last executing test programs: 10.27154488s ago: executing program 4 (id=1084): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfffffffb, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="186500000500000000000000080300"/24], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010303000000000000000b000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{}]}) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xc7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06e50c10"], 0x9) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x0, @sliced={0x2, [0x595, 0xc, 0xff, 0xf001, 0xfff9, 0xe, 0x8000, 0x1, 0x8, 0x1, 0x8000, 0x7fff, 0x1, 0x1, 0xe06, 0x6, 0x0, 0x6, 0xea, 0x3, 0x3, 0x2, 0x795a, 0xfffa, 0xff2e, 0x9, 0x9, 0x4, 0xfff8, 0xfffb, 0x4, 0x86ae, 0x8, 0x4, 0x60, 0x5, 0x1f8, 0x5, 0x5, 0x4, 0x7, 0x6, 0x2, 0xf217, 0x5, 0x5, 0x2, 0x1], 0xff}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0xfffffffd}) r4 = openat$fuse(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000240)=0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x2000}) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000400)) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xaafa04, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 10.032939083s ago: executing program 1 (id=1086): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f00000002c0), 0x4, 0x76b, &(0x7f0000001400)="$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") chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x24, r5, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x24}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 9.872206298s ago: executing program 0 (id=1087): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socket$inet(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x112, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x19) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) close(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='tlb_flush\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000580)={{0x32, @remote, 0x4e22, 0x1, 'sed\x00', 0x10, 0x7, 0x2e}, {@remote, 0x4e23, 0x1, 0x800, 0x9, 0x98}}, 0x44) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x17, 0x10, 0xffffffffffffffff, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x0, 0x1, 0x0, 0x5, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x97, 0xd0, &(0x7f0000000340)=""/208, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x5, 0x9, 0x853}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 9.715443432s ago: executing program 0 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0xfffffffffffffe4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x41) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r3, 0x4, 0x80000000, 0x4}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r3) r6 = socket(0x10, 0x400000000080803, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, &(0x7f0000002ac0)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="39ca1999", @ANYRES16=r5, @ANYBLOB="080025bd7000fbdbdf25000000000800020000000000060006000100000008000700", @ANYRES32=r7, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000200)) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$TCFLSH(r10, 0x5608, 0x1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="160829bd00000000000800d500", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r12, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, @val={@val, {0x806}}, {@mpls_mc={0x8848, {[], @ipv6=@generic={0x0, 0x6, '\x00 \x00', 0x0, 0x0, 0x0, @empty, @mcast2}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x4, 0x4, 0x4, 0xffffffffffffffff, 0x0, '\x00', r13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf250000000008000500ac1414aa08000900020000000600060000000000080009000400000008000100", @ANYRES32=r8, @ANYBLOB="08000040b4023266"], 0x54}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) socket$packet(0x11, 0x2, 0x300) clock_adjtime(0x0, &(0x7f0000000000)={0x7f, 0x8, 0x80000000, 0x698, 0x9, 0x5, 0x0, 0x7fffffff, 0x6, 0x5, 0x9, 0x9, 0xec, 0x1, 0x4, 0x10001, 0x400, 0x1, 0x10001, 0x100000000, 0x3a, 0xa792, 0x3, 0x4}) 9.614043331s ago: executing program 3 (id=1089): r0 = syz_open_dev$radio(&(0x7f0000000d80), 0x0, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x80802) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0x6) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, r5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={r8, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001580)={r8, @in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000540)=0x9c) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x20000000) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) 9.481718474s ago: executing program 0 (id=1090): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000009180)=ANY=[@ANYBLOB="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"/576], 0x9, 0xc23, &(0x7f0000001940)="$eJzs3U1sHOd5B/Dn3VlapNw0a8dxPpTDAg4QV44NUpQtFnIAKmKIGBBkwRRzMFCAK5FSFyaXFEkVclAEKpCgCNIWKnLIsQKcAL1VpxYIGkA9uUUQgOip6KFQW0dwb5sAaYsezGJ23yWXtCQy1gcp+/cTpP/s7DO776z5cGfWMzsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER8/RsnhkfSXo8CAHiUTk+9MTzq/R8APlHO2v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBnKYr4bqR45wftNNO53TV4qtm6fGV6YvLOiw2lSFGJolNf/h0cOTJ69OVXjo318t7LP2hfiNenzp6on1xcWFqeW1mZm61Pt5rnF2fndv0I97v8doc7L0B94a3LsxcurNSPvDS65e4rtdsHnny2dnzs0OibvdrpicnJqb6a6sBHfvYPSQ/uofgYeSKK+GakePfF91MjIipx/72ww++Oh20oqmX/dVZiemKysyLzzUZrtbwzVXJVNaLWt9B4r0ceQS/el/GIq+V/p3LAh8vVm1pqLDfOzc/VzzSWV5urzcVWqnRHW65PLSoxliKWIqJd7PXg2W8GooijkeL2r9vpXEQUvT544fTUG8OjOz9A9REM8i5PWysi1uIx6FnYpw5EEX8ZKX44Mxznc1912ua9iK+U+WrEpTJvpriWb6fyF8RYxK+8n8BjrRpF/CJSLKZ2mu31fme78tS36q+1Liz21fa2Kx/7/YNHybYJ+9hgFHGus8XfTh/9wy4AAAAAAAAAAAAA4GFb7/rgp5HixsLzaSn6zyltti7WzzbOzXePCu4d+1/vW7aWulnPOZxzPOeZnDM5l3JezXkt5/WcN3LezLmW81bOds6o5OfPWc85nHM855mcMzmXcl7NeS3n9Zw3ct7MuZbzVs52znDeEwAAAAAAAAAAAAAAAAAAAA/YUBQxGSmuv/NHnetKR+e69J8+PnZ64pn+a8Z/bofHKWtfioifxu6uyTuQrzWeKuWfB79ewM4Go4jv5Ov//cleDwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgXKlHEdyPFj37TTpEiYjxiJrp5q9jr0QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcFUxMlI8V/fGOzcXouIL0bEB+vln4j/Xd9ur0cMAAAAAAAAAAAAAAAAAAAAH0OpiEuR4sfvtlMtIq7Ubh948tna8bFDo28WUUQqS/rrX586e6J+cnFhaXluZWVutj7dap5fnJ3b7dMNnmq2Ll+Znph8KCuzo6GHPP6hwZOLS28vNy/+4eod7z84eOLcyupy4/yd746hqEYM98853Bnw9MRkZ9DzzUars2iq3GWA1Yj6blcGAAAAAAAAAAAAAAAAAACAfeNgKmIiUjz3s6Opd954tXvO/6e6t4qN2p/88eZ3Acxvy57+7w/YzXTa7UAPd068r09PTE5O9c2uDny4tBxTSkV8NlIc+vvPd86HT3HwjufGl3V/FinG/u9orqsdKuvGt1QNHp6emKyfXmy9eGJ+fvF8Y7Vxbn6uPrXUOL/rLw4AAAAAAAAAAAAAAAAAAACAeziYivjzSHH0tbXUu+58Pv+/2r3Vd/7/qxG9y84Ppq25oXNu/+92zu3vTn/6+NhrR5672/yHcf5/OaaUivggUjz1V5/vXE+/d/7/8Lbasu7HkeIX3/tSrqs8UdaN9Fan+4gXmvNzw2XtC5Hi+2d6tdGpfSXXfmazdqSs/YdI8fQfbK09lmuf2aw9UtbejhSTp+9c+9nN2tGydihSfPVP673ag2Xt13Pts5u1L51fnJ/d7cvLJ1PZ//8WKb488s3U+5m/a//3ff/H1W254UM9f+/pB9X/tb55V3Nfr+f+H9mh/y9Fir+49qVc1+29I/n+pzr/bvb/9yPF731qa+3LufbpzdqR3a4W7KWy//8pUqzd+peNn/nc/7mzNju0v/+/WN2ave2Cver/p/rm1fK4Rn/L1wI+aVbe/vZbjfn5uWUTJkyY2JjY699MwMNWbv//d6T42qUi9fZj8/b/73Rvbe7//893Nrf/j2/LDXu0/f9037zjea9loBoxuLqwNPC5iMGVt7/9YnOhcXHu4lxrdHTs2O8fHTlybGTgid7O/ebUrl87eNyV/f9WpPjJ3/zzxufYW/f/7/z538FtuWGP+v8z/eu0Zb9m1y8FfOKU/f/XkeJfr7+/8f+b7vX5X+9zvuef25pDvaI96v9n+ubV8z9jffOeLyJO7Pa5AAAAAAAAAADgMXEwFfGzSPG37X/cuOb91uN/4su92v7j/+5mP1z/HwC4t/L9fypS/PzgV1PvO2R2c/z/7LbcsEfH/z7bN2/2EZ3XvOsXGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPqIURRyIFO/8oJ1uFeXtrsFTzdblK9MTk3debChFikoUnfry7+DIkdGjL79ybKyX917+QftCvD519kT95OLC0vLcysrcbH261Ty/ODu360e43+W3O9x5AeoLb12evXBhpX7kpdEtd1+p3T7w5LO142OHRt/s1U5PTE5O9dVUBz7ys39IenAPxcfIE1HEzyPFuy++n/69iKjE/ffCDr87HrahqJb911mJ6YnJzorMNxut1fLOVMlV1Yha30LjvR55BL14X8YjrkZEpRzw4XL1ppYay41z83P1M43l1eZqc7GVKt3RlutTi0qMpYiliGgXez149puBKOLvIsXtX7fTfxQRRa8PXjg99cbw6M4PUH0Eg7zL09aKiLV4DHoW9qkDUcQzkeKHM8Pxn0W3rzpt817EV8p8NeJSmTdTXMu3U/kLYiziV95P4LFWjSLORIrF1E7vFbn3O9uVp75Vf611YbGvtrdd+djvHzxKtk3YxwajiF92tvjb6ZfezwEAAAAAAAAAAABgnyvia5HixsLzqXN+6MY5pc3WxfrZxrn57mH9vWP/63mp9fX19VrqZj3ncM7xnGdyzuRcynk157Wc13PeyHkz51rOWznbOaOSnz9nPedwzvGcZ3LO5FzKeTXntZzXc97IeTPnWs5bOds5w3HSAAAAAAAAAAAAAAAAAAA8JJUo4nuR4ke/aaf1ont92Zno5i3nucLH2v8HAAD//w5/Tvo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x11, 0x2b, 0x13, 0xe, 0x7, 0x0, 0x4, 0x90}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r2, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x81, "7464fbe08ecb61"}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmmsg$sock(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{&(0x7f0000000000)=@ax25={{0x1d, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x20000178}], 0x1}}], 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="29003300d08000000802110000000802110000015050505050500700000000790003"], 0x48}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r11, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r12, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08ecb61"}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000001540)={r12, 0x2}) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000002200)={r12, 0xa1}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054fc0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r12}], 0x20, "1dfd53277f65a8"}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r17) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 8.9722241s ago: executing program 1 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050040000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1, 0x5, 0x18, @local, @mcast1, 0x7800, 0x40, 0x8, 0x10000}}) socket(0x10, 0x803, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f0000000080)={0x0, [[0x7fff], [0x0, 0xfffffff9], [0x403]], '\x00', [{0xa4, 0x0, 0x0, 0x1}], '\x00', 0x100}) 8.939570954s ago: executing program 2 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f00000001c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") r5 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) pwrite64(r5, &(0x7f0000000000)='+', 0xc0014, 0x7003000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x325, &(0x7f0000000b40)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x6f2, &(0x7f0000001200)="$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") r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)="03", 0x1}, {&(0x7f0000000180)="00638fa647e25a55abda", 0xa}, {0x0}], 0x3, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r7, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x4800003e, r8, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000100)) openat$cgroup_ro(r6, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f00000000c0), 0x1, 0x510c, &(0x7f0000005180)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc4042, 0x0) r10 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$FUSE_ATTR(r10, &(0x7f0000000340)={0x78}, 0x78) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) fdatasync(r11) 8.879637439s ago: executing program 4 (id=1093): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x10, 0x2, 0x34a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fdatasync(r3) mknodat$loop(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x40000000000008, &(0x7f0000000040)) setreuid(0x0, 0xee01) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) unshare(0x8000400) 8.093739772s ago: executing program 3 (id=1094): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x10}, 0x1, 0xffffff7f00000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000020601080000000000200000000000000c000300686173683a697000050006743f51bf3c85bbde7e01000700000005000500020000000900020073797a300000000005000400000000000c000782080083541955b9d518fdc5a0d57e4a4db4581006ebfde8061d45e240b36226e90d6d5898b445f62d1f4371582ce46ce8"], 0x50}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x2000000, 0x0) r6 = fanotify_init(0x0, 0x0) r7 = dup2(r0, r6) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x8, [0x61, 0x9, 0x800, 0x2, 0x8, 0xffff, 0x2, 0x2]}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x100, 0x100, 0x800b, 0x69, 0x3, 0xe7, 0xfffffff7, 0x4c61, r8}, &(0x7f0000000100)=0x20) 6.16382807s ago: executing program 1 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb702, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mount(&(0x7f00000001c0)=@nullb, &(0x7f00000002c0)='./file1\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 5.896711255s ago: executing program 4 (id=1096): r0 = socket(0x200000100000011, 0x3, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x24) creat(0x0, 0x10) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) bind$packet(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.207497989s ago: executing program 2 (id=1097): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x10}, 0x1, 0xffffff7f00000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000020601080000000000200000000000000c000300686173683a697000050006743f51bf3c85bbde7e01000700000005000500020000000900020073797a300000000005000400000000000c000782080083541955b9d518fdc5a0d57e4a4db4581006ebfde8061d45e240b36226e90d6d5898b445f62d1f4371582ce46ce8"], 0x50}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x2000000, 0x0) r6 = fanotify_init(0x0, 0x0) r7 = dup2(r0, r6) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x8, [0x61, 0x9, 0x800, 0x2, 0x8, 0xffff, 0x2, 0x2]}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x100, 0x100, 0x800b, 0x69, 0x3, 0xe7, 0xfffffff7, 0x4c61, r8}, &(0x7f0000000100)=0x20) 5.206471749s ago: executing program 0 (id=1098): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) io_uring_setup(0x3410, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000000c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x118) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10100}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x52901, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14}}}]}, 0x40}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0xb0, 0x1b0, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) sendmsg$NFT_BATCH(r6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.142938465s ago: executing program 1 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000de220000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd1327c9167c642c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c15", 0x40, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000400)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0xd8, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbd1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xd8}}, 0xc1) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000df251000000008002c00030000000500300000000000050033000100050037000000000005003800"/62], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000001014010000000000000000000400020000000000fc416f1092eb3069480a9a23649b410dd2cf8b54fd3ef1898c08b205efaf727d74fbf8b51ff8af6f04f5dc55ab1ffd2056fabcd0de73ad168c6bfd2e9f51c676aedc"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x2, 0x220108, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000100), 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000440), 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000070000008180"], 0x30}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000001c0)) recvfrom$unix(r9, &(0x7f0000000340)=""/184, 0xb8, 0x100, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x3d, &(0x7f0000000480)="f89e0258c805ff88014f9f4da202ec513b23d8cf536a671585743b38d167289ceae034a9dd73e6a2d2171ab3b4fe21fec0afa25470a5d3ca8a79eb1217581ec91f4f5fe6e1c92802d7494a753832f02876715d9e399b1d489a1868f2b0a519fa04c9106e06f1cbba56d5b2791b7fef01b3", 0x71) 5.125580206s ago: executing program 3 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000280)='\x00', 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2, 0x2}}, 0x14}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) 4.355795078s ago: executing program 2 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 4.255196047s ago: executing program 3 (id=1102): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private=0xa010101, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f00000002c0)) write$ppp(r5, &(0x7f00000003c0)='\x00!', 0x100000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = dup(r2) r8 = memfd_create(&(0x7f0000000fc0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x1c#\x1c\xc9\x006U\xf8\x14D\b\x0f\xfd\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-:\xb6\xbc\x00\xa5\xa8\xe58\x00\x9fM\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8\x00\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.ooZ+)\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8\xdbQ\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xa0\xef\xccUxhg\xffY\xe6\x83\xa6r\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\xa0\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.