last executing test programs: 27m16.894694057s ago: executing program 2 (id=199): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0), 0x0, 0x0) gettid() pipe2(&(0x7f0000002140)={0x0, 0x0}, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_read_part_table(0x5b4, &(0x7f0000000ec0)="$eJzs1L1Lq1cYAPDzBtK00Esulwt3uC1cMNyluVeIgw7JYCWmWYxIK1I6Cw46CB0cJCU6+/EPWPwCcRE7O4oRRCFOklGcC4pLppTWV2htEZSqePn9lsNzznPOc17Owxt41hLh93a7HYUQ2qm77/5hs9hffjfYO/R9CFH4KYRQ/OrLv1aiOOP61O04rsRxOZVrLB/0XWy+POw4rmdWE/H6TiKEX0II46dr6dsqR3e/LJ+grcJeemZ2sjQ3VRg7KU2fdY1+KL6dL04sdq/kq8Nv8iNxYyX/a/OtHXa/+plGz/pRu3K+9OJjst5o5fbjvOy/GvZ/KM6Tu/n+v76uNWutgfcbP3dmXzV3qwvxu1/6YQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9sq7CXnpmdLM1NFcZOStNnXaMfim/nixOL3Sv56vCb/EjiKm8n8Tj1M42e9aN25XzpxcdkvdHK7cd52Sikbmz99reHuRKP6Jvwj/f/LLyuNWutgfcboTP7qrlbXYiu8i6jp74pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBcFPvL7wZ7h5LX8XfHP3b8ObZTV3EUz2/HYyWeL6dyjeWDvovNl4cdx/XM6mAqhNTfzh0/XUt/cR18/fnDfwj38kcAAAD//zQug+I=") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) timer_settime(r0, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 27m15.58656819s ago: executing program 2 (id=204): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 27m14.628760834s ago: executing program 2 (id=205): syz_io_uring_setup(0xb4b8, &(0x7f0000000540)={0x0, 0x2734, 0x8000, 0x201, 0x882}, 0x0, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb1800a758e6ed5ef, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(r1, 0x0, 0x0, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write(0xffffffffffffffff, 0x0, 0x0) 27m13.528982471s ago: executing program 2 (id=207): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x3f) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 27m12.466677388s ago: executing program 2 (id=209): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) 27m11.775019226s ago: executing program 2 (id=212): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 26m56.695929733s ago: executing program 32 (id=212): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 14m2.616979314s ago: executing program 1 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000090605060000000000000000020000000500020073797a3000000012b7727cf3"], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x801) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0xfffe, 0xfffe, 0x2, 0xfffff7f6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) write(r3, &(0x7f00000002c0), 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 14m2.456367778s ago: executing program 1 (id=2479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SEM_INFO(0x0, 0x3, 0x13, 0x0) 14m0.975173639s ago: executing program 1 (id=2480): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10003, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 13m56.828872193s ago: executing program 1 (id=2484): openat$sw_sync(0xffffffffffffff9c, 0x0, 0xa8a40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, 0x0, 0x0, 0x0, 0x1000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x24181, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) 13m54.857584047s ago: executing program 1 (id=2488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x10, 0x2, 0x8, 0x3, 0x0, 0x1, 0x8, 0x1, 0x5, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 13m53.784664847s ago: executing program 1 (id=2490): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x7) 13m38.711126971s ago: executing program 33 (id=2490): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x7) 8m42.634147222s ago: executing program 0 (id=3134): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = getpgid(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2d, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x20}) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 8m41.50497215s ago: executing program 0 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x2, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x7, 0x1, 0x2, 0xb7d, 0x7, 0x7ff, 0x7, 0x81, 0x5, 0x1d, 0xd, 0x14, 0x6, 0x8}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 8m41.293487475s ago: executing program 0 (id=3138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x2, 0xc000, 0x4, r5, r6, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m40.301340238s ago: executing program 0 (id=3139): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB="72f81ab6b02c9f0000000700994daf250499c1bc4471bd323fa573fb3f33e7a400"], 0x1, 0x28c, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000002740)={0x8008080, 0x2d, 0x9, 0x3a, 0x100000000000006, 0x2c}, 0x48) epoll_create(0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xf0, 0x150, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0xfe, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x7, 0x4, 0x4], 0x3, 0x2}, {0xffffffffffffffff, [0x1, 0x1, 0x0, 0x0, 0x3, 0x1], 0x1, 0x4}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x0, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 8m37.166639703s ago: executing program 0 (id=3146): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) write$ppp(r1, &(0x7f00000001c0)="ab29", 0x2) 8m36.945013756s ago: executing program 0 (id=3149): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 8m25.692787605s ago: executing program 5 (id=3165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000002fc0)=""/4109, 0x100d) 8m21.273641395s ago: executing program 34 (id=3149): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 8m10.771323957s ago: executing program 5 (id=3186): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000000c0)={@private=0xa010102, @local, @local}, 0xc) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1a0f01020001ffffff"], 0x1d) 8m10.579085822s ago: executing program 5 (id=3187): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000680), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 8m7.975761517s ago: executing program 5 (id=3190): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a00000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001007000128009000100766c616e0000000060000280060001000200000006000100020000004c0004800c00010003000000800000000c00010002000000090000000c00010012000000070000000c000100fbffffff040000000c00010009000000090000000c0001000080000002000000080005", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 8m6.616765491s ago: executing program 5 (id=3193): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x30, 0x39, 0x30, 0x32]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000540), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f00000001c0)={'fscrypt:', @auto=[0x39, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0xc6, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x33]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x37, 0x30, 0x30, 0x31, 0x30, 0x66, 0x30, 0x30, 0x61, 0x30, 0x7, 0x33, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x62, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x39, 0x38, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x61]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00113c33445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000a00)={'fscrypt:', @auto=[0x38, 0x62, 0x39, 0x64, 0x1, 0x65, 0x32, 0x66, 0x32, 0x65, 0x62, 0x36, 0x35, 0x7, 0x62, 0x36]}, &(0x7f0000000100)={0x0, "0011ffffffffffffffe0aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x31, 0x30, 0x61, 0x30, 0x30, 0x30, 0x34, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aa8899aabbccddeeff00112233445566778899aabbccddeeff07002233445566778899aabbccddeeff00000b00", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 8m6.328224218s ago: executing program 5 (id=3194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000002fc0)=""/4109, 0x100d) 7m50.951663181s ago: executing program 35 (id=3194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000002fc0)=""/4109, 0x100d) 6m59.116817992s ago: executing program 6 (id=3330): openat$sw_sync(0xffffffffffffff9c, 0x0, 0xa8a40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x24181, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0442, 0x11) write$tcp_mem(r1, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) 6m57.640476349s ago: executing program 6 (id=3333): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x8, &(0x7f0000000000)) lstat(&(0x7f0000019080)='./file1\x00', &(0x7f0000019100)) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') syz_emit_ethernet(0x52, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @private2, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40302, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) 6m55.96834783s ago: executing program 6 (id=3336): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 6m55.430257784s ago: executing program 6 (id=3339): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB="72f81ab6b02c9f0000000700994daf250499c1bc4471bd323fa573fb3f33e7a400"], 0x1, 0x28c, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000002740)={0x8008080, 0x2d, 0x9, 0x3a, 0x100000000000006, 0x2c}, 0x48) epoll_create(0x1) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x2]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xc0, 0x120, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0xfe, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x7, 0x4, 0x4], 0x3, 0x2}, {0xffffffffffffffff, [0x1, 0x1, 0x0, 0x0, 0x3, 0x1], 0x1, 0x4}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x0, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 6m54.111676086s ago: executing program 6 (id=3342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x801) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0xfffe, 0xfffe, 0x2, 0xfffff7f6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) write(r3, &(0x7f00000002c0), 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 6m53.851610183s ago: executing program 6 (id=3344): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x289e0cb5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x7f, 0x42500) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @remote, {0x7, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x11, 0x10, @private, @empty, {[@timestamp_addr={0x44, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001c00357428bd7000fed3df2502000000", @ANYRES32=0x0, @ANYBLOB="0200a2fa6e2c34edaf818d4e"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x6000c080) r8 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r8, r0, 0x2) 6m38.32635433s ago: executing program 36 (id=3344): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x289e0cb5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x7f, 0x42500) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @remote, {0x7, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x11, 0x10, @private, @empty, {[@timestamp_addr={0x44, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001c00357428bd7000fed3df2502000000", @ANYRES32=0x0, @ANYBLOB="0200a2fa6e2c34edaf818d4e"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x6000c080) r8 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r8, r0, 0x2) 7.804871596s ago: executing program 7 (id=4156): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)=[{0x5b, 0x2010, 0x0, 0x0}], 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @empty, 0xb}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xc, 0x4, @tid=r3}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r4 = syz_io_uring_setup(0x3e7e, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, 0x0) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000540)={'dummy0\x00', 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac3(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000001240)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000001100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000000)) read$FUSE(r2, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xe0c0, 0x0) 6.579143077s ago: executing program 8 (id=4157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 6.242935475s ago: executing program 4 (id=4158): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r1, 0x6}, 0xb) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0x0, 0x10}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000002800)={0x2e, 0x21f, '\x00', [@generic={0x79, 0x2a, "81074eefd24ffd92fa34ce0287aa715ead8128691f8db2c3c77e284e3b5e3d3bb3235e12b70b6d4af947"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x1013, "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"}, @generic={0xd5, 0x7, "e1c3e9163aaa87"}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x69, 0x80, "1aae0686f0650da1c502fdc6a419bf5d7a5610cae69e49ba100bc3f1ac5e5e28bd0d9f0b5df90017915fe22f218389e6e7ea3f6aa37910a7400e301907a884a5e31f6292caf1de33f696d5fa3a42e1d2d7b76003d7cff5fc24be4dd05bbf303159d52457d2a9f93fd39fe2c1a7470e63deee22987362130043b35cc169c475e8"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1]}, 0x1108) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000100)='reno\x00', 0x5) 6.242766955s ago: executing program 3 (id=4159): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) listen(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5.296886458s ago: executing program 4 (id=4160): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c5, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./sys\x00', 0x1fb) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) 5.050344244s ago: executing program 8 (id=4161): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.679922164s ago: executing program 4 (id=4162): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4.654436804s ago: executing program 3 (id=4163): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x64, 0x39, 0x63, 0x65, 0x34, 0x64, 0x62, 0x35, 0x37, 0x64, 0x65, 0x39, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x8029}, 0x48, 0xfffffffffffffffc) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f1ff0f0900000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x40000, 0x4) r4 = syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000680)=@mmap={0x8, 0xb, 0x4, 0x4, 0x8000, {}, {0x5, 