144358][T21914] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1939.018329][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1941.292118][T21935] loop3: detected capacity change from 0 to 40427 [ 1941.310357][T21935] F2FS-fs (loop3): Unrecognized mount option " " or missing value [ 1942.015380][T21945] loop3: detected capacity change from 0 to 1024 [ 1942.105112][T21945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1942.113760][T21945] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1943.487159][T16338] EXT4-fs (loop3): unmounting filesystem. [ 1944.197162][T21973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1944.704118][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1945.593280][T21987] ptrace attach of "./syz-executor exec"[21988] was attempted by "./syz-executor exec"[21987] [ 1949.313499][T22005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3710'. [ 1949.413897][T22007] loop4: detected capacity change from 0 to 512 [ 1949.424158][T22007] EXT4-fs: Ignoring removed mblk_io_submit option [ 1949.585892][T22004] loop5: detected capacity change from 0 to 1024 [ 1949.597418][T22007] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1949.662512][ T26] audit: type=1800 audit(1735336667.928:398): pid=22001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3709" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1949.965851][T22004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1949.974401][T22004] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1951.222676][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1951.321147][T22033] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1952.512729][ T8583] EXT4-fs (loop5): unmounting filesystem. [ 1952.527317][T22040] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1953.478285][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3723'. [ 1953.877664][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1953.887950][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1953.897819][T22065] futex_wake_op: syz.2.3722 tries to shift op by -1; fix this program [ 1953.927099][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3723'. [ 1956.188142][T22088] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1957.093525][T22096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 1957.765881][T22098] loop0: detected capacity change from 0 to 512 [ 1957.804708][T22098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1957.880480][T22098] EXT4-fs (loop0): 1 truncate cleaned up [ 1957.939180][T22098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1958.384064][ T4377] Bluetooth: hci3: Frame reassembly failed (-84) [ 1958.968616][T22107] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1959.437045][ T26] audit: type=1326 audit(1735336677.048:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.5.3738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1557985d29 code=0x0 [ 1960.462948][T17622] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1960.707723][T17473] EXT4-fs (loop0): unmounting filesystem. [ 1960.743650][T22131] loop4: detected capacity change from 0 to 512 [ 1960.890259][T22131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1960.910547][T22131] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1961.329531][T22142] netlink: 'syz.4.3745': attribute type 4 has an invalid length. [ 1961.725142][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1962.599935][ T26] audit: type=1326 audit(1735336680.022:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22155 comm="syz.4.3751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3bf85d29 code=0x0 [ 1963.643838][T22166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1964.430639][T22166] futex_wake_op: syz.0.3747 tries to shift op by -1; fix this program [ 1964.613011][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3754'. [ 1964.742459][T22175] loop4: detected capacity change from 0 to 512 [ 1964.809938][T22175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1964.982679][T22175] EXT4-fs (loop4): 1 truncate cleaned up [ 1964.992439][T22175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1967.502690][T22194] netlink: 'syz.2.3759': attribute type 4 has an invalid length. [ 1967.909645][T17622] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1967.924881][ T8586] Bluetooth: hci3: command 0x1003 tx timeout [ 1969.172307][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1969.333855][T22201] loop5: detected capacity change from 0 to 40427 [ 1969.377046][T22201] F2FS-fs (loop5): Unrecognized mount option "" or missing value [ 1969.549868][T22205] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3762'. [ 1970.391679][T22217] device wireguard0 entered promiscuous mode [ 1971.581993][T22230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1972.832802][T22234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1973.094464][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1973.176392][T22245] loop4: detected capacity change from 0 to 512 [ 1973.369169][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3773'. [ 1973.387464][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1973.390889][T22245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1973.397046][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1973.440434][T22245] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1973.759060][ T26] audit: type=1326 audit(1735336690.461:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22253 comm="syz.0.3774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6061585d29 