}\x89\xac\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x02\xab\t*\xbf\x89\xea\xaf\xd4\xe7)G\xc7\xd2\x81\xccT\xfa\"\xb3\xbe\xa1r\x9a \xd9\tb\xf1\x9aa\xdb\xffp\xc3\x9dFx\x18}\xb0/M\x12\x1a\xc1\xe8\n\x06\xac\xd2\xf1\x00\xcf!\x9274\x18\xc5U\xf7>\x12qsH\xbd\x1f|\x82\xb9\xcb\xe7H_\x95\x9f\xc1P\x16\x8a\xc4nxh\xde)x\xaa8\xe8\x8d\xe3pr\xba\xfeA\x89op\xde\xd4\xe1=\x8b\x9d\x1b\x9c\xe2F\xd0\xe1>\xd2\xe7\r;\x8fcq\xf1\xc0\fWG\xfb\xae\xe9\xa4\x0fAR{\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x96\xa4/\xc6-\x1e\xd9)\xab\xfe\v\rt\xd4p\xe3}\x87\xa7\x9cm2*\x8c\x02\xf3\xc2aJ\x1cQ\xe7]\xc1I\x8d\xc5;\x12k=\xab\xd8i(/\x05\xac\x9f\x13\xb9\x13\x8a\x87C&V\xdb\xc0\x11\xf1Y_\xfcc\xf8\x94D\xefV\xf7\xb6\xfaY4Q\xb6\xbe\xe8\x92\xa8U4\x8d\xf2<-\x05', 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r8, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "4a8d480f65491adf0fbc0b54d9391fec4647e0a1c2934cfde8e80d7f6e591f6a320847487bfbe55e35015fcc1824cd27189b63760775c5831a0866ee64818b40"}, 0x48, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x2, 0x1000, 0xb0, &(0x7f0000000380)="a2ff06c52a0958d2eea4004f0de4f03368a08756e199838ffdd39a009f7acef49a18759c83f525716719b31b2771982617d5f7a4780c577aef1d0cbceff1c72ff1bc585ca78c43984b02a954def82fd787845c1b60159b9990a01aa9c8faa1c065e13ab83044f4c56274ab6be43381778681a4bc946d98b237cbee882389d226ff36e6a35a1f7ee898a46cf991ea815bf6daefcb3715eb35663ff6582aa737237c6e1416529639f6c1327dd66f0b29b1", 0x8a, 0x0, &(0x7f0000000440)="f2394df68df40a9e03e9d7f6c16d2e9e89ac46cec062df19cb4bb3bf70fa82e1a21c720861ecf4b0080ce86a24de65143d2043c8ea82e60d3ef0518b5fbb8d941b93a9aa675db591b73db699c44dc67ca5bc921d0847df35394bc4a8842ed93c060fefa2dd563e3609cb9c292bbf934a17bcd89f71616ce6b2bd05c6ab78bb226d3958df408f9da8d28e"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x200000, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r9, 0x289e0cb5, 0x0) 4.246779388s ago: executing program 4 (id=1103): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000200)={0x18, 0x0, {0x1, @multicast, 'gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x4000, @fd=r3, 0x20, 0x0, 0x0, 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x3218}, 0x8, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) landlock_restrict_self(r6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r9 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001500), 0x588, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000480)={0x18, 0x0, {0x1, @multicast, 'dummy0\x00'}}, 0x1e) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='builtin_trusted\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) 4.087128062s ago: executing program 2 (id=1104): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r4, 0xb702, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7303000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000e368fcd800"/579], 0x240) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000080)=ANY=[@ANYBLOB='umask=00000000000000000000011,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00ce6fb92f3b6892859719d513fb2b724d78e448737550f435f5dc50947a837ac494c7c5eb9c5beb42ea5f0d0f93cd17bbcd11398e4f3de48c458ac42a36d259c1947b981eec266c1568a7b1911a194200b826832913e757be58730ef2d7f818c529bc84bb566eff9e"], 0x81, 0x14f4, &(0x7f0000001580)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1\x00', 0x20) mount(&(0x7f00000001c0)=@nullb, &(0x7f00000002c0)='./file1\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 4.059348685s ago: executing program 1 (id=1105): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x1, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/102, 0x66}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000004c0008804800028024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200009801c000080040001000a00000008000200e000000105000300000000001400020077673000000000000000000000000000e6fd5d30a30f"], 0x74}, 0x1, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}}}}}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64=r0], 0x2, 0x218, &(0x7f0000000440)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x14, r3, 0x1, 0x0, 0x0, {{0x8}, {@void, @void}}}, 0x14}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x20000700, &(0x7f0000001000/0x1000)=nil}) 3.530223654s ago: executing program 2 (id=1106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x10, 0x2, 0x34a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fdatasync(r3) mknodat$loop(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x40000000000008, &(0x7f0000000040)) setreuid(0x0, 0xee01) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) unshare(0x8000400) 3.529276504s ago: executing program 3 (id=1107): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x85, 0x0, &(0x7f0000000880)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0xc870}, 0x4814) sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000002c0)=[@mss, @window, @window, @timestamp, @mss, @mss, @mss], 0x7) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="850000002e000000350000000000ba0085000000a000000095000000000000004cf1c09faf5d680600000000000000e0a141d524580b35d8050864d2a51f7c8f32cb447f454698165b61a3cf5fc6dd8442230e7953f91136aa1f703517ea5c8531c498d3db6e3d83516346b88351352301630509494997cbe593f90a847687a1ef1f83dd6c1023158a1086f7d0f9dce4a401e07dc735554bc34e6bdea4217ce4a98af8ad0887c697acd9a7ab696922c9e34f0aee6156c599c7b27cde0019b27de967bfb3fe241454a04080bf7f8ce021879c820f9b80fe2338a820db941135d0c5d301d02c4004be5b11cc7bf16c8a02b6f569db051357c71be1f5e8ce8db0f96ee1d8a312e9f32c7a45cf129a8d8bc9a5d905441c0785d333135a04001bb4cd5b295b9add7a02477d4b056be3a93c2b02e29f50cbe99a586aaf215307459d4b57ddd41323cbbbcd6e100000000000000000000000e106001ae539fa19e58860ad7ad9f00f84e302b661291950d2c47378049299970760c1ad0f333fc5c94da75f86aca761cf17aaa59bc42c049dd991409de8978773ec374512104e40d912f0558f91e4ace4edcd7bcd4917538469148821e7746fb813e3718a40618bb09171f346a547895afd500c46eedd6ff18290202546d7c22838fe1f6dbe00564990"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f0000000000)=""/167, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdd5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x14, &(0x7f0000000080)={r6}, 0x8) 1.403032361s ago: executing program 2 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xd, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="eb8f000000000000000007"], 0x14}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x50, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '@'}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c2087b74a2decd0b318f54ca14"}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20040005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x28, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r8, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x89}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x58}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x4, 0x0, &(0x7f0000000040)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000090400000000000000005900000037338dca876648c7f823c97eb68081b64daa85eca261458297f8a66c878082cbc2f7cd9a7dddaa56562798abf86b84c41fe20da57c239daa827823a9742f6a2f9c1ae90eee300212fd2a755e6848", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280110001006272696467655f736c6176650000000014000580050020000000000006001f0000400000"], 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)=ANY=[@ANYBLOB="1c000000020105000000000000000000072000010800084000077600"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000480)=0x22b) 1.341731146s ago: executing program 4 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb702, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f00000002c0)='./file1\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 1.208967289s ago: executing program 0 (id=1110): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x10}, 0x1, 0xffffff7f00000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000020601080000000000200000000000000c000300686173683a697000050006743f51bf3c85bbde7e01000700000005000500020000000900020073797a300000000005000400000000000c000782080083541955b9d518fdc5a0d57e4a4db4581006ebfde8061d45e240b36226e90d6d5898b445f62d1f4371582ce46ce8"], 0x50}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x2000000, 0x0) r6 = fanotify_init(0x0, 0x0) r7 = dup2(r0, r6) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x8, [0x61, 0x9, 0x800, 0x2, 0x8, 0xffff, 0x2, 0x2]}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x100, 0x100, 0x800b, 0x69, 0x3, 0xe7, 0xfffffff7, 0x4c61, r8}, &(0x7f0000000100)=0x20) 1.176612072s ago: executing program 1 (id=1111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806000108000604000200000000002000000000aaaa090000000000009399fa54a86c29b575f7"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = epoll_create1(0x0) r5 = dup(r4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000100)={0x0, r7}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000cc0)={0x0, r7}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) open(0x0, 0x14927e, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/236, 0xec}], 0x1}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x800455d1, &(0x7f00000014c0)=""/4096) mount$cgroup2(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x2004000, &(0x7f0000000ac0)={[{@memory_localevents}], [{@measure}, {@subj_role={'subj_role', 0x3d, 'GPL\x00'}}]}) sendmsg$inet(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 483.607236ms ago: executing program 3 (id=1112): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x10}, 0x1, 0xffffff7f00000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000020601080000000000200000000000000c000300686173683a697000050006743f51bf3c85bbde7e01000700000005000500020000000900020073797a300000000005000400000000000c000782080083541955b9d518fdc5a0d57e4a4db4581006ebfde8061d45e240b36226e90d6d5898b445f62d1f4371582ce46ce8"], 0x50}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x2000000, 0x0) r6 = fanotify_init(0x0, 0x0) r7 = dup2(r0, r6) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x8, [0x61, 0x9, 0x800, 0x2, 0x8, 0xffff, 0x2, 0x2]}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x100, 0x100, 0x800b, 0x69, 0x3, 0xe7, 0xfffffff7, 0x4c61, r8}, &(0x7f0000000100)=0x20) 332.403749ms ago: executing program 4 (id=1113): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000bd0f3363ffd630c5003e90e0aa31bcda20c276dd8d1c1a6e1403797b266067e58ed88a3e5021c7eae064811975c9ab78a6c7e086ed6c55f03268dbd4a78523488adf8ab9aee3915745803c73459a72c0a220ad274ffbd671b322417c9b55f14e"], 0x1c}}, 0x0) ioperm(0x0, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) madvise(&(0x7f0000a2e000/0x3000)=nil, 0xffffffffdf5d1fff, 0x12) syz_emit_ethernet(0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() 0s ago: executing program 0 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 87] EXT4-fs (loop2): 1 truncate cleaned up [ 301.912829][ T7187] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,data_err=ignore,init_itable,debug_want_extra_isize=0x0000000000000006. Quota mode: none. [ 301.962611][ T26] audit: type=1326 audit(1727727463.264:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3917e1eff9 code=0x7ffc0000 [ 302.053360][ T26] audit: type=1326 audit(1727727463.264:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3917e1eff9 code=0x7ffc0000 [ 302.222157][ T7211] loop1: detected capacity change from 0 to 256 [ 302.964067][ T26] audit: type=1326 audit(1727727463.264:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3917e1d990 code=0x7ffc0000 [ 303.126426][ T26] audit: type=1326 audit(1727727463.264:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3917e1d990 code=0x7ffc0000 [ 303.157535][ T7218] loop4: detected capacity change from 0 to 1024 [ 303.161196][ T26] audit: type=1326 audit(1727727463.274:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3917e1eff9 code=0x7ffc0000 [ 303.234202][ T7218] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #17: comm syz.4.686: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 303.257933][ T26] audit: type=1326 audit(1727727463.274:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3917e1eff9 code=0x7ffc0000 [ 303.315866][ T7218] EXT4-fs (loop4): no journal found [ 303.336329][ T7219] ipt_CLUSTERIP: Please specify destination IP [ 303.434221][ T3572] Bluetooth: Frame is too long (len 18, expected len 4) [ 303.495888][ T6534] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 303.515648][ T7228] netlink: 'syz.3.691': attribute type 30 has an invalid length. [ 303.579211][ T6534] FAT-fs (loop1): Filesystem has been set read-only [ 303.592635][ T6534] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 303.649773][ T154] device hsr_slave_0 left promiscuous mode [ 303.665163][ T154] device hsr_slave_1 left promiscuous mode [ 303.704472][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.716803][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.719242][ T3609] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 303.743442][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.759337][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.775870][ T154] device team0 left promiscuous mode [ 303.782422][ T154] device team_slave_0 left promiscuous mode [ 303.793714][ T154] device team_slave_1 left promiscuous mode [ 303.801681][ T154] bridge0: port 3(team0) entered disabled state [ 303.859551][ T154] device bridge_slave_1 left promiscuous mode [ 303.876533][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.905366][ T154] device bridge_slave_0 left promiscuous mode [ 303.923030][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.957153][ T154] device veth1_macvtap left promiscuous mode [ 303.969759][ T3609] usb 5-1: Using ep0 maxpacket: 32 [ 303.992339][ T154] device veth0_macvtap left promiscuous mode [ 304.005662][ T154] device veth1_vlan left promiscuous mode [ 304.019539][ T154] device veth0_vlan left promiscuous mode [ 304.090148][ T3609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 304.113191][ T3609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 304.131489][ T3609] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 304.141020][ T3609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.165525][ T3609] usb 5-1: config 0 descriptor?? [ 304.190166][ T7218] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 304.212908][ T3609] hub 5-1:0.0: USB hub found [ 304.357249][ T7237] loop2: detected capacity change from 0 to 1024 [ 304.420383][ T3609] hub 5-1:0.0: 2 ports detected [ 304.444655][ T7237] hfsplus: bad catalog entry type [ 304.470186][ T154] team0 (unregistering): Port device team_slave_1 removed [ 304.483576][ T154] team0 (unregistering): Port device team_slave_0 removed [ 304.497096][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.513764][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.580179][ T154] bond0 (unregistering): Released all slaves [ 304.632055][ T7228] device veth0_macvtap left promiscuous mode [ 304.721105][ T3754] hfsplus: b-tree write err: -5, ino 4 [ 304.964843][ T7254] input: syz0 as /devices/virtual/input/input10 [ 305.628082][ T7256] loop3: detected capacity change from 0 to 16 [ 305.655687][ T7256] erofs: (device loop3): mounted with root inode @ nid 36. [ 305.962361][ T7263] loop0: detected capacity change from 0 to 512 [ 306.012530][ T7264] loop2: detected capacity change from 0 to 2048 [ 307.018461][ T7264] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 307.139914][ T7264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.205209][ T7263] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 307.238318][ T7256] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 307.255792][ T7256] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -27 in[61, 4035] out[1851] [ 307.267813][ T7256] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 307.279790][ T7263] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 307.497942][ T7275] loop2: detected capacity change from 0 to 47 [ 307.778549][ T7281] device bond0 entered promiscuous mode [ 307.784207][ T7281] device bond_slave_0 entered promiscuous mode [ 307.798513][ T7281] device bond_slave_1 entered promiscuous mode [ 307.869892][ T7275] MINIX-fs: deleted inode referenced: 9 [ 307.897379][ T7275] MINIX-fs: deleted inode referenced: 9 [ 307.931835][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 308.008024][ T7] usb 5-1: USB disconnect, device number 8 [ 308.017806][ T1074] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 308.127040][ T7274] device bond0 left promiscuous mode [ 308.132971][ T7274] device bond_slave_0 left promiscuous mode [ 308.184444][ T7274] device bond_slave_1 left promiscuous mode [ 308.207941][ T7293] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 308.207941][ T7293] The task syz.4.707 (7293) triggered the difference, watch for misbehavior. [ 308.227157][ T3850] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 308.335454][ T3850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.412641][ T3850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.553538][ T7298] tipc: Started in network mode [ 308.575308][ T7298] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 308.582890][ T7306] loop2: detected capacity change from 0 to 2048 [ 308.612655][ T7298] tipc: Enabled bearer , priority 10 [ 308.640789][ T7303] tipc: Resetting bearer [ 308.771943][ T7306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.830348][ T3609] Bluetooth: hci3: command 0x0409 tx timeout [ 308.843951][ T7311] loop0: detected capacity change from 0 to 256 [ 308.848957][ T7303] tipc: Disabling bearer [ 309.050195][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.075572][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.136226][ T7266] device bridge_slave_0 entered promiscuous mode [ 309.195068][ T7311] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 309.239264][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.278162][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.328503][ T7266] device bridge_slave_1 entered promiscuous mode [ 309.464669][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 309.464683][ T26] audit: type=1800 audit(1727727471.521:395): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.705" name="bus" dev="loop0" ino=1048811 res=0 errno=0 [ 309.560273][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.584885][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.614102][ T7323] loop4: detected capacity change from 0 to 2048 [ 309.615731][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 309.683937][ T7323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.710108][ T7266] team0: Port device team_slave_0 added [ 309.718083][ T7266] team0: Port device team_slave_1 added [ 309.831105][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.854803][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.900129][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.995005][ T7329] loop3: detected capacity change from 0 to 128 [ 310.331479][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.338439][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.509521][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.619467][ T7266] device hsr_slave_0 entered promiscuous mode [ 310.681432][ T7266] device hsr_slave_1 entered promiscuous mode [ 310.715989][ T7266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.781476][ T7266] Cannot create hsr debugfs directory [ 310.809182][ T7337] loop4: detected capacity change from 0 to 512 [ 310.870179][ T3609] Bluetooth: hci3: command 0x041b tx timeout [ 310.946527][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.720'. [ 310.956431][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 311.098061][ T7346] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 311.158863][ T7337] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 311.379201][ T7337] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 311.746914][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 311.756875][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.721'. [ 311.806075][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.980538][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.992480][ T3608] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 312.048492][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.160380][ T7362] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 312.161240][ T26] audit: type=1326 audit(1727727474.177:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f2f8aff9 code=0x7ffc0000 [ 312.670863][ T26] audit: type=1326 audit(1727727474.177:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f2f8aff9 code=0x7ffc0000 [ 312.703221][ T26] audit: type=1326 audit(1727727474.187:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f2f8aff9 code=0x7ffc0000 [ 312.734987][ T26] audit: type=1326 audit(1727727474.187:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f2f8aff9 code=0x7ffc0000 [ 312.837229][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 312.845778][ T26] audit: type=1326 audit(1727727474.187:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f2f8aff9 code=0x7ffc0000 [ 312.856189][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.868975][ T26] audit: type=1326 audit(1727727474.187:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21f2f89990 code=0x7ffc0000 [ 312.961498][ T3609] Bluetooth: hci3: command 0x040f tx timeout [ 313.014587][ T26] audit: type=1326 audit(1727727474.197:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21f2f89990 code=0x7ffc0000 [ 313.039595][ T26] audit: type=1326 audit(1727727474.197:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f2f8aff9 code=0x7ffc0000 [ 313.062399][ T3608] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 313.073400][ T26] audit: type=1326 audit(1727727474.197:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f21f2f8aff9 code=0x7ffc0000 [ 313.426842][ T3608] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 314.405132][ T3608] usb 5-1: string descriptor 0 read error: -71 [ 314.411338][ T3608] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.429231][ T3608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 314.458217][ T3608] usb 5-1: can't set config #1, error -71 [ 314.485406][ T21] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 314.495585][ T21] usb 3-1: config 0 has no interface number 0 [ 314.501744][ T21] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.515432][ T3608] usb 5-1: USB disconnect, device number 9 [ 314.541515][ T21] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.668212][ T7377] loop0: detected capacity change from 0 to 128 [ 315.242502][ T4144] Bluetooth: hci3: command 0x0419 tx timeout [ 315.275074][ T21] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 315.275104][ T21] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 315.293949][ T21] usb 3-1: config 0 descriptor?? [ 315.306311][ T21] usb 3-1: can't set config #0, error -71 [ 315.307366][ T21] usb 3-1: USB disconnect, device number 7 [ 315.336161][ T7386] netlink: 'syz.2.730': attribute type 39 has an invalid length. [ 315.706348][ T7403] loop0: detected capacity change from 0 to 256 [ 315.880419][ T7403] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 315.931111][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 315.931145][ T26] audit: type=1800 audit(1727727477.982:422): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.731" name="bus" dev="loop0" ino=1048821 res=0 errno=0 [ 316.496613][ T146] Bluetooth: Unexpected start frame (len 12) [ 316.502780][ T146] Bluetooth: Frame is too long (len 12, expected len 4) [ 317.217080][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'. [ 317.226055][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 317.370184][ T7432] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 317.480445][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.496537][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.940941][ T7266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 318.053166][ T7266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.107508][ T7266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 318.118695][ T7436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.130653][ T7266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 318.148793][ T7436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.259749][ T7444] loop2: detected capacity change from 0 to 512 [ 318.264845][ T7438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.340975][ T7266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.366235][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.379294][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.404362][ T7266] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.422963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.438721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.448553][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.456456][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.473811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.483115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.493072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.522497][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.530301][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.547332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.561855][ T6544] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 319.562875][ T7453] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.578228][ T7453] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.583698][ T7452] netlink: 424 bytes leftover after parsing attributes in process `syz.2.739'. [ 319.587242][ T7453] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.604877][ T7453] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.618177][ T7453] device vxlan0 entered promiscuous mode [ 319.626015][ T7453] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.634957][ T7453] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.643872][ T7453] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.652750][ T7453] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.815973][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.827826][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.838055][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.848134][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.857429][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.871532][ T7456] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 319.956326][ T7460] loop3: detected capacity change from 0 to 256 [ 320.136635][ T7460] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 320.210308][ T26] audit: type=1800 audit(1727727482.256:423): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.741" name="bus" dev="loop3" ino=1048831 res=0 errno=0 [ 320.313854][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.424283][ T7456] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 320.452887][ T6544] usb 1-1: Using ep0 maxpacket: 8 [ 320.466798][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.500341][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.660241][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.813549][ T7467] overlayfs: failed to resolve './file0': -2 [ 321.062136][ T6544] usb 1-1: config 0 interface 0 has no altsetting 0 [ 321.070643][ T6544] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 321.079782][ T6544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.090507][ T6544] usb 1-1: config 0 descriptor?? [ 321.096313][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.104789][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.135987][ T6544] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 321.151084][ T6544] usb 1-1: selecting invalid altsetting 0 [ 321.151919][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.164923][ T6544] cxusb: set interface failed [ 321.175656][ T6544] dvb-usb: bulk message failed: -22 (1/0) [ 321.242521][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 321.360057][ T7449] input: syz0 as /devices/virtual/input/input11 [ 321.389349][ T6544] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.459215][ T6544] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 321.518460][ T154] device hsr_slave_0 left promiscuous mode [ 321.543816][ T6544] usb 1-1: media controller created [ 321.621556][ T6544] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.655940][ T154] device hsr_slave_1 left promiscuous mode [ 321.673421][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.717305][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.731353][ T6544] DVB: Unable to find symbol lgdt330x_attach() [ 321.738206][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.751619][ T6544] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 321.760504][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.794639][ T154] device bridge_slave_1 left promiscuous mode [ 321.964272][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.971965][ T6544] dvb-usb: bulk message failed: -22 (1/0) [ 321.983663][ T6544] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 322.483969][ T6544] usb 1-1: USB disconnect, device number 4 [ 322.508824][ T154] device bridge_slave_0 left promiscuous mode [ 322.517851][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.553492][ T154] device veth1_macvtap left promiscuous mode [ 322.554809][ T6544] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 322.582282][ T154] device veth0_macvtap left promiscuous mode [ 322.589399][ T154] device veth1_vlan left promiscuous mode [ 322.595331][ T154] device veth0_vlan left promiscuous mode [ 322.853260][ T154] team0 (unregistering): Port device team_slave_1 removed [ 322.864834][ T7485] ip6t_REJECT: ECHOREPLY is not supported [ 322.887864][ T154] team0 (unregistering): Port device team_slave_0 removed [ 322.902093][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.915078][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.986020][ T154] bond0 (unregistering): Released all slaves [ 323.052858][ T7488] tipc: Started in network mode [ 323.058185][ T7488] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 323.065626][ T7488] tipc: Enabled bearer , priority 10 [ 323.089801][ T7490] tipc: Resetting bearer [ 323.158451][ T7490] tipc: Disabling bearer [ 323.182495][ T26] audit: type=1326 audit(1727727485.223:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc56676dff9 code=0x0 [ 323.229340][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.249233][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.263588][ T7266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.349489][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.359618][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.380638][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.392916][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.406759][ T7266] device veth0_vlan entered promiscuous mode [ 323.422879][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.432866][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.450796][ T7266] device veth1_vlan entered promiscuous mode [ 323.538544][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.549597][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.559583][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.584320][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.613877][ T7266] device veth0_macvtap entered promiscuous mode [ 323.633696][ T7503] loop0: detected capacity change from 0 to 256 [ 323.658157][ T7266] device veth1_macvtap entered promiscuous mode [ 323.725697][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.780174][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.793959][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.825324][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.846809][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.869410][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.894903][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.923286][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.934937][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.964777][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.980927][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.020866][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.064517][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.099991][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.147326][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.190819][ T7506] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 324.209927][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.227264][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.307610][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.327542][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.354496][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.365172][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.377870][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.425686][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.467514][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.491706][ T7266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.504411][ T7266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.516840][ T7266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.537366][ T7266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.539159][ T7511] loop4: detected capacity change from 0 to 47 [ 324.765983][ T7513] loop0: detected capacity change from 0 to 256 [ 324.888330][ T1074] Bluetooth: hci3: command 0x0405 tx timeout [ 325.366741][ T7513] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 325.391668][ T26] audit: type=1800 