0x0, 0xc, 0x2, 0xf1, 0x7, "8f22a717"}, 0x5, 0x1, {}, 0x1}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r5, &(0x7f0000000100), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 4.604878486s ago: executing program 7 (id=4164): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000470001000800000095"], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x7}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001fe", @ANYRES32=r3], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x10c, 0x10, 0x281, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e23, @in=@loopback}}]}, 0x10c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r4}) 4.500951498s ago: executing program 4 (id=4165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = msgget$private(0x0, 0x5) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="dc0a9cd7427167e757c9bca68ba2c7caf8a271c7600799ac1e59ef6891209191da32723ab0918f", @ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="b816efeebf5a4da7d257c2dc9f33a8ce1b77834ecf96a3f737910ae86e578a469572ffdd145f7f16a4e6cd324e0a5c9fd72a224740cfddfe357d464986c49e6c65e1559ce2235abedd17d36e02be315f15e3a559dd0203f6a585ad9b54fad3e76dbfa7fa988925701a4bc6226e9c883fd5b61997bea228d53a6990927e6baf2f09b90510cf5ac71ce46a17ade81f972b866ebb2ce590fa2dc800dcd286a55df737f867425213"], 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000084002, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x5000) syz_clone3(&(0x7f00000000c0)={0x23811000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0xffffffffffffff97, {r4}}, 0x58) write$binfmt_aout(r4, 0x0, 0xffffffdb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) acct(&(0x7f0000000740)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00') setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000380)=0xfffffffc, 0x4) r9 = openat$cgroup_int(r7, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000100)="b967fd4ab0ed29ddc0c15be78db8f2284bfb7c825b", 0x15}], 0x1) mmap$xdp(&(0x7f0000541000/0x2000)=nil, 0x2000, 0x200000a, 0x100050, r4, 0x180000000) ioctl$VT_SETMODE(r7, 0x5602, &(0x7f0000000040)={0xf9, 0xfc, 0x0, 0x8001, 0x100}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r10, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.490980818s ago: executing program 7 (id=4166): socket(0x840000000002, 0x3, 0xff) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 3.656825939s ago: executing program 3 (id=4167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000d49427c2654120934bd8e76e9c5fe41a4ff0df28aef8ad81a4810d9b8184c3d5e2aa25817bcf5887459f1ca92de9f356e99f49ba0971e04a29d46c64281d45c6258a705e163584bb9d76cfa0"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x80, r5, 0x0, 0x7}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0xb}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=@newqdisc={0x250, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xd, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x60, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf5, 0x0, 0x101, 0x8001, 0x8, 0x5}, {0x0, 0x2, 0x2, 0x4, 0x4, 0x2081}, 0x6, 0x2004, 0x8bd}}, @TCA_TBF_RATE64={0xc, 0x4, 0x75b76c06d7ed6074}, @TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0xd, 0x7, 0x8, 0x100}, {0xff, 0x2, 0x7, 0x8, 0x6}, 0x4, 0x9, 0xd88}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_STAB={0x1bc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x2, 0xfffc, 0x2, 0x2, 0x7, 0xa, 0x8}}, {0x14, 0x2, [0xec00, 0x8, 0x11, 0x3, 0x6, 0x0, 0x4238, 0x401]}}, {{0x1c, 0x1, {0x7, 0x3, 0x1, 0x8, 0x0, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x6, 0xe, 0x4, 0x1, 0x1, 0x2, 0x2, 0x1}}, {0x42, 0x2, [0x3]}}, {{0x1c, 0x1, {0xa, 0x6, 0x4, 0x0, 0x0, 0x8001, 0x8, 0xb}}, {0x1a, 0x2, [0x0, 0x8, 0x8, 0x7, 0x1, 0x10, 0xfff, 0x6c, 0x690, 0xfff, 0x800]}}, {{0x1c, 0x1, {0x9, 0x0, 0x0, 0xdb, 0x0, 0x5ee, 0xffffffff, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0x3, 0x18, 0xb85, 0x0, 0xb981, 0xdc8, 0x6}}, {0x10, 0x2, [0x0, 0x2, 0x6, 0x6, 0x4, 0x6]}}, {{0x1c, 0x1, {0xff, 0x4, 0x4, 0x5, 0x2, 0x80000000, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x6, 0x81, 0xfcb, 0x0, 0x655, 0xc, 0xe}}, {0x20, 0x2, [0xe, 0x6, 0x400, 0x7, 0x5, 0x9, 0x4f0a, 0x8, 0xab3c, 0xe81, 0x3, 0x6, 0x3, 0x0]}}, {{0x1c, 0x1, {0x6, 0x60, 0x7, 0x6, 0x1, 0x4, 0x1, 0x8}}, {0x14, 0x2, [0x9, 0x9, 0x7, 0x8001, 0x9, 0x101, 0x4, 0x6]}}, {{0x1c, 0x1, {0x8, 0x2, 0x7, 0x4, 0x0, 0x5, 0x840, 0x6}}, {0x10, 0x2, [0x5, 0x2, 0x2, 0x0, 0x4a, 0x570a]}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01e723000000ffdbdf251500000024001d81"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 3.617909401s ago: executing program 4 (id=4168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 1.519452833s ago: executing program 7 (id=4169): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 1.478309263s ago: executing program 8 (id=4170): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c5, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./sys\x00', 0x1fb) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) 1.477870954s ago: executing program 4 (id=4171): epoll_create1(0x80000) socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.352990607s ago: executing program 3 (id=4172): socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 508.323288ms ago: executing program 8 (id=4173): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 300.811803ms ago: executing program 7 (id=4174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000470001000800000095"], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x7}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001fe", @ANYRES32=r3], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x10c, 0x10, 0x281, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e23, @in=@loopback}}]}, 0x10c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r4}) 225.221135ms ago: executing program 8 (id=4175): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) flock(r0, 0x5) 124.398417ms ago: executing program 7 (id=4176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = msgget$private(0x0, 0x5) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="dc0a9cd7427167e757c9bca68ba2c7caf8a271c7600799ac1e59ef6891209191da32723ab0918f", @ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="b816efeebf5a4da7d257c2dc9f33a8ce1b77834ecf96a3f737910ae86e578a469572ffdd145f7f16a4e6cd324e0a5c9fd72a224740cfddfe357d464986c49e6c65e1559ce2235abedd17d36e02be315f15e3a559dd0203f6a585ad9b54fad3e76dbfa7fa988925701a4bc6226e9c883fd5b61997bea228d53a6990927e6baf2f09b90510cf5ac71ce46a17ade81f972b866ebb2ce590fa2dc800dcd286a55df737f867425213"], 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000084002, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x5000) syz_clone3(&(0x7f00000000c0)={0x23811000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0xffffffffffffff97, {r4}}, 0x58) write$binfmt_aout(r4, 0x0, 0xffffffdb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) acct(&(0x7f0000000740)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00') setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000380)=0xfffffffc, 0x4) r9 = openat$cgroup_int(r7, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000100)="b967fd4ab0ed29ddc0c15be78db8f2284bfb7c825b", 0x15}], 0x1) mmap$xdp(&(0x7f0000541000/0x2000)=nil, 0x2000, 0x200000a, 0x100050, r4, 0x180000000) ioctl$VT_SETMODE(r7, 0x5602, &(0x7f0000000040)={0xf9, 0xfc, 0x0, 0x8001, 0x100}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r10, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 80.974278ms ago: executing program 3 (id=4177): socket(0x840000000002, 0x3, 0xff) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 30.64038ms ago: executing program 3 (id=4178): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001380)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 0s ago: executing program 8 (id=4179): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) kernel console output (not intermixed with test programs): am0 [ 854.632913][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.640158][T10410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.660958][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.668169][T10410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.803501][T13078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.017084][T13082] Bluetooth: hci1: command tx timeout [ 855.055096][T13146] loop4: detected capacity change from 0 to 128 [ 855.074169][T13146] EXT4-fs (loop4): Test dummy encryption mode enabled [ 855.091060][T13146] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 855.106020][T13146] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 855.368206][ T6759] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.394785][T13078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.560369][T13078] veth0_vlan: entered promiscuous mode [ 855.617167][T13078] veth1_vlan: entered promiscuous mode [ 855.690349][T13078] veth0_macvtap: entered promiscuous mode [ 855.710777][T13078] veth1_macvtap: entered promiscuous mode [ 855.751655][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.767108][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.781357][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.797290][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.813471][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.829124][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.856175][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.911417][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.937239][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.953766][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.969799][T13078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.510760][T13158] netlink: 'syz.0.2285': attribute type 3 has an invalid length. [ 856.631272][T13164] syzkaller0: entered promiscuous mode [ 856.636857][T13164] syzkaller0: entered allmulticast mode [ 856.656677][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.677476][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.714291][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.734820][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.754847][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.771619][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.788373][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.801306][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.815095][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.826490][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.847313][T13078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.927321][T13078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.946064][T13078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.092848][T13082] Bluetooth: hci1: command tx timeout [ 857.114873][T13078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.148860][T13078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.608049][T10410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.620381][T10410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.701889][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.745019][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.415195][T13194] netlink: 'syz.4.2293': attribute type 3 has an invalid length. [ 859.226867][T13082] Bluetooth: hci1: command tx timeout [ 860.322507][T13205] loop3: detected capacity change from 0 to 512 [ 860.435262][T13205] EXT4-fs (loop3): Test dummy encryption mode enabled [ 860.552194][T13205] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2296: inode has both inline data and extents flags [ 860.612488][T13205] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2296: couldn't read orphan inode 15 (err -117) [ 860.692421][T13205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.744885][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 860.795142][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 860.893803][T13078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.434086][T13224] netlink: 'syz.3.2302': attribute type 3 has an invalid length. [ 861.901987][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 861.963183][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 864.091863][T13264] overlay: Unknown parameter '/' [ 864.178023][T13265] 9pnet_fd: Insufficient options for proto=fd [ 864.292343][T13262] syzkaller0: entered promiscuous mode [ 864.375550][T13262] syzkaller0: entered allmulticast mode [ 864.972768][T13275] loop3: detected capacity change from 0 to 512 [ 865.028672][T13275] EXT4-fs (loop3): Test dummy encryption mode enabled [ 865.135275][T13275] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2319: inode has both inline data and extents flags [ 865.187242][T13275] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2319: couldn't read orphan inode 15 (err -117) [ 865.239116][T13275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.367953][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 865.415100][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 867.522633][T13078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.668585][T13295] overlay: Unknown parameter '/' [ 867.687721][T13296] loop4: detected capacity change from 0 to 512 [ 867.728482][T13297] overlayfs: failed to clone lowerpath [ 867.751334][T13296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 867.794390][T13296] System zones: 1-12 [ 867.798898][T13296] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2328: missing EA_INODE flag [ 867.895402][T13296] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2328: error while reading EA inode 12 err=-117 [ 867.959527][T13296] EXT4-fs (loop4): 1 orphan inode deleted [ 867.983095][T13296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.427745][T13306] 9pnet_fd: Insufficient options for proto=fd [ 868.969046][ T6759] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.033041][T13308] syzkaller0: entered promiscuous mode [ 869.180369][T13315] loop4: detected capacity change from 0 to 2048 [ 