code=0x0 [ 1974.133717][T22245] netlink: 'syz.4.3772': attribute type 4 has an invalid length. [ 1975.111245][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1975.181665][T22265] loop5: detected capacity change from 0 to 40427 [ 1975.207595][T22265] F2FS-fs (loop5): Unrecognized mount option " " or missing value [ 1975.425290][T22273] loop4: detected capacity change from 0 to 256 [ 1975.633876][T22273] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1978.718330][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3781'. [ 1979.223077][T22295] loop4: detected capacity change from 0 to 128 [ 1979.254944][T22295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1979.607826][T22295] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1980.433568][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1982.187465][T22315] loop4: detected capacity change from 0 to 128 [ 1982.975506][ T26] audit: type=1326 audit(1735336698.497:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.2.3789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2547b85d29 code=0x0 [ 1983.095712][T22315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1983.159206][T22315] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1983.444693][T22339] xt_hashlimit: size too large, truncated to 1048576 [ 1983.879824][T22330] 9pnet_fd: Insufficient options for proto=fd [ 1984.248354][ T8586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1984.258324][ T8586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1984.267526][ T8586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1984.282011][T13539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1984.289682][T13539] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1984.303212][T13539] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1986.462625][T13539] Bluetooth: hci1: command 0x0409 tx timeout [ 1986.565344][T18959] EXT4-fs (loop4): unmounting filesystem. [ 1986.791400][T22361] loop0: detected capacity change from 0 to 512 [ 1986.880749][T22361] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1986.920521][T22361] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.3797: bad orphan inode 131083 [ 1986.939702][T22361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1989.055234][T13539] Bluetooth: hci1: command 0x041b tx timeout [ 1989.354038][T22350] chnl_net:caif_netlink_parms(): no params data found [ 1989.626146][T22350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.655879][T22350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.670084][T22350] device bridge_slave_0 entered promiscuous mode [ 1989.700432][T22350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.708468][T22350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1989.721103][T22350] device bridge_slave_1 entered promiscuous mode [ 1989.734833][T22386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'. [ 1989.805957][T22350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1989.825196][T22350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1989.912582][T22350] team0: Port device team_slave_0 added [ 1989.946106][T22350] team0: Port device team_slave_1 added [ 1990.029901][T22350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1990.042542][T22350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1990.113104][T22350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1990.145212][T22350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1990.160094][T22350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1990.213872][T22350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1990.312790][T22350] device hsr_slave_0 entered promiscuous mode [ 1990.327256][T22350] device hsr_slave_1 entered promiscuous mode [ 1990.441237][T22350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1990.448846][T22350] Cannot create hsr debugfs directory [ 1991.252326][T17622] Bluetooth: hci1: command 0x040f tx timeout [ 1991.844521][T22350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1991.895551][T22350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1991.925968][T22350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1991.964526][T22350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1992.199234][T22350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1992.259172][T22350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1992.307722][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1992.324828][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1992.359784][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1992.384170][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1992.414668][T13219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1992.421887][T13219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1992.460151][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1992.485660][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1992.500526][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1992.512650][T13219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.519829][T13219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1992.575711][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1992.592907][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1992.607656][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1992.627282][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1992.673473][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1992.711563][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1993.458440][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1993.467428][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1993.476693][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1993.500030][T22350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1993.510620][T17622] Bluetooth: hci1: command 0x0419 tx timeout [ 1993.626699][T22350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1993.907953][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1993.917913][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1994.786235][T22424] ptrace attach of "./syz-executor exec"[22425] was attempted by "./syz-executor exec"[22424] [ 1995.750918][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1995.773048][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1995.815273][T22350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1996.469929][T22439] loop3: detected capacity change from 0 to 128 [ 1996.824438][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1996.854561][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1996.902088][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1996.918718][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1996.940891][T22350] device veth0_vlan entered promiscuous mode [ 1996.960995][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1996.968943][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1996.998394][T22446] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1997.005023][T22350] device veth1_vlan entered promiscuous mode [ 1997.057493][T22350] device veth0_macvtap entered promiscuous mode [ 1997.064703][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1997.087719][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1997.121595][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1997.152230][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1997.166477][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1997.223460][T22350] device veth1_macvtap entered promiscuous mode [ 1997.285436][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1997.317757][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.360914][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1997.393555][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.475191][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1997.850276][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1998.037176][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1998.162209][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1998.181704][T22350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1998.222519][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1998.259557][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1998.291937][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1998.392855][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1998.436644][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1998.453708][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1998.474788][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1998.500082][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1998.539844][T22350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1998.560693][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1998.571146][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1998.618588][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1998.643049][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1998.668229][T13219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1998.681521][T22350] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.690664][T22350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.700170][T22350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.710174][T22350] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.732816][T22463] loop3: detected capacity change from 0 to 256 [ 1998.891961][T13217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.926870][T13217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.949918][T13219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.958061][T13219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1999.038229][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1999.088804][T13217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2000.091015][T22473] loop5: detected capacity change from 0 to 512 [ 2000.216343][T22473] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2000.341982][T22473] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2001.219503][T22488] loop3: detected capacity change from 0 to 128 [ 2001.407384][T22493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3827'. [ 2001.663494][T22497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3828'. [ 2001.680478][T22497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3828'. [ 2001.693616][T22497] futex_wake_op: syz.2.3828 tries to shift op by -1; fix this program [ 2002.265248][T22473] netlink: 'syz.5.3787': attribute type 4 has an invalid length. [ 2002.295833][T22493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 2002.781698][T22501] 9pnet: Could not find request transport: fd0x0000000000000009Ëó [ 2002.840117][T22350] EXT4-fs (loop5): unmounting filesystem. [ 2003.405603][T22519] device wireguard0 entered promiscuous mode [ 2004.030764][T22524] loop3: detected capacity change from 0 to 1024 [ 2004.107547][T22524] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2004.116413][T22524] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2004.401045][T16338] EXT4-fs (loop3): unmounting filesystem. [ 