audit(1727727487.430:425): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.754" name="bus" dev="loop0" ino=1048842 res=0 errno=0 [ 325.558652][ T3754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.579063][ T3754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.590093][ T7511] device bond0 entered promiscuous mode [ 325.595700][ T7511] device bond_slave_0 entered promiscuous mode [ 325.642124][ T7511] device bond_slave_1 entered promiscuous mode [ 325.729337][ T7517] MINIX-fs: deleted inode referenced: 9 [ 325.759582][ T7511] device batadv0 entered promiscuous mode [ 325.779552][ T7517] MINIX-fs: deleted inode referenced: 9 [ 325.794637][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.824786][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.846316][ T7508] device bond0 left promiscuous mode [ 325.855590][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.925612][ T7508] device bond_slave_0 left promiscuous mode [ 325.995785][ T7508] device bond_slave_1 left promiscuous mode [ 326.026197][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 326.036220][ T7508] device batadv0 left promiscuous mode [ 326.096145][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.180539][ T3859] attempt to access beyond end of device [ 326.180539][ T3859] loop4: rw=1, want=50, limit=47 [ 326.239864][ T3859] Buffer I/O error on dev loop4, logical block 24, lost async page write [ 326.300071][ T3859] attempt to access beyond end of device [ 326.300071][ T3859] loop4: rw=1, want=52, limit=47 [ 326.388667][ T3859] Buffer I/O error on dev loop4, logical block 25, lost async page write [ 326.631763][ T7528] loop0: detected capacity change from 0 to 512 [ 326.758804][ T7544] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 326.767303][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 326.789813][ T26] audit: type=1326 audit(1727727488.779:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56676dff9 code=0x7ffc0000 [ 327.597334][ T7528] EXT4-fs (loop0): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 327.621380][ T26] audit: type=1326 audit(1727727488.779:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56676dff9 code=0x7ffc0000 [ 327.812816][ T7550] loop2: detected capacity change from 0 to 40427 [ 327.828402][ T26] audit: type=1326 audit(1727727488.779:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc56676dff9 code=0x7ffc0000 [ 327.860978][ T26] audit: type=1326 audit(1727727488.779:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56676dff9 code=0x7ffc0000 [ 327.927016][ T7550] F2FS-fs (loop2): Invalid log blocks per segment (5) [ 327.934124][ T7550] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 328.000032][ T7550] F2FS-fs (loop2): Found nat_bits in checkpoint [ 328.052729][ T26] audit: type=1326 audit(1727727488.779:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56676dff9 code=0x7ffc0000 [ 328.075231][ T7550] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 328.082333][ T7550] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 328.090412][ T26] audit: type=1326 audit(1727727488.779:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc56676dff9 code=0x7ffc0000 [ 328.113538][ T26] audit: type=1326 audit(1727727488.779:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56676dff9 code=0x7ffc0000 [ 328.136686][ T26] audit: type=1326 audit(1727727488.789:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56676dff9 code=0x7ffc0000 [ 328.354376][ T7550] syz.2.763 (7550): drop_caches: 2 [ 328.405106][ T7565] loop1: detected capacity change from 0 to 256 [ 329.108446][ T7565] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 329.129496][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 329.129509][ T26] audit: type=1800 audit(1727727491.166:473): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.765" name="bus" dev="loop1" ino=1048854 res=0 errno=0 [ 329.428261][ T7568] binder: 7566:7568 ioctl c00c620f 20000180 returned -22 [ 330.305946][ T7579] loop0: detected capacity change from 0 to 16 [ 330.578381][ T7584] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 330.578729][ T26] audit: type=1326 audit(1727727492.585:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 331.166525][ T26] audit: type=1326 audit(1727727492.585:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 331.189790][ T26] audit: type=1326 audit(1727727492.585:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 331.212651][ T26] audit: type=1326 audit(1727727492.585:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 331.243765][ T26] audit: type=1326 audit(1727727492.585:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 331.323747][ T7589] loop3: detected capacity change from 0 to 512 [ 331.340748][ T7579] erofs: (device loop0): mounted with root inode @ nid 36. [ 331.355653][ T26] audit: type=1326 audit(1727727492.585:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fd1169990 code=0x7ffc0000 [ 331.416651][ T7589] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 331.475462][ T26] audit: type=1326 audit(1727727492.595:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fd1169990 code=0x7ffc0000 [ 331.521370][ T7597] loop2: detected capacity change from 0 to 128 [ 331.552356][ T26] audit: type=1326 audit(1727727492.595:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 331.643503][ T7599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 331.659174][ T7597] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 331.664975][ T7589] loop3: detected capacity change from 0 to 512 [ 331.696096][ T3609] Bluetooth: hci2: command 0x0406 tx timeout [ 331.717470][ T26] audit: type=1326 audit(1727727492.595:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 331.826080][ T7589] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 331.869328][ T7589] EXT4-fs (loop3): invalid journal inode [ 331.901893][ T7589] EXT4-fs (loop3): can't get journal size [ 333.169993][ T7589] EXT4-fs (loop3): 1 truncate cleaned up [ 333.175666][ T7589] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 333.476665][ T7615] (syz.4.780,7615,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 333.515722][ T7623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 333.536549][ T7615] (syz.4.780,7615,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 333.678179][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 333.816315][ T7630] Invalid ELF header type: 0 != 1 [ 334.942555][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 334.996997][ T7637] netlink: 'syz.2.795': attribute type 3 has an invalid length. [ 335.080398][ T7640] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 335.082598][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 335.082610][ T26] audit: type=1326 audit(1727727497.100:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 335.359798][ T26] audit: type=1326 audit(1727727497.100:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 335.382924][ T26] audit: type=1326 audit(1727727497.100:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 335.423352][ T26] audit: type=1326 audit(1727727497.100:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 335.574053][ T26] audit: type=1326 audit(1727727497.100:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 335.606056][ T26] audit: type=1326 audit(1727727497.100:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 335.645365][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.714640][ T26] audit: type=1326 audit(1727727497.100:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 335.823906][ T26] audit: type=1326 audit(1727727497.100:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 335.902441][ T26] audit: type=1326 audit(1727727497.100:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa266dbc990 code=0x7ffc0000 [ 336.016702][ T26] audit: type=1326 audit(1727727497.100:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa266dbc990 code=0x7ffc0000 [ 336.093411][ T7657] fuse: Bad value for 'fd' [ 336.123297][ T7656] syz.3.790 uses old SIOCAX25GETINFO [ 336.827423][ T7666] loop3: detected capacity change from 0 to 128 [ 336.957183][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.794'. [ 337.019246][ T7671] device veth3 entered promiscuous mode [ 337.044764][ T7666] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.059622][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 337.104399][ T7666] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 337.135901][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.572555][ T7682] loop4: detected capacity change from 0 to 1024 [ 337.667254][ T7682] hfsplus: invalid btree extent records (0 size) [ 337.673742][ T7682] hfsplus: failed to load extents file [ 339.917208][ T7694] loop4: detected capacity change from 0 to 64 [ 339.972170][ T7696] IPv6: NLM_F_REPLACE set, but no existing node found! [ 340.048635][ T7694] Trying to free block not in datazone [ 340.152743][ T7696] digital: digital_start_poll: Unknown protocol [ 340.253441][ T7705] SET target dimension over the limit! [ 341.174201][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 341.174219][ T26] audit: type=1400 audit(1727727503.194:541): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A220AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A49A7D068DF62388E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=7718 comm="syz.1.808" [ 341.210351][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.221573][ T7724] loop2: detected capacity change from 0 to 256 [ 342.484470][ T7727] netlink: 'syz.3.806': attribute type 10 has an invalid length. [ 342.531175][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.577137][ T7727] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 342.723472][ T7730] loop4: detected capacity change from 0 to 512 [ 342.913822][ T7730] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 342.929056][ T7730] EXT4-fs (loop4): 1 truncate cleaned up [ 342.934890][ T7730] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 343.441022][ T7738] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.450264][ T7738] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.459047][ T7738] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.467930][ T7738] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.923094][ T7759] loop3: detected capacity change from 0 to 256 [ 344.038707][ T7759] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 344.207558][ T26] audit: type=1800 audit(1727727506.102:542): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.813" name="bus" dev="loop3" ino=1048864 res=0 errno=0 [ 345.450556][ T26] audit: type=1326 audit(1727727507.471:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.4.815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x0 [ 346.075499][ T7785] loop1: detected capacity change from 0 to 1024 [ 347.052106][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 347.190990][ T7785] attempt to access beyond end of device [ 347.190990][ T7785] loop1: rw=2049, want=5264, limit=1024 [ 347.193400][ T7785] attempt to access beyond end of device [ 347.193400][ T7785] loop1: rw=2049, want=6864, limit=1024 [ 347.260226][ T7785] hfsplus: can't free extent [ 347.274192][ T144] hfsplus: b-tree write err: -5, ino 4 [ 347.944539][ T7799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.824'. [ 348.241717][ T7799] netlink: 52 bytes leftover after parsing attributes in process `syz.0.824'. [ 348.362569][ T7816] loop3: detected capacity change from 0 to 512 [ 348.466514][ T7818] loop2: detected capacity change from 0 to 512 [ 348.576503][ T7818] EXT4-fs (loop2): error: journal path ./file0 is not a block device [ 348.595097][ T7816] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 348.638025][ T7816] EXT4-fs (loop3): 1 truncate cleaned up [ 348.711096][ T7816] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 348.885979][ T1390] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 348.898725][ T7831] loop1: detected capacity change from 0 to 256 [ 349.095612][ T7831] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 349.324232][ T26] audit: type=1800 audit(1727727511.347:544): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.830" name="bus" dev="loop1" ino=1048874 res=0 errno=0 [ 349.481889][ T4144] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 349.578842][ T7849] loop3: detected capacity change from 0 to 512 [ 349.589045][ T7812] loop4: detected capacity change from 0 to 40427 [ 349.628437][ T7843] loop2: detected capacity change from 0 to 8192 [ 349.665663][ T7849] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.837: casefold flag without casefold feature [ 349.678655][ T7849] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.837: couldn't read orphan inode 15 (err -117) [ 349.694301][ T7812] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 349.701213][ T7849] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 349.723988][ T26] audit: type=1800 audit(1727727511.747:545): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.837" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 349.822210][ T4144] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 349.832065][ T7812] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 349.862528][ T7843] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 349.923547][ T4144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 349.937720][ T7812] F2FS-fs (loop4): Found nat_bits in checkpoint [ 349.959695][ T4144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 349.991253][ T4144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.082372][ T4144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.102287][ T7812] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 350.109376][ T7812] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 350.127434][ T4144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.128275][ T7840] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 350.173083][ T4144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.189173][ T7840] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.198384][ T7840] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 350.252528][ T4144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.272095][ T4144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.312563][ T4144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.343280][ T7865] usb usb8: usbfs: process 7865 (syz.2.840) did not claim interface 0 before use [ 350.403353][ T4144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.436766][ T4144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.462558][ T4144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.531976][ T7867] loop2: detected capacity change from 0 to 1024 [ 350.565995][ T4144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.585938][ T4144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.607574][ T4144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.939710][ T7867] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 351.115063][ T4144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.124066][ T4144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.139981][ T4144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.400775][ T4144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.410802][ T4144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.421889][ T4144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.484146][ T4144] usb 1-1: unable to read config index 7 descriptor/start: -71 [ 352.502483][ T4144] usb 1-1: can't read configurations, error -71 [ 352.602126][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 352.714694][ T7895] syz.2.847[7895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.714791][ T7895] syz.2.847[7895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.719521][ T7900] loop4: detected capacity change from 0 to 256 [ 352.760188][ T7892] loop3: detected capacity change from 0 to 8192 [ 352.785739][ T7895] netlink: 72 bytes leftover after parsing attributes in process `syz.2.847'. [ 352.841728][ T7892] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 352.866422][ T7900] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.899671][ T7900] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 352.930449][ T7892] REISERFS (device loop3): using ordered data mode [ 352.950517][ T7892] reiserfs: using flush barriers [ 353.019675][ T7892] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 353.043746][ T7900] vhci_hcd: invalid port number 0 [ 353.125048][ T7892] REISERFS (device loop3): checking transaction log (loop3) [ 353.161624][ T7892] REISERFS (device loop3): Using r5 hash to sort names [ 353.193897][ T7892] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 353.206872][ T7913] netlink: 'syz.0.854': attribute type 24 has an invalid length. [ 353.271097][ T26] audit: type=1804 