869.234082][T13308] syzkaller0: entered allmulticast mode [ 869.268831][T13315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.282052][T13315] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.128486][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.139286][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.817457][ T6759] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.409874][T13373] overlayfs: failed to clone lowerpath [ 873.838458][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2356'. [ 874.668509][T13395] ip_tables: iptables: counters copy to user failed while replacing table [ 876.106429][T13409] netlink: 'syz.4.2365': attribute type 10 has an invalid length. [ 876.853218][T13409] geneve0: entered promiscuous mode [ 878.019391][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.146979][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 878.159798][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 878.170129][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 878.179838][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.189957][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 878.197650][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.286503][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.768560][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.047625][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.116735][T13439] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2375'. [ 880.293881][ T5779] Bluetooth: hci3: command tx timeout [ 880.504033][T13463] 9pnet_fd: Insufficient options for proto=fd [ 881.317640][T13471] loop3: detected capacity change from 0 to 2048 [ 881.374400][T13430] chnl_net:caif_netlink_parms(): no params data found [ 881.599040][T13478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2384'. [ 881.746174][T13471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.814458][T13471] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.963557][T13430] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.970740][T13430] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.999144][T13430] bridge_slave_0: entered allmulticast mode [ 882.012723][T13430] bridge_slave_0: entered promiscuous mode [ 882.192741][T13430] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.215728][T13430] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.233642][T13430] bridge_slave_1: entered allmulticast mode [ 882.243391][ T5815] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 882.249457][T13430] bridge_slave_1: entered promiscuous mode [ 882.373565][ T5779] Bluetooth: hci3: command tx timeout [ 882.513200][T13430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.527467][T13430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.608041][T13496] syz.0.2386[13496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 882.609315][T13496] syz.0.2386[13496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 882.631532][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 883.049537][ T5815] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 883.259244][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.269287][ T5815] usb 4-1: Product: syz [ 883.274510][ T5815] usb 4-1: Manufacturer: syz [ 883.279129][ T5815] usb 4-1: SerialNumber: syz [ 883.294496][ T5815] usb 4-1: config 0 descriptor?? [ 883.302072][ T5815] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 884.366799][T13430] team0: Port device team_slave_0 added [ 884.417391][T13430] team0: Port device team_slave_1 added [ 884.443845][ T5779] Bluetooth: hci3: command tx timeout [ 884.619088][T13430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.642463][T13430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.722982][T13430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.770574][T13430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.787246][T13430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.830106][T13430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.918683][T13518] loop4: detected capacity change from 0 to 512 [ 884.957377][T13518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 884.988341][ T174] usb 4-1: USB disconnect, device number 30 [ 885.002549][T13518] System zones: 1-12 [ 885.068966][T13518] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2392: missing EA_INODE flag [ 885.107485][T13518] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2392: error while reading EA inode 12 err=-117 [ 885.171642][T13518] EXT4-fs (loop4): 1 orphan inode deleted [ 885.197886][T13518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.295547][T13078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.534481][T13523] 9pnet_fd: Insufficient options for proto=fd [ 885.902417][T13430] hsr_slave_0: entered promiscuous mode [ 885.922148][T13430] hsr_slave_1: entered promiscuous mode [ 885.939482][T13430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.949793][T13430] Cannot create hsr debugfs directory [ 886.049180][ T6759] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.119609][ T2134] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 886.456684][ T11] hsr_slave_0: left promiscuous mode [ 886.486942][ T11] hsr_slave_1: left promiscuous mode [ 886.503289][ T2134] usb 4-1: Using ep0 maxpacket: 16 [ 886.537906][T13540] syz.4.2394[13540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 886.539098][T13540] syz.4.2394[13540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 886.573133][ T2134] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.630483][ T5779] Bluetooth: hci3: command tx timeout [ 886.669201][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.734065][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.765884][ T2134] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.845519][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.932904][ T2134] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.985855][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.999839][ T11] bridge_slave_1: left allmulticast mode [ 887.005674][ T11] bridge_slave_1: left promiscuous mode [ 887.008645][ T2134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.014599][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.033158][ T2134] usb 4-1: Product: syz [ 887.037363][ T2134] usb 4-1: Manufacturer: syz [ 887.116726][ T11] bridge_slave_0: left allmulticast mode [ 887.122413][ T11] bridge_slave_0: left promiscuous mode [ 887.137480][ T2134] usb 4-1: SerialNumber: syz [ 887.149728][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.298069][ T11] veth1_macvtap: left promiscuous mode [ 887.318283][ T11] veth0_macvtap: left promiscuous mode [ 887.339926][ T11] veth1_vlan: left promiscuous mode [ 887.359172][ T2134] usb 4-1: 0:2 : does not exist [ 887.359809][ T11] veth0_vlan: left promiscuous mode [ 887.396865][ T2134] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 887.453677][ T2134] usb 4-1: USB disconnect, device number 31 [ 887.518618][T11385] udevd[11385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.904614][T13555] loop4: detected capacity change from 0 to 1024 [ 887.912023][T13555] EXT4-fs: Ignoring removed oldalloc option [ 887.919623][T13555] journal_path: Lookup failure for './file1' [ 887.925693][T13555] EXT4-fs: error: could not find journal device path [ 888.730347][ T11] team0 (unregistering): Port device team_slave_1 removed [ 889.333515][T11385] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 889.364417][ T11] team0 (unregistering): Port device team_slave_0 removed [ 889.537864][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.677941][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.686990][T13558] overlayfs: missing 'lowerdir' [ 889.801402][T13560] FAULT_INJECTION: forcing a failure. [ 889.801402][T13560] name failslab, interval 1, probability 0, space 0, times 0 [ 889.816891][T13560] CPU: 0 PID: 13560 Comm: syz.4.2400 Not tainted syzkaller #0 [ 889.824392][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 889.834460][T13560] Call Trace: [ 889.837739][T13560] [ 889.840670][T13560] dump_stack_lvl+0x18c/0x250 [ 889.845359][T13560] ? show_regs_print_info+0x20/0x20 [ 889.850560][T13560] ? load_image+0x420/0x420 [ 889.855063][T13560] ? __lock_acquire+0x7d80/0x7d80 [ 889.860085][T13560] ? lockdep_init_map_type+0x9c/0x8e0 [ 889.865461][T13560] should_fail_ex+0x394/0x4c0 [ 889.870147][T13560] should_failslab+0x9/0x20 [ 889.874653][T13560] slab_pre_alloc_hook+0x59/0x300 [ 889.879682][T13560] ? sbitmap_queue_init_node+0x24f/0x660 [ 889.885322][T13560] __kmem_cache_alloc_node+0x53/0x250 [ 889.890700][T13560] ? sbitmap_queue_init_node+0x24f/0x660 [ 889.896332][T13560] kmalloc_node_trace+0x26/0xe0 [ 889.901187][T13560] sbitmap_queue_init_node+0x24f/0x660 [ 889.906646][T13560] blk_mq_init_tags+0x116/0x280 [ 889.911499][T13560] blk_mq_alloc_map_and_rqs+0xc5/0x910 [ 889.916957][T13560] ? kasan_quarantine_put+0xd8/0x220 [ 889.922242][T13560] ? lockdep_hardirqs_on+0x98/0x150 [ 889.927453][T13560] blk_mq_alloc_set_map_and_rqs+0x1a0/0x800 [ 889.933365][T13560] blk_mq_alloc_tag_set+0x868/0x1020 [ 889.938672][T13560] loop_add+0x2eb/0x990 [ 889.942831][T13560] loop_control_ioctl+0x128/0x590 [ 889.947857][T13560] ? loop_set_hw_queue_depth+0x110/0x110 [ 889.953490][T13560] ? bpf_lsm_file_ioctl+0x9/0x10 [ 889.958424][T13560] ? security_file_ioctl+0x80/0xa0 [ 889.963537][T13560] ? loop_set_hw_queue_depth+0x110/0x110 [ 889.969171][T13560] __se_sys_ioctl+0xfd/0x170 [ 889.973762][T13560] do_syscall_64+0x55/0xb0 [ 889.978178][T13560] ? clear_bhb_loop+0x40/0x90 [ 889.982849][T13560] ? clear_bhb_loop+0x40/0x90 [ 889.987532][T13560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 889.993425][T13560] RIP: 0033:0x7fa32899e159 [ 889.997833][T13560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.017438][T13560] RSP: 002b:00007fa3297ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.025857][T13560] RAX: ffffffffffffffda RBX: 00007fa328c25fa0 RCX: 00007fa32899e159 [ 890.033837][T13560] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 890.041802][T13560] RBP: 00007fa328a35024 R08: 0000000000000000 R09: 0000000000000000 [ 890.049767][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.057733][T13560] R13: 00007fa328c26038 R14: 00007fa328c25fa0 R15: 00007ffdba4d41b8 [ 890.065717][T13560] [ 890.075762][T13560] blk-mq: reduced tag depth (128 -> 64) [ 890.191899][T13562] loop4: detected capacity change from 0 to 512 [ 890.227196][T13562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 890.236636][T13562] System zones: 1-12 [ 890.250688][T13562] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2401: missing EA_INODE flag [ 890.268647][T13562] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2401: error while reading EA inode 12 err=-117 [ 890.282038][T13562] EXT4-fs (loop4): 1 orphan inode deleted [ 890.296372][T13562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.552396][ T11] bond0 (unregistering): Released all slaves [ 890.647406][T13566] 9pnet_fd: Insufficient options for proto=fd [ 891.191842][ T6759] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.631480][T13571] syz.4.2402[13571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 891.631713][T13571] syz.4.2402[13571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 895.460292][T13597] overlayfs: failed to clone lowerpath [ 895.570759][T13598] overlayfs: missing 'lowerdir' [ 897.645561][T13430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 898.403611][T13430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 898.433203][T13430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 898.490544][T13430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 898.836179][T13635] loop3: detected capacity change from 0 to 1024 [ 898.843899][T13635] EXT4-fs: Ignoring removed oldalloc option [ 898.849852][T13635] journal_path: Lookup failure for './file1' [ 898.855933][T13635] EXT4-fs: error: could not find journal device path [ 900.521316][T11385] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 900.588620][T13430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.611392][T13640] overlayfs: missing 'lowerdir' [ 900.718740][T13430] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.737697][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.744925][ T9954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.848880][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.856090][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.233506][ T2134] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 902.452498][ T2134] usb 5-1: Using ep0 maxpacket: 16 [ 902.472593][ T2134] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.511140][T13430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.523244][ T2134] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 902.614583][ T2134] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 902.657865][ T2134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.707553][T13430] veth0_vlan: entered promiscuous mode [ 902.724318][ T2134] usb 5-1: Product: syz [ 902.742240][ T2134] usb 5-1: Manufacturer: syz [ 902.759092][ T2134] usb 5-1: SerialNumber: syz [ 902.796996][T13430] veth1_vlan: entered promiscuous mode [ 902.901209][T13430] veth0_macvtap: entered promiscuous mode [ 902.961091][T13430] veth1_macvtap: entered promiscuous mode [ 903.017189][ T2134] usb 5-1: 0:2 : does not exist [ 903.923506][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.935143][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.952776][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.985922][ T2134] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 904.002643][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.024168][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.050903][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.081916][ T2134] usb 5-1: USB disconnect, device number 30 [ 