2004.523044][T22529] loop4: detected capacity change from 0 to 512 [ 2004.583691][T22529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2004.622763][T22529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2004.706905][T22529] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 2004.832097][T22529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 2004.888994][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3836'. [ 2004.926923][T22529] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 2004.966181][T22529] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 2005.006116][T22529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2005.038170][T22529] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.3837: dx entry: limit 65535 != root limit 120 [ 2005.051106][T22529] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3837: Corrupt directory, running e2fsck is recommended [ 2005.072625][T22529] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.3837: path /124/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 2005.129444][T18959] EXT4-fs (loop4): unmounting filesystem. [ 2007.537076][T22563] loop4: detected capacity change from 0 to 1024 [ 2007.620004][T22563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2007.628538][T22563] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2007.953308][T18959] EXT4-fs (loop4): unmounting filesystem. [ 2008.183703][T13539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2008.195187][T13539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2008.204219][T13539] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2008.214017][T13539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2008.221906][T13539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2008.229749][T13539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2008.400669][T22578] x_tables: duplicate underflow at hook 1 [ 2008.469456][T22577] loop4: detected capacity change from 0 to 256 [ 2008.614309][T22571] chnl_net:caif_netlink_parms(): no params data found [ 2009.219132][T22571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2009.237172][T22571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2009.276333][T22571] device bridge_slave_0 entered promiscuous mode [ 2009.321227][T22571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2009.328423][T22571] bridge0: port 2(bridge_slave_1) entered disabled state [ 2009.360772][T22571] device bridge_slave_1 entered promiscuous mode [ 2009.630634][T22571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2010.409655][T17622] Bluetooth: hci3: command 0x0409 tx timeout [ 2010.664505][T22571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2010.801313][T22607] loop3: detected capacity change from 0 to 1024 [ 2010.855480][T22571] team0: Port device team_slave_0 added [ 2010.899088][T22571] team0: Port device team_slave_1 added [ 2011.262008][T22607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2011.270878][T22607] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2011.759642][T22571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.770232][T16338] EXT4-fs (loop3): unmounting filesystem. [ 2011.781805][T22571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2011.945231][T22571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.015641][T22571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.022618][T22571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.130636][T22571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.698858][T13539] Bluetooth: hci3: command 0x041b tx timeout [ 2013.011141][T22571] device hsr_slave_0 entered promiscuous mode [ 2013.045715][T22622] xt_CT: No such helper "snmp" [ 2013.054729][T22571] device hsr_slave_1 entered promiscuous mode [ 2013.071597][T22571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2013.090069][T22571] Cannot create hsr debugfs directory [ 2013.531863][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3861'. [ 2013.548038][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3861'. [ 2013.560088][T22632] futex_wake_op: syz.2.3861 tries to shift op by -1; fix this program [ 2014.266511][T22638] x_tables: duplicate underflow at hook 1 [ 2014.857081][T17622] Bluetooth: hci3: command 0x040f tx timeout [ 2014.872527][T22645] 9pnet: Could not find request transport: fd0x0000000000000009Ëó [ 2015.321680][T22664] loop4: detected capacity change from 0 to 1024 [ 2015.365360][T22664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2015.374589][T22664] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2016.444211][T18959] EXT4-fs (loop4): unmounting filesystem. [ 2017.080987][T17622] Bluetooth: hci3: command 0x0419 tx timeout [ 2018.205149][T22571] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2018.408928][T22571] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2018.457513][T22571] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2018.633693][T22702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3874'. [ 2018.649660][T22702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3874'. [ 2018.662355][T22702] futex_wake_op: syz.5.3874 tries to shift op by -1; fix this program [ 2018.913510][T22571] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2019.528504][T22571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2019.615362][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2019.623320][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2019.729222][T22715] loop5: detected capacity change from 0 to 256 [ 2019.736802][T22571] 8021q: adding