audit(1727727515.284:546): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.848" name="/newroot/47/file0/file0" dev="loop3" ino=3 res=1 errno=0 [ 353.343305][ T7917] syz.2.855 sent an empty control message without MSG_MORE. [ 353.700239][ T7926] netlink: 192 bytes leftover after parsing attributes in process `syz.4.856'. [ 353.844052][ T7918] can: request_module (can-proto-3) failed. [ 353.862162][ T7926] netlink: 192 bytes leftover after parsing attributes in process `syz.4.856'. [ 353.870160][ T7909] dccp_close: ABORT with 4968 bytes unread [ 354.951722][ T7940] loop3: detected capacity change from 0 to 4096 [ 355.183636][ T7940] NILFS (loop3): invalid segment: Checksum error in segment payload [ 355.239657][ T7940] NILFS (loop3): trying rollback from an earlier position [ 355.280808][ T7947] tipc: Can't bind to reserved service type 2 [ 355.292125][ T7951] device veth0_vlan left promiscuous mode [ 355.298545][ T1074] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 355.315166][ T7940] NILFS (loop3): recovery complete [ 355.335167][ T7952] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.645086][ T7959] netlink: 'syz.4.868': attribute type 3 has an invalid length. [ 355.686675][ T1074] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 355.737589][ T1074] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.917955][ T1074] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.030835][ T1074] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 356.118659][ T1074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.223422][ T1074] usb 3-1: invalid MIDI out EP 0 [ 356.285351][ T7965] loop1: detected capacity change from 0 to 8 [ 356.338735][ T7963] loop0: detected capacity change from 0 to 512 [ 356.385281][ T1074] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 356.427860][ T7967] loop3: detected capacity change from 0 to 4096 [ 356.436257][ T7965] SQUASHFS error: zlib decompression failed, data probably corrupt [ 356.454304][ T7965] SQUASHFS error: Failed to read block 0x9b: -5 [ 356.460894][ T1074] usb 3-1: USB disconnect, device number 8 [ 356.467015][ T7965] SQUASHFS error: Unable to read metadata cache entry [99] [ 356.477056][ T7965] SQUASHFS error: Unable to read inode 0x127 [ 356.495017][ T7963] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #16: comm syz.0.869: casefold flag without casefold feature [ 356.504558][ T6197] udevd[6197]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.528334][ T7967] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 356.536789][ T7967] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 356.551939][ T7967] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 356.566727][ T7967] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 356.568283][ T7963] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.869: couldn't read orphan inode 16 (err -117) [ 356.589430][ T7967] ntfs: (device loop3): load_system_files(): Failed to load $Volume. [ 356.617060][ T3715] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 356.627114][ T7967] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 356.665087][ T7963] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 356.681919][ T7963] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038 (0x7fffffff) [ 356.816044][ T26] audit: type=1326 audit(1727727518.822:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.0.869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3917e1eff9 code=0x0 [ 356.976912][ T3715] usb 5-1: Using ep0 maxpacket: 32 [ 357.088510][ T7980] netlink: 'syz.3.872': attribute type 25 has an invalid length. [ 357.318139][ T3715] usb 5-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.44 [ 357.628466][ T3715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.780294][ T3715] usb 5-1: Product: syz [ 357.784488][ T3715] usb 5-1: Manufacturer: syz [ 357.956075][ T3715] usb 5-1: SerialNumber: syz [ 357.979449][ T3715] usb 5-1: config 0 descriptor?? [ 358.043904][ T3715] usb-storage 5-1:0.0: USB Mass Storage device detected [ 358.280836][ T3715] usb-storage 5-1:0.0: Quirks match for vid 04e6 pid 0007: 1 [ 358.312277][ T3715] usb-storage 5-1:0.0: This device (04e6,0007,0144 S 3e P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.15.167-syzkaller) [ 358.312277][ T3715] Please send a copy of this message to and [ 359.743041][ T8009] loop1: detected capacity change from 0 to 128 [ 359.914593][ T3715] usb 5-1: USB disconnect, device number 10 [ 360.235792][ T26] audit: type=1800 audit(1727727522.230:548): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.879" name="bus" dev="loop1" ino=1048885 res=0 errno=0 [ 361.043549][ T4144] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 361.387459][ T8014] loop4: detected capacity change from 0 to 1024 [ 361.511044][ T8014] EXT4-fs (loop4): Ignoring removed orlov option [ 361.536581][ T8014] EXT4-fs (loop4): Ignoring removed oldalloc option [ 361.554305][ T8014] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 361.565771][ T8014] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 361.577544][ T8033] xt_TCPMSS: Only works on TCP SYN packets [ 361.587953][ T8014] EXT4-fs (loop4): invalid journal inode [ 361.616085][ T8014] EXT4-fs (loop4): can't get journal size [ 361.660445][ T8014] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000008001,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 361.973984][ T8046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.887'. [ 362.309816][ T8049] loop3: detected capacity change from 0 to 2048 [ 362.374519][ T3572] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 362.384555][ T8054] netlink: 'syz.1.890': attribute type 5 has an invalid length. [ 362.595577][ T8049] loop3: detected capacity change from 0 to 2048 [ 362.614891][ T8058] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 362.621764][ T8058] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 362.706539][ T8058] vhci_hcd vhci_hcd.0: Device attached [ 362.724744][ T8049] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.861284][ T4144] vhci_hcd: vhci_device speed not set [ 362.897968][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 362.931278][ T4144] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 363.624305][ T8059] vhci_hcd: connection reset by peer [ 363.694466][ T144] vhci_hcd: stop threads [ 363.717551][ T144] vhci_hcd: release socket [ 363.762022][ T144] vhci_hcd: disconnect device [ 363.865011][ T3559] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 363.872796][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 363.912773][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.934048][ T21] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 363.949579][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.992118][ T21] usb 3-1: config 0 descriptor?? [ 364.038227][ T21] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 364.052147][ T21] usb 3-1: No valid video chain found. [ 364.142060][ T3559] usb 4-1: Using ep0 maxpacket: 16 [ 364.292488][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 364.303925][ T3559] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.326867][ T3559] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 364.340123][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 364.355152][ T3559] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 364.377085][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.390567][ T3559] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.400269][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.409721][ T3559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.418738][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.451049][ T24] usb 1-1: config 0 descriptor?? [ 364.456288][ T8069] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 364.472792][ T3559] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 364.564570][ T8067] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 364.616362][ T8082] loop1: detected capacity change from 0 to 512 [ 364.839089][ T8082] EXT4-fs (loop1): bad s_min_extra_isize: 65528 [ 364.908963][ T8082] ecryptfs_parse_options: eCryptfs: unrecognized option [l] [ 364.948158][ T8082] ecryptfs_parse_options: eCryptfs: unrecognized option [io%bfq.io_serviced_recursiƋ}ʼ(zmbE1Ƭqd1 K/dev/nullb0] [ 364.965822][ T8082] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 365.004893][ T8082] Error parsing options; rc = [-22] [ 365.070720][ T24] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 365.147047][ T8089] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 365.153581][ T8089] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 365.168240][ T8089] vhci_hcd vhci_hcd.0: Device attached [ 365.179097][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 365.292202][ T1074] usb 3-1: USB disconnect, device number 9 [ 365.415977][ T24] usb 1-1: USB disconnect, device number 7 [ 365.865907][ T3559] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 365.904239][ T8090] vhci_hcd: connection closed [ 365.907109][ T1390] vhci_hcd: stop threads [ 365.915856][ T3559] usb 4-1: USB disconnect, device number 12 [ 365.981552][ T1390] vhci_hcd: release socket [ 366.008466][ T1390] vhci_hcd: disconnect device [ 366.081003][ T8104] loop3: detected capacity change from 0 to 64 [ 366.356989][ T8116] netlink: 176 bytes leftover after parsing attributes in process `syz.0.903'. [ 366.371935][ T8110] 9pnet: Unknown protocol version 9p200 [ 366.407103][ T8116] device ip6gretap0 entered promiscuous mode [ 366.419742][ T8114] xt_hashlimit: overflow, rate too high: 0 [ 366.442155][ T8116] netlink: 156 bytes leftover after parsing attributes in process `syz.0.903'. [ 366.502152][ T8112] loop4: detected capacity change from 0 to 4096 [ 367.273988][ T6544] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 367.604057][ T6544] usb 2-1: Using ep0 maxpacket: 32 [ 367.724337][ T6544] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 367.733424][ T6544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.759203][ T6544] usb 2-1: config 0 descriptor?? [ 367.764829][ T8120] loop0: detected capacity change from 0 to 32768 [ 367.805740][ T6544] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 367.812237][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 367.813266][ T6544] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 367.924602][ T6544] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 367.952136][ T6544] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 368.004002][ T6544] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 368.032366][ T6544] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 368.053438][ T6544] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 368.079082][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.908'. [ 368.210172][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.233398][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.240629][ T6544] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 368.261215][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 368.281668][ T6544] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 368.439687][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 368.509494][ T8157] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 368.535814][ T8157] netlink: 'syz.3.918': attribute type 2 has an invalid length. [ 368.672397][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.682139][ T24] usb 5-1: config 0 descriptor?? [ 368.712022][ T6544] usb 2-1: USB disconnect, device number 3 [ 368.766393][ T4144] vhci_hcd: vhci_device speed not set [ 368.773119][ T6544] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 368.845176][ T6544] keyspan 2-1:0.0: device disconnected [ 369.411787][ T8137] udc-core: couldn't find an available UDC or it's busy [ 369.411852][ T8137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 369.605542][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 369.611631][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 369.659448][ T24] usb 5-1: USB disconnect, device number 11 [ 369.770721][ T8172] futex_wake_op: syz.2.922 tries to shift op by 32; fix this program [ 369.784252][ T8179] netlink: 92 bytes leftover after parsing attributes in process `syz.1.923'. [ 369.911931][ T8183] loop0: detected capacity change from 0 to 512 [ 369.980620][ T8183] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 369.998390][ T8183] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 370.027333][ T8183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 370.035524][ T8183] System zones: 1-12 [ 370.064962][ T8183] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.919: corrupted in-inode xattr [ 370.085453][ T1074] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 370.107179][ T8183] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.919: couldn't read orphan inode 15 (err -117) [ 370.142482][ T8183] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 370.307767][ T8183] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz.0.919: No space for directory leaf checksum. Please run e2fsck -D. [ 370.328996][ T8183] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #11: comm syz.0.919: checksumming directory block 0 [ 370.331137][ T1074] usb 3-1: Using ep0 maxpacket: 16 [ 370.403899][ T6590] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5803: Out of memory [ 370.430745][ T8197] kvm [8194]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 370.444288][ T6590] EXT4-fs error (device loop0): ext4_dirty_inode:6007: inode #2: comm syz-executor: mark_inode_dirty error [ 370.475001][ T6590] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 370.494864][ T6590] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 370.539038][ T6590] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 370.555121][ T6590] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 370.583149][ T6590] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 370.703809][ T6590] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048 [ 370.721872][ T6590] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 370.743244][ T6590] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072 [ 370.757380][ T1074] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 370.757410][ T1074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.845921][ T8211] loop3: detected capacity change from 0 to 256 [ 370.907125][ T6590] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 370.950984][ T8211] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 371.034193][ T26] audit: type=1800 audit(1727727533.033:549): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.931" name="bus" dev="loop3" ino=1048887 res=0 errno=0 [ 371.083785][ T8204] device syzkaller1 entered promiscuous mode [ 371.097602][ T8186] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 585783521 [ 371.287823][ T1074] usb 3-1: Product: syz [ 371.292010][ T1074] usb 3-1: Manufacturer: syz [ 371.292811][ T8186] EXT4-fs error (device loop0): ext4_init_inode_table:1569: comm ext4lazyinit: Something is wrong with group 0: used itable blocks: -13567; itable unused count: 54301 [ 371.296672][ T1074] usb 3-1: SerialNumber: syz [ 371.298392][ T1074] usb 3-1: config 0 descriptor?? [ 371.317938][ T6590] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 4096 [ 371.321791][ T8213] loop4: detected capacity change from 0 to 764 [ 371.324020][ T6590] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 371.366981][ T6590] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 5120 [ 371.380461][ T1074] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 371.384851][ T6590] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 371.391000][ T1074] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 371.506337][ T6590] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 372.147852][ T8225] netlink: 'syz.1.935': attribute type 10 has an invalid length. [ 372.213161][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.234688][ T3608] Bluetooth: hci3: command 0x0409 tx timeout [ 372.247673][ T8225] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 372.358318][ T26] audit: type=1326 audit(1727727534.362:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.395875][ T8229] ptrace attach of "./syz-executor exec"[5751] was attempted by "./syz-executor exec"[8229] [ 372.418184][ T26] audit: type=1326 audit(1727727534.362:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.447398][ T26] audit: type=1326 audit(1727727534.362:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.469555][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.496157][ T26] audit: type=1326 audit(1727727534.362:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.518359][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.545279][ T26] audit: type=1326 audit(1727727534.362:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.597140][ T26] audit: type=1326 