904.082131][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.125365][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.149425][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.170497][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.191162][T13430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.262464][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.302106][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.332477][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.352195][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.382200][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.402153][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.417943][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.429688][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.439964][T13430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.450864][T13430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.464968][T13430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.476500][T13430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.485766][T13430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.503085][T13430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.511867][T13430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.711011][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.748080][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.005160][T13689] overlay: Unknown parameter '/' [ 905.020183][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.039038][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.379682][T13703] loop4: detected capacity change from 0 to 1024 [ 906.387188][T13703] EXT4-fs: Ignoring removed oldalloc option [ 906.393251][T13703] journal_path: Lookup failure for './file1' [ 906.399275][T13703] EXT4-fs: error: could not find journal device path [ 906.608041][T11385] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 909.431755][T13734] overlay: Unknown parameter '/' [ 915.350623][T13757] fuse: Bad value for 'fd' [ 916.152360][T13763] loop3: detected capacity change from 0 to 1024 [ 916.159835][T13763] EXT4-fs: Ignoring removed oldalloc option [ 916.166046][T13763] journal_path: Lookup failure for './file1' [ 916.172118][T13763] EXT4-fs: error: could not find journal device path [ 916.379462][T11385] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 916.845456][T13775] overlay: Unknown parameter '/' [ 924.846332][T13082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 924.858030][T13082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 924.867699][T13082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 924.878443][T13082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 924.886341][T13082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 924.895973][T13082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 925.301227][ T1083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.569582][ T1083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.634567][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2453'. [ 925.968726][ T1083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.025695][T13838] loop3: detected capacity change from 0 to 1024 [ 926.033158][T13838] EXT4-fs: Ignoring removed oldalloc option [ 926.039126][T13838] journal_path: Lookup failure for './file1' [ 926.045252][T13838] EXT4-fs: error: could not find journal device path [ 926.364476][ T1083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.003309][T13082] Bluetooth: hci2: command tx timeout [ 927.686403][T13828] chnl_net:caif_netlink_parms(): no params data found [ 928.590925][T13828] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.809388][T13828] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.910808][T13082] Bluetooth: hci2: command tx timeout [ 929.920588][T13828] bridge_slave_0: entered allmulticast mode [ 929.951064][T13828] bridge_slave_0: entered promiscuous mode [ 930.060166][T13828] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.080872][T13828] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.088176][T13828] bridge_slave_1: entered allmulticast mode [ 930.112283][T13828] bridge_slave_1: entered promiscuous mode [ 930.313734][T13828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.442413][T13828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.561630][ T1083] bridge1: port 1(erspan0) entered disabled state [ 930.612278][ T1083] erspan0 (unregistering): left allmulticast mode [ 930.618744][ T1083] erspan0 (unregistering): left promiscuous mode [ 930.650713][ T1083] bridge1: port 1(erspan0) entered disabled state [ 930.799283][T13828] team0: Port device team_slave_0 added [ 930.884655][T13828] team0: Port device team_slave_1 added [ 931.111438][T13828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.131228][T13896] loop4: detected capacity change from 0 to 1024 [ 931.138778][T13896] EXT4-fs: Ignoring removed oldalloc option [ 931.144847][T13896] journal_path: Lookup failure for './file1' [ 931.150903][T13896] EXT4-fs: error: could not find journal device path [ 932.290567][T13082] Bluetooth: hci2: command tx timeout [ 932.355365][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.363742][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.370940][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.492614][T13828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.553052][T13828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.576210][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.611689][T13828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.765573][ T5814] IPVS: starting estimator thread 0... [ 932.890884][T13901] IPVS: using max 19 ests per chain, 45600 per kthread [ 933.261049][T13828] hsr_slave_0: entered promiscuous mode [ 933.311399][T13828] hsr_slave_1: entered promiscuous mode [ 933.358203][T13828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 933.376788][T13828] Cannot create hsr debugfs directory [ 934.374686][T13082] Bluetooth: hci2: command tx timeout [ 934.667096][ T1083] hsr_slave_0: left promiscuous mode [ 934.755267][ T1083] hsr_slave_1: left promiscuous mode [ 934.781063][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.807092][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.830265][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.861214][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.911116][ T1083] bridge_slave_1: left allmulticast mode [ 934.937238][ T1083] bridge_slave_1: left promiscuous mode [ 934.957561][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.013008][ T1083] bridge_slave_0: left allmulticast mode [ 935.030419][ T1083] bridge_slave_0: left promiscuous mode [ 935.036284][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.233473][ T1083] veth1_macvtap: left promiscuous mode [ 935.239064][ T1083] veth0_macvtap: left promiscuous mode [ 935.307159][ T1083] veth1_vlan: left promiscuous mode [ 935.370593][ T1083] veth0_vlan: left promiscuous mode [ 942.142466][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 942.312983][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 942.490544][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.130383][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.901452][ T1083] bond0 (unregistering): Released all slaves [ 946.190923][T13991] loop3: detected capacity change from 0 to 256 [ 946.205401][T13991] FAT-fs (loop3): Unrecognized mount option "rų¶°" or missing value [ 950.504432][T13828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 950.572804][T13828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 950.607476][T13828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 950.645485][T13828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 950.925255][T13828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.972959][T13828] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.004106][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.011282][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.107988][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.115143][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.930496][T13828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.145565][T13828] veth0_vlan: entered promiscuous mode [ 952.220812][T13828] veth1_vlan: entered promiscuous mode [ 952.236508][T14061] loop4: detected capacity change from 0 to 256 [ 952.283216][T14061] FAT-fs (loop4): Unrecognized mount option "rų¶°" or missing value [ 952.357931][T13828] veth0_macvtap: entered promiscuous mode [ 952.437988][T13828] veth1_macvtap: entered promiscuous mode [ 952.533176][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.336534][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.382948][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.429445][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.459558][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.495831][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.521630][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.549393][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.579559][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.610781][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.661028][T13828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.758687][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.798034][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.671628][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.704176][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.714760][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.735602][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.749134][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.768719][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.778621][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.794331][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.807288][T13828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.851849][T13828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.878691][T13828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.887562][T13828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.900495][T13828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.074990][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.116661][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.276846][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.534485][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.264681][T14110] loop4: detected capacity change from 0 to 256 [ 960.323652][T14110] FAT-fs (loop4): Unrecognized mount option "rų¶°" or missing value [ 964.842749][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 964.859924][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 964.870609][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 964.883949][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 964.895107][ T5779] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 964.902660][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 965.475070][T14149] chnl_net:caif_netlink_parms(): no params data found [ 965.746950][T14149] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.764938][T14149] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.796974][T14149] bridge_slave_0: entered allmulticast mode [ 965.811321][T14149] bridge_slave_0: entered promiscuous mode [ 965.827027][T14149] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.863914][T14149] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.896633][T14149] bridge_slave_1: entered allmulticast mode [ 965.946685][T14149] bridge_slave_1: entered promiscuous mode [ 966.099026][T14149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.150463][T14149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.277453][T14149] team0: Port device team_slave_0 added [ 966.301456][T14149] team0: Port device team_slave_1 added [ 966.414619][T14149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.425869][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.001109][ T5779] Bluetooth: hci5: command tx timeout [ 967.121592][T14149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.466558][T14149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.499054][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.408683][ T5779] Bluetooth: hci5: command tx timeout [ 969.415019][T14149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.741472][T14149] hsr_slave_0: entered promiscuous mode [ 969.858800][T14149] hsr_slave_1: entered promiscuous mode [ 969.863552][T14190] syz.3.2516 (14190) used greatest stack depth: 17288 bytes left [ 969.888547][T14149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.897405][T14149] Cannot create hsr debugfs directory [ 971.324198][T14149] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 971.385160][T14149] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 971.468100][T14149] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 971.478734][ T5779] Bluetooth: hci5: command tx timeout [ 971.488955][T14149] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 971.667466][T14149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.770672][T14149] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.868946][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.876149][ T9954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.992857][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.000030][ T9954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.373969][T12751] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.487201][T14229] fuse: Bad value for 'fd' [ 972.598718][T12751] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.655214][T14149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 972.813117][T12751] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.632042][T14237] fuse: Bad value for 'fd' [ 973.688936][ T5779] Bluetooth: hci5: command tx timeout [ 973.843925][T12751] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.813990][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 975.139885][T14149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.520442][T14149] veth0_vlan: entered promiscuous mode [ 977.563883][T14149] veth1_vlan: entered promiscuous mode [ 977.836661][T14149] veth0_macvtap: entered promiscuous mode [ 977.866099][T14149] veth1_macvtap: entered promiscuous mode [ 978.056685][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.074881][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.088864][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.099868][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.110410][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.121272][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.131548][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.162315][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.202646][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.266282][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.284811][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.307627][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.320274][T14149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.379715][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.444916][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.986089][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.066709][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.197963][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.238058][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.272055][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.296900][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.326607][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.354539][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.381926][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.413030][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.468812][T14149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.123356][T14149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.137160][T14149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.155208][T14149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.164034][T14149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.302103][T12751] hsr_slave_0: left promiscuous mode [ 980.339864][T12751] hsr_slave_1: left promiscuous mode [ 980.399663][T12751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.417293][T12751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.450572][T12751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.466389][T12751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.491385][T12751] bridge_slave_1: left allmulticast mode [ 980.504464][T12751] bridge_slave_1: left promiscuous mode [ 980.517760][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.299526][T12751] bridge_slave_0: left allmulticast mode [ 981.318063][T12751] bridge_slave_0: left promiscuous mode [ 981.324325][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.433252][T12751] veth1_macvtap: left promiscuous mode [ 981.458174][T12751] veth0_macvtap: left promiscuous mode [ 981.465622][T12751] veth1_vlan: left promiscuous mode [ 981.478438][T12751] veth0_vlan: left promiscuous mode [ 982.637547][T12751] team0 (unregistering): Port device team_slave_1 removed [ 982.694784][T12751] team0 (unregistering): Port device team_slave_0 removed [ 982.741034][T12751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.809684][T12751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.876640][T14339] loop4: detected capacity change from 0 to 256 [ 982.888131][T14339] FAT-fs (loop4): Unrecognized mount option "rų¶°" or missing value [ 985.104381][T12751] bond0 (unregistering): Released all slaves [ 985.571466][T14365] fuse: Bad value for 'user_id' [ 985.618687][ T9954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.626565][ T9954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.802176][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.816004][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.113710][T14385] loop5: detected capacity change from 0 to 256 [ 987.138846][T14385] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 987.209608][T11385] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 988.596147][T14406] fuse: Bad value for 'fd' [ 992.639473][T14431] loop5: detected capacity change from 0 to 256 [ 992.677810][T14431] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 993.007347][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.013950][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.447888][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 997.458689][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 997.478971][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 997.508975][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 997.536977][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 997.553136][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 997.586265][T14471] loop5: detected capacity change from 0 to 512 [ 997.615945][T14471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 997.626416][T14471] System zones: 1-12 [ 997.650222][T14471] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2573: missing EA_INODE flag [ 997.663605][T14471] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2573: error while reading EA inode 12 err=-117 [ 998.531233][T14471] EXT4-fs (loop5): 1 orphan inode deleted [ 998.565620][T14471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.027358][T14485] fuse: Bad value for 'fd' [ 999.447697][T14149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.582744][T14466] chnl_net:caif_netlink_parms(): no params data found [ 999.637666][ T5779] Bluetooth: hci3: command tx timeout [ 1000.845046][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.903433][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.936501][T14466] bridge_slave_0: entered allmulticast mode [ 1000.994889][T14466] bridge_slave_0: entered promiscuous mode [ 1002.598080][ T5779] Bluetooth: hci3: command tx timeout [ 1002.604194][T14519] loop5: detected capacity change from 0 to 256 [ 1002.637101][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.663386][T14519] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1002.742486][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.786726][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.793983][T14466] bridge_slave_1: entered allmulticast mode [ 1002.844363][T14466] bridge_slave_1: entered promiscuous mode [ 1003.077911][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.485390][T14466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.170751][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.265393][T14466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.453106][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.618423][T14466] team0: Port device team_slave_0 added [ 1004.686605][ T5779] Bluetooth: hci3: command tx timeout [ 1004.694589][T14466] team0: Port device team_slave_1 added [ 1004.970798][T14466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.012004][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.177626][T14466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.231036][T14466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.306718][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.554469][T14466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.592393][T14536] fuse: Bad value for 'fd' [ 1006.853958][T14547] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1007.811573][T14466] hsr_slave_0: entered promiscuous mode [ 1007.817606][ T5779] Bluetooth: hci3: command tx timeout [ 1007.994628][T14466] hsr_slave_1: entered promiscuous mode [ 1008.957500][T14466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1008.965108][T14466] Cannot create hsr debugfs directory [ 1009.971071][T14566] syzkaller0: entered promiscuous mode [ 1010.005193][T14566] syzkaller0: entered allmulticast mode [ 1011.708129][T14584] loop5: detected capacity change from 0 to 256 [ 1011.722266][T14584] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1012.459704][T14590] fuse: Bad value for 'fd' [ 1012.745217][T14466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1012.840892][T14466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1013.701530][T14466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1013.766981][T14466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1015.203163][ T12] hsr_slave_0: left promiscuous mode [ 1015.309643][ T12] hsr_slave_1: left promiscuous mode [ 1015.350078][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.408577][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.443851][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.465961][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.074837][ T12] bridge_slave_1: left allmulticast mode [ 1016.096079][ T12] bridge_slave_1: left promiscuous mode [ 1016.101857][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.241853][ T12] bridge_slave_0: left allmulticast mode [ 1016.285902][ T12] bridge_slave_0: left promiscuous mode [ 1016.326053][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.617942][ T12] veth1_macvtap: left promiscuous mode [ 1016.623543][ T12] veth0_macvtap: left promiscuous mode [ 1016.670165][ T12] veth1_vlan: left promiscuous mode [ 1016.675518][ T12] veth0_vlan: left promiscuous mode [ 1017.224753][T14634] fuse: Bad value for 'fd' [ 1018.264106][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1018.474683][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1020.459183][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.527493][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.078810][ T12] bond0 (unregistering): Released all slaves [ 1021.518039][T14466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.561566][T14466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.949400][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.956616][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.984251][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.991448][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.170660][T14466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1023.236661][T14466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.323417][T14677] fuse: Bad value for 'fd' [ 1025.033457][T14466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.620061][T14717] syzkaller0: entered promiscuous mode [ 1025.625625][T14717] syzkaller0: entered allmulticast mode [ 1026.896801][T14727] fuse: Invalid rootmode [ 1028.243520][T14466] veth0_vlan: entered promiscuous mode [ 1028.673023][T14466] veth1_vlan: entered promiscuous mode [ 1030.293420][T14466] veth0_macvtap: entered promiscuous mode [ 1031.050285][T14466] veth1_macvtap: entered promiscuous mode [ 1031.157990][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.217924][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.229387][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.239916][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.249994][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.264317][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.274393][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.285105][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.295063][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.305660][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.339492][T14466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.394378][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.495600][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.554006][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.595410][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.641724][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.682045][T14765] syz.5.2624[14765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.682282][T14765] syz.5.2624[14765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.692937][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.740990][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.751526][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.761377][T14466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.775354][T14466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.794160][T14466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.823392][T14466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.865078][T14466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.873798][T14466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.954413][T14466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.169217][T14772] fuse: Invalid rootmode [ 1032.276870][T14774] loop5: detected capacity change from 0 to 256 [ 1032.300048][T14774] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1032.339275][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.377140][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.693512][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.744933][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.440350][T14810] fuse: Invalid rootmode [ 1039.531797][T14840] syz.4.2634[14840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1039.532046][T14840] syz.4.2634[14840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1040.169961][T14834] fuse: Bad value for 'fd' [ 1041.573917][T14862] fuse: Bad value for 'rootmode' [ 1042.223742][T14881] syz.5.2649[14881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1042.223987][T14881] syz.5.2649[14881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1043.584665][T14889] fuse: Bad value for 'fd' [ 1044.018490][T14895] loop5: detected capacity change from 0 to 256 [ 1044.035924][T14895] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1044.116106][T14670] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1044.964603][T14910] fuse: Bad value for 'rootmode' [ 1046.695367][T14934] syz.0.2660[14934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1046.695602][T14934] syz.0.2660[14934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.894769][T14952] fuse: Bad value for 'rootmode' [ 1050.006645][T14969] syz.3.2670[14969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1050.006873][T14969] syz.3.2670[14969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1050.740012][T14988] loop5: detected capacity change from 0 to 256 [ 1050.790265][T14988] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1051.489161][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 1051.743486][T15003] fuse: Unknown parameter 'use00000000000000000000' [ 1053.760690][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2681'. [ 1054.439414][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.448492][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.647992][T15057] fuse: Unknown parameter 'use00000000000000000000' [ 1058.166815][T15105] fuse: Unknown parameter 'use00000000000000000000' [ 1085.783390][T15348] x_tables: duplicate underflow at hook 2 [ 1088.209426][T13082] Bluetooth: hci5: command 0x0406 tx timeout [ 1088.440366][T15381] x_tables: duplicate underflow at hook 2 [ 1094.687778][T15432] x_tables: duplicate underflow at hook 2 [ 1105.401203][T15499] fuse: Bad value for 'fd' [ 1106.881103][T15510] fuse: Bad value for 'fd' [ 1107.481211][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1108.000992][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1108.036376][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.099452][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.214749][ T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1108.384628][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.405225][ T23] usb 6-1: Product: syz [ 1108.409440][ T23] usb 6-1: Manufacturer: syz [ 1108.426323][ T23] usb 6-1: SerialNumber: syz [ 1110.117424][ T23] usb 6-1: 0:2 : does not exist [ 1111.874823][ T23] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1112.091222][ T23] usb 6-1: USB disconnect, device number 2 [ 1112.187337][T15464] udevd[15464]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.051840][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 1113.086974][T15551] x_tables: duplicate underflow at hook 2 [ 1115.198585][T15570] fuse: Bad value for 'fd' [ 1116.171978][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.178324][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.436406][T15586] x_tables: duplicate underflow at hook 2 [ 1117.549985][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2804'. [ 1119.405220][T15600] fuse: Bad value for 'fd' [ 1122.519777][T15624] x_tables: duplicate underflow at hook 2 [ 1123.592676][T13082] Bluetooth: hci3: command 0x0406 tx timeout [ 1128.264203][T15654] x_tables: duplicate underflow at hook 2 [ 1132.114650][T15677] fuse: Bad value for 'fd' [ 1133.974620][T15690] x_tables: duplicate underflow at hook 2 [ 1137.859444][T15709] fuse: Bad value for 'fd' [ 1142.726209][T15739] loop5: detected capacity change from 0 to 256 [ 1142.733804][T15739] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1142.782456][T15740] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1143.837403][T15755] fuse: Unknown parameter 'user_id00000000000000000000' [ 1146.758254][T15782] fuse: Unknown parameter 'user_id00000000000000000000' [ 1151.700972][T15814] fuse: Unknown parameter 'user_id00000000000000000000' [ 1152.555859][T15820] syz.5.2871[15820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.556945][T15820] syz.5.2871[15820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.953985][T15826] fuse: Bad value for 'fd' [ 1154.196914][T15841] fuse: Bad value for 'fd' [ 1155.231474][T15854] syz.0.2882[15854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1155.231709][T15854] syz.0.2882[15854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1157.102098][T15868] loop5: detected capacity change from 0 to 256 [ 1157.149504][T15868] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1157.398441][T15872] fuse: Bad value for 'fd' [ 1158.807991][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2895'. [ 1159.971268][T15907] fuse: Bad value for 'fd' [ 1160.337571][T15913] syz.0.2901[15913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.349797][T15913] syz.0.2901[15913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1161.533251][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1162.583074][T15936] fuse: Unknown parameter '0x0000000000000003' [ 1163.694459][T15945] syz.0.2912[15945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1163.694696][T15945] syz.0.2912[15945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1164.238921][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 1165.296856][T15970] fuse: Unknown parameter '0x0000000000000003' [ 1167.468405][T15989] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2927'. [ 1168.435132][T15998] fuse: Unknown parameter '0x0000000000000003' [ 1168.905505][T16014] syz.5.2932[16014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1168.905738][T16014] syz.5.2932[16014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1170.445403][T16021] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2937'. [ 1174.247489][T16038] fuse: Unknown parameter '0x0000000000000003' [ 1175.405257][T16067] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2948'. [ 1176.397327][T16077] fuse: Unknown parameter '0x0000000000000003' [ 1177.314839][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.321406][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.662285][T16094] syz.4.2954[16094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1177.662514][T16094] syz.4.2954[16094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.836846][T16113] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2961'. [ 1181.759533][T16138] loop5: detected capacity change from 0 to 256 [ 1181.772045][T16138] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1181.779948][T16139] syz.4.2965[16139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.780350][T16139] syz.4.2965[16139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1183.309786][T16154] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2973'. [ 1183.832669][T16156] syzkaller0: entered promiscuous mode [ 1183.881491][T16156] syzkaller0: entered allmulticast mode [ 1186.758897][T16181] syz.5.2978[16181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1186.759129][T16181] syz.5.2978[16181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.907044][T16189] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2984'. [ 1190.296380][ T5848] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1190.508306][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 1190.520250][ T5848] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.547124][ T5848] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1190.570500][ T5848] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1190.588145][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.606097][ T5848] usb 6-1: Product: syz [ 1190.623195][ T5848] usb 6-1: Manufacturer: syz [ 1190.640830][ T5848] usb 6-1: SerialNumber: syz [ 1190.924546][ T5848] usb 6-1: 0:2 : does not exist [ 1190.968037][ T5848] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1191.055593][ T5848] usb 6-1: USB disconnect, device number 3 [ 1191.115870][T16213] udevd[16213]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1191.719629][T16229] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2995'. [ 1191.728824][T16229] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2995'. [ 1196.042438][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3005'. [ 1196.051593][T16262] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3005'. [ 1197.000176][T16268] loop5: detected capacity change from 0 to 256 [ 1197.136540][T16268] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1199.857291][T16298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1200.335586][T16298] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1206.972424][T16349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3027'. [ 1206.981584][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3027'. [ 1208.002273][T16372] loop5: detected capacity change from 0 to 256 [ 1208.213843][T16372] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1210.078992][T16390] syzkaller0: entered promiscuous mode [ 1210.084658][T16390] syzkaller0: entered allmulticast mode [ 1210.221655][T16395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3038'. [ 1210.230931][T16395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3038'. [ 1215.733082][T16432] loop5: detected capacity change from 0 to 256 [ 1215.751902][T16432] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1222.078823][T16481] loop5: detected capacity change from 0 to 256 [ 1222.102064][T16481] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1238.766149][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.789454][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.414968][T16614] loop5: detected capacity change from 0 to 256 [ 1239.423205][T16614] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 1243.383453][T16623] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1248.921995][T16685] syz.5.3112[16685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1248.923167][T16685] syz.5.3112[16685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1253.524005][T16717] syz.0.3123[16717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1253.537695][T16717] syz.0.3123[16717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1257.096550][T16749] ip6tnl1: entered allmulticast mode [ 1257.202955][ T2134] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1257.213049][ T9954] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1257.221241][ T9954] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1257.252516][T11992] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1257.644679][T16753] syz.0.3133[16753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1257.645870][T16753] syz.0.3133[16753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1257.958514][ T2134] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1261.062325][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1262.283844][T16787] syz.5.3142[16787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1262.284090][T16787] syz.5.3142[16787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1268.821888][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1271.264211][T16843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3158'. [ 1271.698531][T16844] syz.4.3155[16844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1271.704691][T16844] syz.4.3155[16844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1275.840367][T16879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3167'. [ 1282.081796][T13082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1282.092631][T13082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1282.111198][T13082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1282.119235][T13082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1282.126761][T13082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1282.133943][T13082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1282.221607][T16923] syz.4.3172[16923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1282.221836][T16923] syz.4.3172[16923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1283.266700][T16919] chnl_net:caif_netlink_parms(): no params data found [ 1283.923642][T16919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.949414][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.001095][T16919] bridge_slave_0: entered allmulticast mode [ 1284.008460][T16919] bridge_slave_0: entered promiscuous mode [ 1284.082000][T16919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.101456][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.108673][T16919] bridge_slave_1: entered allmulticast mode [ 1284.280939][T13082] Bluetooth: hci4: command tx timeout [ 1284.292377][T16919] bridge_slave_1: entered promiscuous mode [ 1284.821256][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1285.122925][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.243313][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.053157][T13082] Bluetooth: hci4: command tx timeout [ 1287.587473][T16951] overlayfs: failed to clone upperpath [ 1287.658530][T16919] team0: Port device team_slave_0 added [ 1287.681162][T16919] team0: Port device team_slave_1 added [ 1287.723838][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.745553][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.880909][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.000756][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.030886][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.283243][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.386911][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 1289.060666][T13082] Bluetooth: hci4: command tx timeout [ 1289.384650][T16919] hsr_slave_0: entered promiscuous mode [ 1289.439371][T16919] hsr_slave_1: entered promiscuous mode [ 1289.511543][T16919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.578668][T16919] Cannot create hsr debugfs directory [ 1289.872959][T16971] syz.3.3184[16971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1289.873191][T16971] syz.3.3184[16971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1291.140591][T13082] Bluetooth: hci4: command tx timeout [ 1291.990236][T16919] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1293.111173][T16919] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1293.269330][T16919] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1293.495940][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 