VLAN 0 to HW filter on device team0 [ 2019.990587][T22715] exfat: Deprecated parameter 'utf8' [ 2020.060506][T22715] exfat: Deprecated parameter 'namecase' [ 2020.144332][T22715] exfat: Deprecated parameter 'utf8' [ 2020.345564][T22715] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 2020.464500][T22716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3877'. [ 2020.501761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2020.510585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2020.679555][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.686744][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2020.806154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2020.881885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2020.966280][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.973451][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.079129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2021.120730][T22698] tipc: Enabling of bearer rejected, failed to enable media [ 2021.189809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2021.198539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2021.293340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2021.328187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2021.357820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2021.389416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2021.421209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2021.453368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2021.466528][T22571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2021.506308][T22571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2021.528991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2021.549404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2021.558056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2021.988758][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2021.996222][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2022.044132][T22571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2022.532274][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2022.552064][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2022.623976][T22571] device veth0_vlan entered promiscuous mode [ 2022.643682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2022.653568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2022.676613][T22571] device veth1_vlan entered promiscuous mode [ 2022.685304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2022.702873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2022.716464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2022.766881][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2022.789935][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2022.798638][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2022.845755][T22571] device veth0_macvtap entered promiscuous mode [ 2022.866554][T22571] device veth1_macvtap entered promiscuous mode [ 2022.902252][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.920197][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.936181][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.960127][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.969958][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.995475][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.012209][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.031217][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.043356][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.063193][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.095178][T22571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2023.108361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2023.125305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2023.134754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2023.144861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2023.158690][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.177312][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.191628][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.214623][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.224628][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.245697][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.258934][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.277081][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.287085][T22571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.305468][T22571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.319641][T22571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2023.331972][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2023.357295][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2023.400206][T22571] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.408970][T22571] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.424605][T22571] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.433729][T22571] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.590534][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2023.612194][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2023.624324][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2023.668800][ T4438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2023.688019][ T4438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2023.718814][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2039.076919][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2039.083277][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.747326][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.753658][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 