audit(1727727534.362:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.619321][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.632870][ T26] audit: type=1326 audit(1727727534.382:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.655070][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.662563][ T26] audit: type=1326 audit(1727727534.392:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.684775][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.691329][ T26] audit: type=1326 audit(1727727534.392:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa266dbdff9 code=0x7ffc0000 [ 372.713953][ T3608] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 372.758266][ T8231] loop3: detected capacity change from 0 to 256 [ 372.910018][ T8231] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 372.963651][ T24] usb 3-1: USB disconnect, device number 10 [ 373.114768][ T8233] loop1: detected capacity change from 0 to 8192 [ 373.127580][ T3608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 373.161018][ T3608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 373.170772][ T3608] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 373.186814][ T3608] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.10 [ 373.195944][ T3608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.236187][ T3608] usb 5-1: config 0 descriptor?? [ 373.262746][ T8236] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.300434][ T3608] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 373.344841][ T3754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.437463][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 373.461721][ T3754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.531289][ T3754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.622646][ T3754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.827869][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.840924][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.854515][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.864255][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.886859][ T24] usb 3-1: config 0 descriptor?? [ 373.918383][ T3754] tipc: Left network mode [ 374.388015][ T8261] loop1: detected capacity change from 0 to 256 [ 374.417747][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.948438][ T8261] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 374.966607][ T8235] udc-core: couldn't find an available UDC or it's busy [ 374.973706][ T8235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 375.140835][ T24] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description [ 375.151158][ T24] plantronics 0003:047F:FFFF.0002: parse failed [ 375.157444][ T24] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 375.189906][ T3608] usb 5-1: USB disconnect, device number 12 [ 375.865262][ T24] Bluetooth: hci0: command 0x0409 tx timeout [ 375.912552][ T8241] chnl_net:caif_netlink_parms(): no params data found [ 376.018429][ T8272] loop1: detected capacity change from 0 to 2048 [ 376.093741][ T26] kauditd_printk_skb: 72 callbacks suppressed [ 376.093755][ T26] audit: type=1326 audit(1727727538.090:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.4.945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x0 [ 376.134112][ T8279] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.208629][ T8270] kAFS: unable to lookup cell '(>.DzsfIvNh\D%aD'+i8BcNo~F^($)3k 8S72gՑfo$ .~' [ 376.333926][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.335656][ T26] audit: type=1326 audit(1727727538.230:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.4.945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x0 [ 376.343785][ T8273] binder: 8269:8273 ioctl c0306201 0 returned -14 [ 376.375189][ T8289] loop3: detected capacity change from 0 to 128 [ 376.382486][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.404143][ T8241] device bridge_slave_0 entered promiscuous mode [ 376.436346][ T8289] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000772 (sector = 1) [ 376.462801][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.502752][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.522660][ T8241] device bridge_slave_1 entered promiscuous mode [ 376.694655][ T8295] netlink: 'syz.1.948': attribute type 4 has an invalid length. [ 376.737258][ T8241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.764241][ T8241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.483815][ T8301] loop1: detected capacity change from 0 to 1024 [ 377.525099][ T3874] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000772 (sector = 1) [ 377.529747][ T6544] usb 3-1: USB disconnect, device number 11 [ 377.585305][ T8241] team0: Port device team_slave_0 added [ 377.598031][ T8241] team0: Port device team_slave_1 added [ 377.605738][ T8309] netlink: 'syz.2.949': attribute type 10 has an invalid length. [ 379.037343][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.043867][ T3608] Bluetooth: hci0: command 0x041b tx timeout [ 379.060201][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.142788][ T8309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.353373][ T8309] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 379.379913][ T8316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.952'. [ 379.515721][ T8321] loop3: detected capacity change from 0 to 256 [ 379.548521][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.579064][ T8321] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 379.597724][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.600269][ T26] audit: type=1800 audit(1727727541.589:633): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.951" name="bus" dev="loop3" ino=1048920 res=0 errno=0 [ 379.737812][ T8241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.610463][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.625512][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.651915][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.689949][ T8241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.049029][ T8241] device hsr_slave_0 entered promiscuous mode [ 381.066413][ T8241] device hsr_slave_1 entered promiscuous mode [ 381.091691][ T24] Bluetooth: hci0: command 0x040f tx timeout [ 381.121953][ T8241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.134900][ T8241] Cannot create hsr debugfs directory [ 381.289797][ T8350] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 381.375307][ T8346] loop4: detected capacity change from 0 to 8192 [ 381.427046][ T8350] team0: Port device dummy0 added [ 381.463398][ T8346] loop4: p2 p3 p4 [ 381.491549][ T8346] loop4: p2 start 452985600 is beyond EOD, truncated [ 381.515746][ T8346] loop4: p3 start 4177527808 is beyond EOD, truncated [ 381.535984][ T8346] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 381.714015][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 383.193352][ T24] Bluetooth: hci0: command 0x0419 tx timeout [ 383.433386][ T8350] syz.1.959 (8350) used greatest stack depth: 18200 bytes left [ 383.497142][ T8374] loop1: detected capacity change from 0 to 512 [ 383.522520][ T8369] netlink: 'syz.4.960': attribute type 4 has an invalid length. [ 383.587272][ T3754] device hsr_slave_0 left promiscuous mode [ 383.621835][ T8374] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 383.631760][ T3754] device hsr_slave_1 left promiscuous mode [ 383.631987][ T8374] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 383.647387][ T3754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.661970][ T3754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.670827][ T3754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.672127][ T8374] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 383.678516][ T3754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.692997][ T8374] System zones: 0-2, 18-18, 34-34 [ 383.699159][ T3754] device bridge_slave_0 left promiscuous mode [ 383.705620][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.714058][ T8374] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 383.730327][ T8374] EXT4-fs (loop1): 1 truncate cleaned up [ 383.736724][ T8374] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.750540][ T3754] device veth1_macvtap left promiscuous mode [ 383.757051][ T3754] device veth0_macvtap left promiscuous mode [ 383.767457][ T3754] device veth1_vlan left promiscuous mode [ 383.773851][ T3754] device veth0_vlan left promiscuous mode [ 383.782870][ T26] audit: type=1326 audit(1727727545.787:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 383.841092][ T26] audit: type=1326 audit(1727727545.807:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 383.876355][ T26] audit: type=1326 audit(1727727545.807:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 383.898907][ T26] audit: type=1326 audit(1727727545.807:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 383.922523][ T26] audit: type=1326 audit(1727727545.807:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 383.945540][ T26] audit: type=1326 audit(1727727545.807:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 383.970929][ T26] audit: type=1326 audit(1727727545.807:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 383.998773][ T26] audit: type=1326 audit(1727727545.807:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 384.022252][ T26] audit: type=1326 audit(1727727545.807:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 384.055235][ T26] audit: type=1326 audit(1727727545.807:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd116aff9 code=0x7ffc0000 [ 384.332470][ T3754] team0 (unregistering): Port device team_slave_1 removed [ 384.364744][ T3754] team0 (unregistering): Port device team_slave_0 removed [ 384.379276][ T3754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.412446][ T3754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.491097][ T8392] loop1: detected capacity change from 0 to 256 [ 384.495885][ T3754] bond0 (unregistering): Released all slaves [ 384.539013][ T8392] exfat: Deprecated parameter 'namecase' [ 384.544750][ T8392] exfat: Deprecated parameter 'utf8' [ 384.550282][ T8392] exfat: Deprecated parameter 'namecase' [ 384.556679][ T8392] exfat: Deprecated parameter 'utf8' [ 384.571914][ T8382] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 384.653346][ T8392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 384.790985][ T8394] trusted_key: encrypted_key: master key parameter is missing [ 384.889744][ T8394] Invalid option length (1048127) for dns_resolver key [ 385.034231][ T4144] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 386.105682][ T8405] loop3: detected capacity change from 0 to 32768 [ 386.170348][ T8405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.970 (8405) [ 386.184678][ T4655] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 386.233098][ T8405] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 386.244971][ T8405] BTRFS info (device loop3): using free space tree [ 386.265404][ T8405] BTRFS info (device loop3): has skinny extents [ 386.367694][ T8241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.385466][ T8241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.423632][ T4655] usb 5-1: Using ep0 maxpacket: 16 [ 386.435547][ T8241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.474042][ T4144] usb 2-1: not running at top speed; connect to a high speed hub [ 386.482343][ T8241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.547359][ T4655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 386.559058][ T4144] usb 2-1: config index 0 descriptor too short (expected 51325, got 125) [ 386.599451][ T4144] usb 2-1: config 204 has too many interfaces: 180, using maximum allowed: 32 [ 386.613817][ T8405] BTRFS info (device loop3): enabling ssd optimizations [ 386.639031][ T4655] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 386.682050][ T4144] usb 2-1: config 204 contains an unexpected descriptor of type 0x1, skipping [ 386.704499][ T4655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.733791][ T4144] usb 2-1: config 204 has an invalid descriptor of length 0, skipping remainder of the config [ 386.756118][ T4655] usb 5-1: config 0 descriptor?? [ 386.780278][ T8241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.787044][ T4144] usb 2-1: config 204 has 0 interfaces, different from the descriptor's value: 180 [ 386.845490][ T8405] BTRFS error (device loop3): balance: invalid convert metadata profile single [ 386.866607][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 386.894654][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 386.922824][ T8241] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.962922][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 386.982908][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.000011][ T8402] PKCS7: Unknown OID: [4] (bad) [ 387.024044][ T8402] PKCS7: Only support pkcs7_signedData type [ 387.030648][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.037782][ T3776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.059967][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.969'. [ 387.084158][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.111346][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.129394][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.135117][ T8465] udc-core: couldn't find an available UDC or it's busy [ 387.157688][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.164819][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.184535][ T4144] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.185079][ T8465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 387.193602][ T4144] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 387.231106][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.239356][ T4144] usb 2-1: Product: syz [ 387.249974][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.258526][ T4144] usb 2-1: Manufacturer: ㅽꑋᡕፍ涮缗壼烷녠灡ᛏ唗鬼忝஭턐᥅옧２괲貤⊘붑ѐ塑ፄꤶ밹缬䯟拫瘏르맂ꦔ䡮㛰⣔띰缚ﳕ嶤烖ጔ嶽찝⶗뷀ㄌ㄰綜ꋐ䵄櫁犼⸻ￗ뱨訤뷆ૃ低火࡯뼌ᄌ䒬↨尛蝕㤾⢶羰๧捷锠뢈⭺悳㷄㿵蓥렗橎枨䥍륳⋆骲凘逸 [ 387.314664][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.336099][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.368898][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.385223][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.403914][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.418243][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.460121][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.492148][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 387.510647][ T4144] usb 2-1: USB disconnect, device number 4 [ 387.522404][ T8241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 387.541514][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.830470][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.844459][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 387.871598][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.934712][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 387.961245][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.066998][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 388.086485][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.164550][ T4655] usbhid 5-1:0.0: can't add hid device: -71 [ 388.170547][ T4655] usbhid: probe of 5-1:0.0 failed with error -71 [ 388.191465][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 388.216038][ T4655] usb 5-1: USB disconnect, device number 13 [ 388.242212][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.272252][ T8503] loop2: detected capacity change from 0 to 2048 [ 388.297698][ T8505] netlink: 'syz.4.977': attribute type 10 has an invalid length. [ 388.350566][ T8241] device veth0_vlan entered promiscuous mode [ 388.372883][ T8509] loop3: detected capacity change from 0 to 256 [ 388.372916][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 388.413732][ T8503] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 388.427501][ T8241] device veth1_vlan entered promiscuous mode [ 388.448910][ T8503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.467812][ T8509] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 388.518479][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 388.538162][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 388.586523][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 388.630162][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.651259][ T8241] device veth0_macvtap entered promiscuous mode [ 388.687341][ T8241] device veth1_macvtap entered promiscuous mode [ 388.726702][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.741336][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.757158][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.778104][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.789279][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.803087][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.852467][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.872688][ T6618] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 388.873121][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.981597][ T6618] exFAT-fs (loop3): Filesystem has been set read-only [ 388.981833][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.999854][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 389.089590][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 389.204999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.235568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.397733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.599086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.760818][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.782765][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.794729][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.815021][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.824848][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.981630][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.991960][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.035780][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.147344][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.308493][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.333323][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.404002][ T8241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.474905][ T8241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.500299][ T8241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.526647][ T8241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.787297][ T3859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.844153][ T3859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.905882][ T3850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.026168][ T3850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.061925][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.084405][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.539317][ T8586] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 391.919818][ T8608] ptrace attach of "./syz-executor exec"[7266] was attempted by "./syz-executor exec"[8608] [ 391.932441][ T8608] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 391.966049][ T6544] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 391.973955][ T8610] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 392.093307][ T8607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.125570][ T8607] device syzkaller1 entered promiscuous mode [ 392.193828][ T8598] chnl_net:caif_netlink_parms(): no params data found [ 392.268212][ T8626] loop1: detected capacity change from 0 to 512 [ 392.302655][ T8617] device syzkaller1 entered promiscuous mode [ 392.337493][ T8626] UDF-fs: bad mount option "eS&" or missing value [ 392.346298][ T6544] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.372805][ T6544] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 392.392975][ T6544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.437355][ T6544] usb 5-1: config 0 descriptor?? [ 392.490552][ T6544] comedi comedi0: Wrong number of endpoints [ 392.503206][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.524892][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.533834][ T8598] device bridge_slave_0 entered promiscuous mode [ 392.536267][ T6544] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 392.543431][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.558910][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.570506][ T8598] device bridge_slave_1 entered promiscuous mode [ 392.604503][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.624898][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.733667][ T3715] usb 5-1: USB disconnect, device number 14 [ 392.749644][ T8598] team0: Port device team_slave_0 added [ 392.765467][ T8598] team0: Port device team_slave_1 added [ 392.845324][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.855230][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.899165][ T8598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.938019][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.945085][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.989700][ T8598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.045469][ T8598] device hsr_slave_0 entered promiscuous mode [ 393.068389][ T8598] device hsr_slave_1 entered promiscuous mode [ 393.381620][ T8598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.399058][ T8598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.520464][ T8598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.589053][ T8598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.003104][ T8491] Bluetooth: hci1: command 0x0409 tx timeout [ 395.308244][ T8598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.324759][ T8598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.462465][ T8672] overlayfs: failed to get inode (-116) [ 395.473164][ T8672] overlayfs: failed to get inode (-116) [ 395.491217][ T8672] overlayfs: failed to get inode (-116) [ 395.509854][ T8598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.520468][ T8672] overlayfs: failed to get inode (-116) [ 395.536328][ T8598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.639428][ T8672] loop4: detected capacity change from 0 to 4096 [ 395.707885][ T8672] overlayfs: failed to get inode (-116) [ 395.714607][ T8672] overlayfs: failed to get inode (-116) [ 395.763341][ T8675] device syzkaller1 entered promiscuous mode [ 395.779243][ T8672] overlayfs: failed to get inode (-116) [ 395.800369][ T8680] loop0: detected capacity change from 0 to 512 [ 395.802173][ T8598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 395.840159][ T8598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.863030][ T8598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.880034][ T8672] overlayfs: failed to get inode (-116) [ 395.907099][ T8598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.934371][ T8672] overlayfs: failed to get inode (-116) [ 395.970601][ T8682] overlayfs: failed to get inode (-116) [ 395.974287][ T8680] loop0: detected capacity change from 0 to 512 [ 395.997910][ T8672] loop4: detected capacity change from 0 to 128 [ 396.101097][ T8683] loop1: detected capacity change from 0 to 4096 [ 396.128798][ T8598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.180138][ T8598] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.190758][ T8683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 396.198737][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.207897][ T8682] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1010'. [ 396.230727][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.283459][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.319829][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.387288][ T3859] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.394439][ T3859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.403027][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.411954][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.421101][ T3859] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.428211][ T3859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.438367][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.018645][ T8493] Bluetooth: hci1: command 0x041b tx timeout [ 397.547160][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.590457][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.626857][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.637245][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.647414][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.658694][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.667364][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.676383][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.694621][ T8699] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 397.798802][ T8699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.817239][ T8699] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 397.836447][ T8598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.857878][ T8598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.865970][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.332071][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.551701][ T8705] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1016'. [ 398.563908][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.669450][ T8716] loop1: detected capacity change from 0 to 256 [ 398.776068][ T8716] FAT-fs (loop1): Unrecognized mount option "nOnumtail=0" or missing value [ 398.791765][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.814900][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.839797][ T8598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.898638][ T4144] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 398.934123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.952362][ T8716] loop1: detected capacity change from 0 to 1024 [ 398.959945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.004391][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 399.021656][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.026683][ T8724] loop4: detected capacity change from 0 to 4096 [ 399.037158][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.054772][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.087955][ T8716] EXT4-fs (loop1): Ignoring removed oldalloc option [ 399.101119][ T8716] EXT4-fs (loop1): Ignoring removed orlov option [ 399.173878][ T3559] Bluetooth: hci1: command 0x040f tx timeout [ 399.174401][ T8598] device veth0_vlan entered promiscuous mode [ 399.181273][ T8716] EXT4-fs (loop1): Unrecognized mount option "rootcontext=user_u" or missing value [ 399.204402][ T8598] device veth1_vlan entered promiscuous mode [ 399.225150][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 399.233785][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 399.242172][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 399.253541][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.278994][ T4144] usb 1-1: config index 0 descriptor too short (expected 13951, got 18) [ 399.294473][ T4144] usb 1-1: config 121 has an invalid descriptor of length 206, skipping remainder of the config [ 399.378423][ T4144] usb 1-1: config 121 has no interfaces? [ 399.416623][ T4144] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 399.454161][ T8716] loop1: detected capacity change from 0 to 2048 [ 399.465052][ T4144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.683126][ T8598] device veth0_macvtap entered promiscuous mode [ 399.693897][ T8598] device veth1_macvtap entered promiscuous mode [ 399.721841][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.763445][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.775891][ T8716] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.790540][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.801823][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.812430][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.823162][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.833598][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.848657][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 399.848671][ T26] audit: type=1326 audit(1727727561.830:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7fc00000 [ 399.877334][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.887464][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.898769][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.909835][ T26] audit: type=1326 audit(1727727561.830:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa266dbdff9 code=0x7fc00000 [ 399.932344][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.943413][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.955240][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.990327][ T8713] udc-core: couldn't find an available UDC or it's busy [ 399.997376][ T8713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 400.010266][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.029945][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.599028][ T26] audit: type=1326 audit(1727727562.420:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7fc00000 [ 400.690046][ T26] audit: type=1326 audit(1727727562.420:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa266dbdff9 code=0x7fc00000 [ 400.692965][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.724658][ T26] audit: type=1326 audit(1727727562.420:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7fc00000 [ 400.734231][ T3754] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:7: bg 0: block 234: padding at end of block bitmap is not set [ 400.756312][ T26] audit: type=1326 audit(1727727562.420:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7fc00000 [ 400.784683][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.812962][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.858279][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.895290][ T3754] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 400.919986][ T26] audit: type=1326 audit(1727727562.420:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x7fc00000 [ 400.947750][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.961366][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.985738][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.006109][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.026361][ T3754] EXT4-fs (loop1): This should not happen!! Data will be lost [ 401.026361][ T3754] [ 401.050863][ T3754] EXT4-fs (loop1): Total free blocks count 0 [ 401.056868][ T3754] EXT4-fs (loop1): Free/Dirty block details [ 401.057236][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.063695][ T3754] EXT4-fs (loop1): free_blocks=0 [ 401.082593][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.105269][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.115496][ T3754] EXT4-fs (loop1): dirty_blocks=16 [ 401.121976][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.125458][ T3754] EXT4-fs (loop1): Block reservation details [ 401.143669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.159969][ T3754] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 401.167510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.198865][ T8598] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.253715][ T8598] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.267824][ T8598] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.278151][ T3610] Bluetooth: hci1: command 0x0419 tx timeout [ 401.387652][ T8598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.074689][ T6544] Bluetooth: hci2: command 0x0406 tx timeout [ 402.114831][ T8755] device syzkaller1 entered promiscuous mode [ 402.121069][ T4144] usb 1-1: string descriptor 0 read error: -71 [ 402.130816][ T4144] usb 1-1: USB disconnect, device number 8 [ 402.244969][ T8757] loop1: detected capacity change from 0 to 512 [ 402.377378][ T3874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.396965][ T3874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.418188][ T8765] netlink: 'syz.0.1031': attribute type 10 has an invalid length. [ 402.431563][ T8766] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 402.514453][ T8757] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 402.573931][ T8757] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 403.018911][ T3715] Bluetooth: hci4: command 0x2016 tx timeout [ 403.045175][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 403.054429][ T8757] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 403.088274][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.113360][ T8757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 403.121496][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.124420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 403.138734][ T8757] System zones: 0-2, 18-18, 34-34 [ 403.199823][ T8775] device geneve2 entered promiscuous mode [ 403.208847][ T8757] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 403.271247][ T8757] EXT4-fs (loop1): 1 truncate cleaned up [ 403.291637][ T8757] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 404.050614][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 404.187708][ T8789] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1039'. [ 404.274191][ T8789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 404.290645][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 404.307779][ T8787] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 404.410900][ T7] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 