1293.887780][T16919] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1294.551183][T16919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.589885][T16919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.616284][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.623446][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.693188][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.700376][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.980031][T16919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.262534][T17022] syz.4.3195[17022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1296.262770][T17022] syz.4.3195[17022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1300.237679][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.255938][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.374047][T16919] veth0_vlan: entered promiscuous mode [ 1300.685548][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.816428][T16919] veth1_vlan: entered promiscuous mode [ 1301.092951][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.277762][T16919] veth0_macvtap: entered promiscuous mode [ 1301.451486][T16919] veth1_macvtap: entered promiscuous mode [ 1302.318692][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.521896][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.580109][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.636440][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.674289][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.699901][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.749827][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.810672][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.849972][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.869009][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.914550][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.944933][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.109790][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.132674][T16919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.263290][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.414860][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.428757][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.438990][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.449693][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.459631][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.470858][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.481804][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.492788][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.532382][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.544798][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.555042][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.565852][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.577652][T16919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.591811][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 1303.616738][T16919] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.626125][T16919] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.678997][T16919] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.995913][T16919] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.681720][T10388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.709897][T10388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.503226][T10388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.555410][T10388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.742050][T17076] syz.3.3204[17076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1305.742287][T17076] syz.3.3204[17076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1308.869402][T13082] Bluetooth: Frame is too long (len 71, expected len 4) [ 1311.225642][T17147] warning: `syz.4.3220' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1313.642998][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1313.656021][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1313.701930][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1313.716218][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1313.726599][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1313.745833][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1315.790657][ T5779] Bluetooth: hci2: command tx timeout [ 1317.949332][ T5779] Bluetooth: hci2: command tx timeout [ 1318.513730][ T12] hsr_slave_0: left promiscuous mode [ 1318.667212][ T12] hsr_slave_1: left promiscuous mode [ 1318.719686][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.736551][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.749803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.758396][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.806331][ T27] audit: type=1800 audit(1788398974.913:525): pid=17206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3235" name="alua_access_type" dev="configfs" ino=48392 res=0 errno=0 [ 1318.809413][T17206] Unable to extract alua_access_type [ 1318.836372][ T12] bridge_slave_1: left allmulticast mode [ 1318.941634][ T12] bridge_slave_1: left promiscuous mode [ 1318.947408][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.054403][ T12] bridge_slave_0: left allmulticast mode [ 1319.082252][ T12] bridge_slave_0: left promiscuous mode [ 1319.094942][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.912949][ T12] veth1_macvtap: left promiscuous mode [ 1319.918764][ T12] veth0_macvtap: left promiscuous mode [ 1319.932872][ T12] veth1_vlan: left promiscuous mode [ 1319.938852][ T12] veth0_vlan: left promiscuous mode [ 1320.789973][ T5779] Bluetooth: hci2: command tx timeout [ 1322.554429][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1322.605113][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1322.658030][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.706170][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.818901][ T5779] Bluetooth: hci2: command tx timeout [ 1323.073825][ T12] bond0 (unregistering): Released all slaves [ 1323.510484][T17161] chnl_net:caif_netlink_parms(): no params data found [ 1323.711348][T17253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3243'. [ 1323.748857][T17255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3243'. [ 1325.842003][T17161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.888990][T17161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.896229][T17161] bridge_slave_0: entered allmulticast mode [ 1325.930361][T17161] bridge_slave_0: entered promiscuous mode [ 1325.970249][T17161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.977386][T17161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.008728][T17161] bridge_slave_1: entered allmulticast mode [ 1326.016043][T17161] bridge_slave_1: entered promiscuous mode [ 1326.150347][T17161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.191530][T17161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.338305][T17282] loop6: detected capacity change from 0 to 256 [ 1326.348327][T17161] team0: Port device team_slave_0 added [ 1326.379885][T17282] FAT-fs (loop6): Unrecognized mount option "rų¶°" or missing value [ 1326.768680][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.380106][T17161] team0: Port device team_slave_1 added [ 1327.697218][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.816764][T17161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.539637][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.717122][T17161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.753303][T17161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.761532][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.791865][T17161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.862391][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.306649][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.463731][T17161] hsr_slave_0: entered promiscuous mode [ 1331.498737][T17161] hsr_slave_1: entered promiscuous mode [ 1331.519481][T17161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1331.527062][T17161] Cannot create hsr debugfs directory [ 1332.588650][T17161] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1332.635275][T17161] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1332.849123][T17161] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1332.909984][T17161] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1333.858612][T17161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.041718][T17161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.143977][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.151195][T12751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.152862][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.160095][T12751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.252540][ T12] hsr_slave_0: left promiscuous mode [ 1335.299720][ T12] hsr_slave_1: left promiscuous mode [ 1335.395678][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.428172][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.464599][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.507162][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.568895][ T12] bridge_slave_1: left allmulticast mode [ 1335.574579][ T12] bridge_slave_1: left promiscuous mode [ 1335.618224][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.696883][ T12] bridge_slave_0: left allmulticast mode [ 1335.727985][ T12] bridge_slave_0: left promiscuous mode [ 1335.751759][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.863310][ T12] veth1_macvtap: left promiscuous mode [ 1335.878115][ T12] veth0_macvtap: left promiscuous mode [ 1335.914185][ T12] veth1_vlan: left promiscuous mode [ 1335.934364][ T12] veth0_vlan: left promiscuous mode [ 1339.073502][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1339.221833][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1339.308995][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.361934][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.997452][ T12] bond0 (unregistering): Released all slaves [ 1340.395007][T17161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1340.467556][T17161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1342.178579][T17161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.744975][T17462] x_tables: duplicate underflow at hook 2 [ 1346.119718][T17469] Bluetooth: MGMT ver 1.22 [ 1346.242479][T17161] veth0_vlan: entered promiscuous mode [ 1346.301898][T17161] veth1_vlan: entered promiscuous mode [ 1346.567731][T17161] veth0_macvtap: entered promiscuous mode [ 1347.205765][T17161] veth1_macvtap: entered promiscuous mode [ 1347.418694][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.526664][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.749069][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.081265][T17484] loop6: detected capacity change from 0 to 256 [ 1348.113959][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.128589][T17484] FAT-fs (loop6): Unrecognized mount option "rų¶°" or missing value [ 1348.149149][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.170191][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.182403][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.251109][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.297305][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.357390][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.404780][T17161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.420790][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.438004][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.467495][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.486421][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.496395][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.508357][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.525475][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.540902][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.587906][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.612345][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.626592][T17161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.696489][T17161] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.764066][T17161] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.824261][T17161] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.844408][T17161] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.664815][T17502] x_tables: duplicate underflow at hook 2 [ 1350.439281][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.634400][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.975958][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.125025][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.038580][T17535] syz.7.3215[17535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1352.038812][T17535] syz.7.3215[17535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1354.135210][T17555] x_tables: duplicate underflow at hook 2 [ 1359.077136][T17599] x_tables: duplicate underflow at hook 2 [ 1361.112253][T17626] syz.6.3316[17626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.112495][T17626] syz.6.3316[17626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.662040][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.706822][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.855617][T17646] x_tables: duplicate underflow at hook 2 [ 1365.766952][T17678] loop6: detected capacity change from 0 to 256 [ 1365.788287][T17678] FAT-fs (loop6): Unrecognized mount option "rų¶°" or missing value [ 1367.566420][T17695] x_tables: duplicate underflow at hook 2 [ 1371.321549][T17753] syzkaller0: entered promiscuous mode [ 1371.330147][T17753] syzkaller0: entered allmulticast mode [ 1372.440090][T17765] x_tables: duplicate underflow at hook 2 [ 1379.742181][T17834] loop7: detected capacity change from 0 to 256 [ 1379.777164][T17834] FAT-fs (loop7): Unrecognized mount option "rų¶°" or missing value [ 1382.356347][T17850] x_tables: duplicate underflow at hook 2 [ 