2117.914152][T13539] Bluetooth: hci1: command 0x0406 tx timeout [ 2139.820230][T17622] Bluetooth: hci3: command 0x0406 tx timeout [ 2145.121813][ T27] INFO: task syz-executor:17473 blocked for more than 143 seconds. [ 2145.129753][ T27] Tainted: G W 6.1.122-syzkaller #0 [ 2145.144241][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2145.152939][ T27] task:syz-executor state:D stack:20304 pid:17473 ppid:1 flags:0x00004004 [ 2145.170173][ T27] Call Trace: [ 2145.173471][ T27] [ 2145.177445][ T27] __schedule+0x143f/0x4570 [ 2145.181988][ T27] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 2145.194559][ T27] ? release_firmware_map_entry+0x186/0x186 [ 2145.206579][ T27] ? prepare_to_wait_event+0x3b5/0x3f0 [ 2145.221654][ T27] schedule+0xbf/0x180 [ 2145.225750][ T27] wb_wait_for_completion+0x162/0x290 [ 2145.236060][ T27] ? __bpf_trace_writeback_inode_template+0x20/0x20 [ 2145.244888][ T27] ? wake_bit_function+0x210/0x210 [ 2145.255016][ T27] __writeback_inodes_sb_nr+0x2ce/0x370 [ 2145.262805][ T27] ? writeback_inodes_sb_nr+0x30/0x30 [ 2145.268207][ T27] ? get_nr_dirty_inodes+0x2ab/0x2e0 [ 2145.278448][ T27] sync_filesystem+0xa0/0x220 [ 2145.290517][ T27] generic_shutdown_super+0x6b/0x340 [ 2145.300833][ T27] kill_block_super+0x7a/0xe0 [ 2145.307555][ T27] deactivate_locked_super+0xa0/0x110 [ 2145.323612][ T27] cleanup_mnt+0x490/0x520 [ 2145.330073][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 2145.335313][ T27] task_work_run+0x246/0x300 [ 2145.349649][ T27] ? task_work_cancel+0x2e0/0x2e0 [ 2145.354703][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 2145.363125][ T27] exit_to_user_mode_loop+0xde/0x100 [ 2145.376426][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 2145.384978][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 2145.394585][ T27] do_syscall_64+0x47/0xb0 [ 2145.399037][ T27] ? clear_bhb_loop+0x45/0xa0 [ 2145.407258][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2145.417615][ T27] RIP: 0033:0x7f6061587057 [ 2145.426969][ T27] RSP: 002b:00007ffc1e281098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2145.445999][ T27] RAX: 0000000000000000 RBX: 00007f60616018f4 RCX: 00007f6061587057 [ 2145.463817][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1e281150 [ 2145.471818][ T27] RBP: 00007ffc1e281150 R08: 0000000000000000 R09: 0000000000000000 [ 2145.486456][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1e2821d0 [ 2145.494458][ T27] R13: 00007f60616018f4 R14: 00007ffc1e282210 R15: 00000000000000e2 [ 2145.510106][ T27] [ 2145.513193][ T27] [ 2145.513193][ T27] Showing all locks held in the system: [ 2145.524265][ T27] 1 lock held by rcu_tasks_kthre/12: [ 2145.531412][ T27] #0: ffffffff8d32b290 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x34/0xde0 [ 2145.542036][ T27] 1 lock held by rcu_tasks_trace/13: [ 2145.547326][ T27] #0: ffffffff8d32bab0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x34/0xde0 [ 2145.559642][ T27] 1 lock held by khungtaskd/27: [ 2145.564705][ T27] #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2145.575944][ T27] 2 locks held by getty/4005: [ 2145.580634][ T27] #0: ffff888031222098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2145.590475][ T27] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 2145.600633][ T27] 2 locks held by kworker/u4:29/13240: [ 2145.606830][ T27] 1 lock held by syz-executor/17473: [ 2145.612123][ T27] #0: ffff88807cb140e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 2145.629833][ T27] [ 2145.632178][ T27] ============================================= [ 2145.632178][ T27] [ 2145.642364][ T27] NMI backtrace for cpu 0 [ 2145.646715][ T27] CPU: 0 PID: 27 Comm: khungtaskd Tainted: G W 6.1.122-syzkaller #0 [ 2145.656086][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2145.666142][ T27] Call Trace: [ 2145.669429][ T27] [ 2145.672368][ T27] dump_stack_lvl+0x1e3/0x2cb [ 2145.677065][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 2145.682538][ T27] ? panic+0x764/0x764 [ 2145.686622][ T27] ? vprintk_emit+0x622/0x740 [ 2145.691312][ T27] ? printk_sprint+0x490/0x490 [ 2145.696092][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 2145.701222][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 2145.706181][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 2145.712346][ T27] ? _printk+0xd1/0x111 [ 2145.716509][ T27] ? panic+0x764/0x764 [ 2145.720585][ T27] ? __wake_up_klogd+0xcc/0x100 [ 2145.725437][ T27] ? panic+0x764/0x764 [ 2145.729514][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 2145.735597][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2145.741669][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 2145.747670][ T27] watchdog+0xf88/0xfd0 [ 2145.751839][ T27] ? watchdog+0x1f8/0xfd0 [ 2145.756187][ T27] kthread+0x28d/0x320 [ 2145.760274][ T27] ? hungtask_pm_notify+0x50/0x50 [ 2145.765311][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2145.769905][ T27] ret_from_fork+0x1f/0x30 [ 2145.774341][ T27] [ 2145.778341][ T27] Sending NMI from CPU 0 to CPUs 1: [ 2145.783784][ C1] NMI backtrace for cpu 1 [ 2145.783804][ C1] CPU: 1 PID: 3604 Comm: syslogd Tainted: G W 6.1.122-syzkaller #0 [ 2145.783819][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2145.783828][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 2145.783850][ C1] Code: 00 0f 0b 