404.836356][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.895447][ T7] usb 1-1: config 0 descriptor?? [ 404.946603][ T7] rndis_host: probe of 1-1:0.0 failed with error -22 [ 405.185581][ T8810] netlink: 'syz.3.1045': attribute type 10 has an invalid length. [ 405.204391][ T8811] loop0: detected capacity change from 0 to 512 [ 405.289998][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.315532][ T8811] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1037: invalid block [ 405.328892][ T3966] Bluetooth: hci4: SCO packet for unknown connection handle 3341 [ 405.339684][ T8810] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 405.352542][ T8804] device syzkaller1 entered promiscuous mode [ 405.373032][ T8811] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1037: invalid indirect mapped block 10 (level 1) [ 405.389387][ T8811] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1037: invalid indirect mapped block 8 (level 1) [ 405.415235][ T8811] EXT4-fs (loop0): 1 truncate cleaned up [ 405.443308][ T8811] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.622893][ T26] audit: type=1800 audit(1727727567.608:670): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1037" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 406.593642][ T8828] 9pnet_virtio: no channels available for device [ 407.372398][ T4144] usb 1-1: USB disconnect, device number 9 [ 407.850218][ T3966] Bluetooth: hci3: link tx timeout [ 407.857462][ T3966] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 408.127985][ T8845] loop0: detected capacity change from 0 to 512 [ 408.215210][ T26] audit: type=1326 audit(1727727570.207:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.2.1054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc56676dff9 code=0x0 [ 408.246746][ T8845] EXT4-fs (loop0): Ignoring removed nobh option [ 408.314127][ T8845] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 408.474038][ T8845] EXT4-fs (loop0): 1 truncate cleaned up [ 408.753259][ T8845] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 409.504506][ T8871] loop3: detected capacity change from 0 to 128 [ 410.296746][ T4144] Bluetooth: hci3: command 0x0406 tx timeout [ 410.328424][ T8871] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 410.362646][ T8871] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 410.396873][ T8878] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 411.527875][ T26] audit: type=1326 audit(1727727573.466:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8886 comm="syz.0.1064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dce450ff9 code=0x0 [ 413.595981][ T8911] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 414.068518][ T8919] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1070'. [ 414.160877][ T4144] kernel write not supported for file /dsp (pid: 4144 comm: kworker/0:6) [ 414.207038][ T8926] loop3: detected capacity change from 0 to 512 [ 414.293801][ T3776] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 414.318897][ T8926] EXT4-fs (loop3): Ignoring removed bh option [ 414.335356][ T8926] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 414.401514][ T8926] EXT4-fs (loop3): 1 truncate cleaned up [ 414.414302][ T8926] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,bh,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 415.523574][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 415.550037][ T26] audit: type=1326 audit(1727727577.535:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.4.1084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa266dbdff9 code=0x0 [ 415.629519][ T8970] loop1: detected capacity change from 0 to 2048 [ 415.763457][ T8970] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 415.782601][ T8970] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038 (0x7fffffff) [ 415.844823][ T8979] bridge0: port 3(erspan0) entered blocking state [ 415.851296][ T8979] bridge0: port 3(erspan0) entered disabled state [ 415.858928][ T8979] device erspan0 entered promiscuous mode [ 415.865179][ T8979] bridge0: port 3(erspan0) entered blocking state [ 415.871632][ T8979] bridge0: port 3(erspan0) entered forwarding state [ 415.900595][ T8979] bridge0: port 4(syz_tun) entered blocking state [ 415.907235][ T8979] bridge0: port 4(syz_tun) entered disabled state [ 415.915103][ T8979] device syz_tun entered promiscuous mode [ 415.921196][ T8979] bridge0: port 4(syz_tun) entered blocking state [ 415.927703][ T8979] bridge0: port 4(syz_tun) entered forwarding state [ 415.935854][ T8979] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 416.687448][ T8989] tmpfs: Unknown parameter 'grpquota' [ 417.104773][ T8985] loop0: detected capacity change from 0 to 2048 [ 417.399356][ T8985] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 417.413326][ T8985] UDF-fs: Scanning with blocksize 512 failed [ 419.369442][ T8985] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 112: 0xb2 != 0xba [ 419.453924][ T8985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.404324][ T9013] netlink: 'syz.4.1096': attribute type 10 has an invalid length. [ 421.319218][ T9019] netlink: 'syz.1.1099': attribute type 12 has an invalid length. [ 421.337874][ T9019] bond0: option primary_reselect: invalid value (255) [ 421.427753][ T9036] Cannot find add_set index 0 as target [ 421.660080][ T9040] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 422.015998][ T9040] loop1: detected capacity change from 0 to 16 [ 422.067741][ T9040] erofs: (device loop1): mounted with root inode @ nid 36. [ 422.107837][ T9040] mac80211_hwsim hwsim42 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.160505][ T154] wlan0: Trigger new scan to find an IBSS to join [ 424.376990][ T9053] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1108'. [ 425.510955][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 530.596563][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 530.603587][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3027/1:b..l P9077/1:b..l [ 530.613825][ C0] (detected by 0, t=10502 jiffies, g=39349, q=109) [ 530.620402][ C0] task:syz.0.1114 state:R running task stack:26176 pid: 9077 ppid: 8241 flags:0x00004000 [ 530.633166][ C0] Call Trace: [ 530.636451][ C0] [ 530.639385][ C0] __schedule+0x12c4/0x45b0 [ 530.643901][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 530.648935][ C0] ? release_firmware_map_entry+0x190/0x190 [ 530.654826][ C0] ? preempt_schedule_common+0xd0/0xd0 [ 530.660291][ C0] preempt_schedule_notrace+0xf8/0x140 [ 530.665745][ C0] ? preempt_schedule_common+0xd0/0xd0 [ 530.671198][ C0] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 530.677276][ C0] ? lock_release+0xa8/0x9a0 [ 530.681878][ C0] preempt_schedule_notrace_thunk+0x16/0x18 [ 530.687777][ C0] ? lock_acquire+0xcc/0x4f0 [ 530.692369][ C0] rcu_is_watching+0x72/0xa0 [ 530.696962][ C0] lock_acquire+0xdd/0x4f0 [ 530.701462][ C0] ? read_lock_is_recursive+0x10/0x10 [ 530.706833][ C0] ? queue_work_on+0x166/0x250 [ 530.711589][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 530.716796][ C0] ? queue_work_on+0x1f0/0x250 [ 530.721562][ C0] ? wq_worker_last_func+0x40/0x40 [ 530.726680][ C0] rcu_lock_acquire+0x2a/0x30 [ 530.731351][ C0] ? rcu_lock_acquire+0x5/0x30 [ 530.736103][ C0] nl80211_netlink_notify+0x70/0x810 [ 530.741395][ C0] blocking_notifier_call_chain+0x104/0x1b0 [ 530.747289][ C0] netlink_release+0xfb0/0x1800 [ 530.752137][ C0] ? read_lock_is_recursive+0x10/0x10 [ 530.757512][ C0] ? netlink_sock_destruct+0x260/0x260 [ 530.762964][ C0] ? __might_sleep+0xc0/0xc0 [ 530.767565][ C0] sock_close+0xcd/0x230 [ 530.771803][ C0] ? sock_mmap+0x90/0x90 [ 530.776041][ C0] __fput+0x3fe/0x8e0 [ 530.780031][ C0] task_work_run+0x129/0x1a0 [ 530.784625][ C0] exit_to_user_mode_loop+0x106/0x130 [ 530.789996][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 530.795536][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 530.801535][ C0] do_syscall_64+0x47/0xb0 [ 530.805951][ C0] ? clear_bhb_loop+0x15/0x70 [ 530.810623][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.816513][ C0] RIP: 0033:0x7f2dce44fc8a [ 530.820923][ C0] RSP: 002b:00007f2dcc8c7f90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 530.829343][ C0] RAX: 0000000000000000 RBX: 0000000000000022 RCX: 00007f2dce44fc8a [ 530.837306][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 530.845269][ C0] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 530.853234][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 530.861195][ C0] R13: 0000000000000000 R14: 00007f2dce608f80 R15: 00007ffd0b4f5dc8 [ 530.869174][ C0] [ 530.872189][ C0] task:udevd state:R running task stack:22624 pid: 3027 ppid: 1 flags:0x00004002 [ 530.882959][ C0] Call Trace: [ 530.886226][ C0] [ 530.889152][ C0] __schedule+0x12c4/0x45b0 [ 530.893676][ C0] ? release_firmware_map_entry+0x190/0x190 [ 530.899657][ C0] ? lock_release+0x62d/0x9a0 [ 530.904762][ C0] ? preempt_schedule+0xd9/0xe0 [ 530.909602][ C0] preempt_schedule_common+0x83/0xd0 [ 530.914881][ C0] preempt_schedule+0xd9/0xe0 [ 530.919549][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 530.925172][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 530.930195][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 530.935221][ C0] preempt_schedule_thunk+0x16/0x18 [ 530.940420][ C0] _raw_spin_unlock+0x36/0x40 [ 530.945096][ C0] fast_dput+0x125/0x290 [ 530.949337][ C0] dput+0xb7/0x1a0 [ 530.953053][ C0] step_into+0x352/0xe90 [ 530.957300][ C0] ? lookup_fast+0x399/0x7b0 [ 530.961899][ C0] ? set_root+0x3b0/0x3b0 [ 530.966223][ C0] ? __up_read+0x2b9/0x690 [ 530.970640][ C0] walk_component+0x359/0x610 [ 530.975319][ C0] ? nd_alloc_stack+0xf0/0xf0 [ 530.979989][ C0] ? kernfs_iop_permission+0x25b/0x360 [ 530.985528][ C0] ? inode_permission+0x21e/0x450 [ 530.990547][ C0] ? inode_permission+0xf7/0x450 [ 530.995476][ C0] ? kernfs_evict_inode+0x60/0x60 [ 531.000488][ C0] ? bpf_lsm_inode_permission+0x5/0x10 [ 531.006284][ C0] ? security_inode_permission+0xad/0xf0 [ 531.011916][ C0] link_path_walk+0x642/0xd90 [ 531.016601][ C0] ? handle_lookup_down+0x130/0x130 [ 531.021809][ C0] path_lookupat+0xa9/0x450 [ 531.026315][ C0] filename_lookup+0x230/0x5c0 [ 531.031085][ C0] ? hashlen_string+0x110/0x110 [ 531.035954][ C0] ? getname_flags+0x1ec/0x4e0 [ 531.040718][ C0] user_path_at_empty+0x40/0x180 [ 531.045652][ C0] do_readlinkat+0x114/0x3a0 [ 531.050239][ C0] ? cp_new_stat+0x6d0/0x6d0 [ 531.054826][ C0] ? vtime_user_exit+0x2d1/0x400 [ 531.059763][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 531.065737][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 531.070933][ C0] __x64_sys_readlink+0x7b/0x90 [ 531.075777][ C0] do_syscall_64+0x3b/0xb0 [ 531.080188][ C0] ? clear_bhb_loop+0x15/0x70 [ 531.084862][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.090758][ C0] RIP: 0033:0x7f66d392ed47 [ 531.095163][ C0] RSP: 002b:00007ffcd8781cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 531.103569][ C0] RAX: ffffffffffffffda RBX: 00007ffcd8781d08 RCX: 00007f66d392ed47 [ 531.111617][ C0] RDX: 0000000000000400 RSI: 00007ffcd8781d08 RDI: 00007ffcd87821e8 [ 531.119580][ C0] RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000 [ 531.127542][ C0] R10: 0000000000000812 R11: 0000000000000246 R12: 00007ffcd87821e8 [ 531.135501][ C0] R13: 00007ffcd8782158 R14: 000055f234bc4910 R15: 0000000000000000 [ 531.143479][ C0] [ 531.146500][ C0] rcu: rcu_preempt kthread starved for 10553 jiffies! g39349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 531.157679][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 531.167634][ C0] rcu: RCU grace-period kthread stack dump: [ 531.173502][ C0] task:rcu_preempt state:R running task stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 531.184278][ C0] Call Trace: [ 531.187544][ C0] [ 531.190474][ C0] __schedule+0x12c4/0x45b0 [ 531.194986][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 531.200895][ C0] ? release_firmware_map_entry+0x190/0x190 [ 531.206794][ C0] ? mod_timer_pending+0x20/0x20 [ 531.211726][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 531.217095][ C0] schedule+0x11b/0x1f0 [ 531.221246][ C0] schedule_timeout+0x1b9/0x300 [ 531.226097][ C0] ? console_conditional_schedule+0x40/0x40 [ 531.231984][ C0] ? update_process_times+0x200/0x200 [ 531.237353][ C0] ? prepare_to_swait_event+0x321/0x340 [ 531.242901][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 531.247765][ C0] ? trace_hardirqs_on+0x30/0x80 [ 531.252710][ C0] ? rcu_gp_init+0xdae/0x1140 [ 531.257398][ C0] ? rcu_gp_init+0x1140/0x1140 [ 531.262166][ C0] ? finish_swait+0xc5/0x1d0 [ 531.266755][ C0] rcu_gp_kthread+0xa4/0x360 [ 531.271346][ C0] ? _raw_spin_unlock+0x40/0x40 [ 531.276213][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 531.281318][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 531.287211][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 531.292233][ C0] kthread+0x3f6/0x4f0 [ 531.296307][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 531.301426][ C0] ? kthread_blkcg+0xd0/0xd0 [ 531.306029][ C0] ret_from_fork+0x1f/0x30 [ 531.310463][ C0] [ 531.313477][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 531.319797][ C0] NMI backtrace for cpu 0 [ 531.324115][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.167-syzkaller #0 [ 531.331915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 531.341962][ C0] Call Trace: [ 531.345237][ C0] [ 531.348075][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 531.352843][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 531.358472][ C0] ? panic+0x860/0x860 [ 531.362547][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 531.367483][ C0] ? __wake_up_klogd+0xd5/0x100 [ 531.372335][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 531.378483][ C0] ? _printk+0xd1/0x120 [ 531.382641][ C0] ? cpu_online+0x1f/0x40 [ 531.386965][ C0] ? panic+0x860/0x860 [ 531.391048][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 531.397192][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 531.403171][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 531.409497][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 531.414962][ C0] ? print_cpu_stall+0x600/0x600 [ 531.419893][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 531.425001][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 531.430199][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 531.435483][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 531.440327][ C0] ? hrtimer_run_queues+0x163/0x450 [ 531.445513][ C0] ? account_process_tick+0x232/0x3a0 [ 531.450875][ C0] update_process_times+0x196/0x200 [ 531.456068][ C0] tick_sched_timer+0x386/0x550 [ 531.460919][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 531.466456][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 531.471657][ C0] ? hrtimer_interrupt+0x980/0x980 [ 531.476756][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 531.482816][ C0] hrtimer_interrupt+0x392/0x980 [ 531.487763][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 531.493740][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 531.499366][ C0] [ 531.502294][ C0] [ 531.505215][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 531.511192][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 531.516991][ C0] Code: 82 42 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 c4 fe 48 f7 0f 1f 44 00 00 e8 0a 7e 42 f7 0f 00 2d 73 5c a5 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 8b 48 8c f7 [ 531.536595][ C0] RSP: 0018:ffffffff8c607b80 EFLAGS: 000002d3 [ 531.542657][ C0] RAX: ffffffff8a3ddc66 RBX: 0000000000000000 RCX: ffffffff8c6bd5c0 [ 531.550617][ C0] RDX: 0000000000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0 [ 531.558576][ C0] RBP: ffffffff8c607c10 R08: ffffffff8186db50 R09: fffffbfff18d7ab9 [ 531.566539][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff18c0f70 [ 531.574514][ C0] R13: ffff88801e60b804 R14: ffffffff8c607ba0 R15: dffffc0000000000 [ 531.582486][ C0] ? trace_hardirqs_on+0x30/0x80 [ 531.587422][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 531.592637][ C0] ? acpi_idle_enter_bm+0x5c0/0x5c0 [ 531.597827][ C0] ? rcu_preempt_deferred_qs+0x6b/0x190 [ 531.603362][ C0] ? rcu_qs+0x190/0x190 [ 531.607515][ C0] acpi_idle_enter+0x352/0x4f0 [ 531.612365][ C0] cpuidle_enter_state+0x521/0xef0 [ 531.617478][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 531.622844][ C0] ? can_stop_idle_tick+0x20d/0x2b0 [ 531.628038][ C0] ? tick_nohz_idle_stop_tick+0x354/0xa70 [ 531.633754][ C0] cpuidle_enter+0x59/0x90 [ 531.638170][ C0] do_idle+0x3e4/0x670 [ 531.642243][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 531.647453][ C0] ? do_idle+0x6/0x670 [ 531.651519][ C0] cpu_startup_entry+0x14/0x20 [ 531.656282][ C0] ? time_init+0x40/0x40 [ 531.660522][ C0] start_kernel+0x48c/0x540 [ 531.665024][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 531.670924][ C0]