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 78 6c 10 0d 48 89 de 5b e9 67 bc 56 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0d c4 d2 77 7e 65 8b 15 c5 d2 77 7e 81 e2 00 01 ff 00 74 [ 2145.783862][ C1] RSP: 0018:ffffc90003207928 EFLAGS: 00000283 [ 2145.783876][ C1] RAX: ffffffff81e24942 RBX: 00000000000000a8 RCX: ffff88807d8bd940 [ 2145.783887][ C1] RDX: ffff88807d8bd940 RSI: 00000000000000a8 RDI: 00000000000000a8 [ 2145.783897][ C1] RBP: dffffc0000000000 R08: ffffffff81e24913 R09: fffffbfff2e83589 [ 2145.783908][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88823bcc4000 [ 2145.783918][ C1] R13: 1ffffffff2e7afee R14: ffff88823bcc4183 R15: ffffffff973d7f70 [ 2145.783928][ C1] FS: 00007fd907297380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2145.783941][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2145.783952][ C1] CR2: 0000557f2ef6a600 CR3: 0000000031b99000 CR4: 00000000003506e0 [ 2145.783965][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2145.783973][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2145.783982][ C1] Call Trace: [ 2145.783987][ C1] [ 2145.783992][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 2145.784012][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2145.784032][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 2145.784051][ C1] ? nmi_handle+0x25/0x440 [ 2145.784076][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 2145.784090][ C1] ? nmi_handle+0x12e/0x440 [ 2145.784108][ C1] ? nmi_handle+0x25/0x440 [ 2145.784126][ C1] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2145.784142][ C1] ? default_do_nmi+0x62/0x150 [ 2145.784156][ C1] ? exc_nmi+0xa8/0x100 [ 2145.784169][ C1] ? end_repeat_nmi+0x16/0x31 [ 2145.784185][ C1] ? kfence_guarded_free+0x2e3/0x7f0 [ 2145.784200][ C1] ? kfence_guarded_free+0x312/0x7f0 [ 2145.784217][ C1] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2145.784240][ C1] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2145.784257][ C1] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2145.784274][ C1] [ 2145.784278][ C1] [ 2145.784283][ C1] kfence_guarded_free+0x312/0x7f0 [ 2145.784302][ C1] __unix_dgram_recvmsg+0xcb3/0x1260 [ 2145.784322][ C1] ? aa_file_perm+0x12c/0xf60 [ 2145.784342][ C1] ? aa_sk_perm+0x92d/0xa60 [ 2145.784361][ C1] ? unix_unhash+0x10/0x10 [ 2145.784380][ C1] ? aa_af_perm+0x350/0x350 [ 2145.784400][ C1] ? aa_file_perm+0x3e3/0xf60 [ 2145.784416][ C1] ? generic_file_write_iter+0xb6/0x310 [ 2145.784431][ C1] ? aa_file_perm+0x12c/0xf60 [ 2145.784448][ C1] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2145.784465][ C1] ? security_socket_recvmsg+0x86/0xb0 [ 2145.784480][ C1] ? unix_dgram_recvmsg+0xaf/0xd0 [ 2145.784493][ C1] ? unix_dgram_sendmsg+0x2050/0x2050 [ 2145.784508][ C1] sock_read_iter+0x3b2/0x4b0 [ 2145.784530][ C1] ? kernel_sock_ip_overhead+0x590/0x590 [ 2145.784554][ C1] ? common_file_perm+0x17d/0x1d0 [ 2145.784574][ C1] vfs_read+0x88d/0xbf0 [ 2145.784592][ C1] ? kernel_read+0x1f0/0x1f0 [ 2145.784607][ C1] ? __rseq_handle_notify_resume+0x3b7/0x1500 [ 2145.784630][ C1] ? __fdget_pos+0x1db/0x360 [ 2145.784646][ C1] ksys_read+0x19c/0x2c0 [ 2145.784659][ C1] ? print_irqtrace_events+0x210/0x210 [ 2145.784679][ C1] ? vfs_write+0xbc0/0xbc0 [ 2145.784693][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2145.784708][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 2145.784723][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2145.784739][ C1] do_syscall_64+0x3b/0xb0 [ 2145.784756][ C1] ? clear_bhb_loop+0x45/0xa0 [ 2145.784769][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2145.784788][ C1] RIP: 0033:0x7fd9073ebb6a [ 2145.784800][ C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 2145.784811][ C1] RSP: 002b:00007ffc5c681b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2145.784825][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd9073ebb6a [ 2145.784835][ C1] RDX: 00000000000000ff RSI: 0000559bd2a72950 RDI: 0000000000000000 [ 2145.784844][ C1] RBP: 0000559bd2a72910 R08: 0000000000000001 R09: 0000000000000000 [ 2145.784854][ C1] R10: 00007fd90758a3a3 R11: 0000000000000246 R12: 0000559bd2a72999 [ 2145.784864][ C1] R13: 0000559bd2a72950 R14: 0000000000000000 R15: 00007fd9075c8a80 [ 2145.784880][ C1] [ 2145.792025][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 2145.792038][ T27] CPU: 0 PID: 27 Comm: khungtaskd Tainted: G W 6.1.122-syzkaller #0 [ 2145.792057][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2145.792066][ T27] Call Trace: [ 2145.792072][ T27] [ 2145.792079][ T27] dump_stack_lvl+0x1e3/0x2cb [ 2145.792108][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 2145.792132][ T27] ? panic+0x764/0x764 [ 2145.792149][ T27] ? llist_add_batch+0x160/0x1d0 [ 2145.792174][ T27] ? vscnprintf+0x59/0x80 [ 2145.792195][ T27] panic+0x318/0x764 [ 2145.792213][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 2145.792238][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 2145.792260][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 2145.792283][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 2145.792309][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 2145.792335][ T27] watchdog+0xfc7/0xfd0 [ 2145.792361][ T27] ? watchdog+0x1f8/0xfd0 [ 2145.792385][ T27] kthread+0x28d/0x320 [ 2145.792399][ T27] ? hungtask_pm_notify+0x50/0x50 [ 2145.792419][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2145.792437][ T27] ret_from_fork+0x1f/0x30 [ 2145.792469][ T27] [ 2145.798738][ T27] Kernel Offset: disabled [ 2146.354681][ T27] Rebooting in 86400 seconds..