1383.675579][T17853] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1387.107672][T13082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1387.165227][T13082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1387.183099][T13082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1387.196682][T13082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1387.204224][T13082] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1387.211688][T13082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1389.296852][T13082] Bluetooth: hci5: command tx timeout [ 1389.610963][T10388] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.514579][T10388] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.360909][T10388] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.375096][T13082] Bluetooth: hci5: command tx timeout [ 1393.030664][T10388] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.178901][T17886] chnl_net:caif_netlink_parms(): no params data found [ 1393.454879][T13082] Bluetooth: hci5: command tx timeout [ 1393.651602][T17886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.697270][T17886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.744439][T17886] bridge_slave_0: entered allmulticast mode [ 1393.785723][T17886] bridge_slave_0: entered promiscuous mode [ 1393.826867][T17886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.037103][T17886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.044498][T17886] bridge_slave_1: entered allmulticast mode [ 1394.095277][T17886] bridge_slave_1: entered promiscuous mode [ 1394.434224][T17886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.637163][T17886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.808001][T17886] team0: Port device team_slave_0 added [ 1395.668401][ T5779] Bluetooth: hci5: command tx timeout [ 1395.809403][T17886] team0: Port device team_slave_1 added [ 1397.305348][T17886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.336640][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.361006][T17886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.525193][T17886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.535352][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.636572][T17886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.878140][T17886] hsr_slave_0: entered promiscuous mode [ 1398.923864][T17886] hsr_slave_1: entered promiscuous mode [ 1398.984714][T17886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1398.992309][T17886] Cannot create hsr debugfs directory [ 1404.294601][T17886] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1404.321657][T17886] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1404.348289][T17886] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1404.476618][T17886] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1404.553275][T10388] hsr_slave_0: left promiscuous mode [ 1404.572875][T10388] hsr_slave_1: left promiscuous mode [ 1404.579709][T10388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.594335][T10388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.614873][T10388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.622298][T10388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.674306][T10388] bridge_slave_1: left allmulticast mode [ 1404.694107][T10388] bridge_slave_1: left promiscuous mode [ 1404.699862][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.793939][T10388] bridge_slave_0: left allmulticast mode [ 1404.817318][T10388] bridge_slave_0: left promiscuous mode [ 1404.823074][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.958967][T10388] veth1_macvtap: left promiscuous mode [ 1404.974256][T10388] veth0_macvtap: left promiscuous mode [ 1404.979925][T10388] veth1_vlan: left promiscuous mode [ 1404.994256][T10388] veth0_vlan: left promiscuous mode [ 1407.993965][T18045] fuse: Bad value for 'fd' [ 1408.869306][T10388] team0 (unregistering): Port device team_slave_1 removed [ 1410.134554][T10388] team0 (unregistering): Port device team_slave_0 removed [ 1410.271377][T10388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1410.421790][T10388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.975222][T10388] bond0 (unregistering): Released all slaves [ 1414.785745][T17886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.926380][T17886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.029823][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.037019][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.111418][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.118626][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.957862][T17886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.095570][T17886] veth0_vlan: entered promiscuous mode [ 1421.171248][T17886] veth1_vlan: entered promiscuous mode [ 1421.450080][T17886] veth0_macvtap: entered promiscuous mode [ 1421.500170][T17886] veth1_macvtap: entered promiscuous mode [ 1421.817926][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.828601][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.838646][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.849170][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.865549][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.885077][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.912261][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.927006][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.940958][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.953491][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.044430][T17886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.292233][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.382803][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.411700][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.430441][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.453116][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.473256][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.485590][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.506856][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.519316][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.550294][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.632968][T17886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.474838][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.481456][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.492309][T17886] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.523147][T17886] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.670927][T17886] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.689908][T17886] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.112599][T10001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.173891][T10001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.483630][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.509571][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.803771][T18263] tipc: Started in network mode [ 1428.823123][T18263] tipc: Node identity ac1414aa, cluster identity 4711 [ 1428.848839][T18263] tipc: New replicast peer: 172.20.20.187 [ 1428.879258][T18263] tipc: Enabled bearer , priority 10 [ 1429.897671][ T5814] tipc: Node number set to 2886997162 [ 1430.617666][T18303] syz.3.3453[18303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1430.617910][T18303] syz.3.3453[18303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1436.532111][T18352] syz.4.3464[18352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1436.544310][T18352] syz.4.3464[18352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1441.823941][T13082] Bluetooth: hci2: command 0x0406 tx timeout [ 1442.461368][T18413] syz.7.3474[18413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1442.461608][T18413] syz.7.3474[18413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1446.327840][T18472] syz.3.3484[18472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1446.341369][T18472] syz.3.3484[18472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1446.381498][T18473] fuse: Bad value for 'fd' [ 1453.502800][T18518] syz.4.3494[18518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1453.503035][T18518] syz.4.3494[18518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1458.072029][T18565] syz.3.3504[18565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1458.083763][T18565] syz.3.3504[18565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1465.018854][T18610] syz.8.3514[18610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1465.030991][T18610] syz.8.3514[18610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1472.415065][T18661] syz.4.3525[18661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1472.426813][T18661] syz.4.3525[18661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1479.300104][T18718] syz.7.3535[18718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1479.312734][T18718] syz.7.3535[18718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1484.495938][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.514905][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.686570][T18816] syz.3.3545[18816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1488.686805][T18816] syz.3.3545[18816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1493.476678][T18864] syzkaller0: entered promiscuous mode [ 1493.482332][T18864] syzkaller0: entered allmulticast mode [ 1499.153871][T18910] syz.7.3559[18910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1499.154100][T18910] syz.7.3559[18910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1501.042520][T18932] loop7: detected capacity change from 0 to 256 [ 1501.147433][T18932] FAT-fs (loop7): Unrecognized mount option "rų¶°" or missing value [ 1509.885878][T19009] loop7: detected capacity change from 0 to 256 [ 1510.004152][T19009] FAT-fs (loop7): Unrecognized mount option "rų¶°" or missing value [ 1512.405342][ T5779] Bluetooth: hci5: command 0x0406 tx timeout [ 1520.067323][T19083] loop8: detected capacity change from 0 to 512 [ 1520.171855][T19083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1520.226684][T19083] System zones: 1-12 [ 1520.288954][T19083] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #12: comm syz.8.3594: missing EA_INODE flag [ 1520.338531][T19083] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.3594: error while reading EA inode 12 err=-117 [ 1520.383730][T19083] EXT4-fs (loop8): 1 orphan inode deleted [ 1520.405368][T19083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.163436][T17886] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.662315][T19121] loop8: detected capacity change from 0 to 256 [ 1523.738652][T19121] FAT-fs (loop8): Unrecognized mount option "rų¶°" or missing value [ 1537.274357][T19241] loop8: detected capacity change from 0 to 256 [ 1537.348576][T19241] FAT-fs (loop8): Unrecognized mount option "rų¶°" or missing value [ 1545.933553][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.939972][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.853273][T19424] block nbd8: shutting down sockets [ 1561.738034][T19470] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1566.241064][ T27] audit: type=1800 audit(1788399222.367:526): pid=19519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3664" name="alua_access_type" dev="configfs" ino=54503 res=0 errno=0 [ 1567.894377][T19540] syz.8.3666[19540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1567.894606][T19540] syz.8.3666[19540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1573.552804][T19595] syz.4.3676[19595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1573.564531][T19595] syz.4.3676[19595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.343325][T19654] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1581.522824][T19676] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1587.672670][T19764] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1593.544141][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3722'. [ 1593.553092][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3722'. [ 1593.562417][T19823] netlink: 'syz.8.3722': attribute type 14 has an invalid length. [ 1593.570338][T19823] netlink: 'syz.8.3722': attribute type 12 has an invalid length. [ 1596.033452][T19832] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1603.703131][T19903] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1608.052077][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.072871][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1622.852011][T20005] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1627.531858][T13082] Bluetooth: hci5: unexpected event for opcode 0x041b [ 1629.617805][T20053] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1632.952103][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3777'. [ 1637.771319][T20110] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1646.303098][T20200] loop8: detected capacity change from 0 to 256 [ 1646.373224][T20200] FAT-fs (loop8): Unrecognized mount option "rų¶°" or missing value [ 1649.213655][T20217] ubi0: attaching mtd0 [ 1649.222355][T20217] ubi0: scanning is finished [ 1649.227016][T20217] ubi0: empty MTD device detected [ 1649.266716][T20217] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1649.274351][T20217] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1649.283701][T20217] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1649.290860][T20217] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1649.298249][T20217] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1649.305111][T20217] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1649.313187][T20217] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3760631716 [ 1649.323265][T20217] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1649.335326][T20221] ubi0: background thread "ubi_bgt0d" started, PID 20221 [ 1655.675267][T20269] loop7: detected capacity change from 0 to 256 [ 1655.701593][T20269] FAT-fs (loop7): Unrecognized mount option "rų¶°" or missing value [ 1655.791677][T20130] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1657.199540][T20292] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1660.357389][ T27] audit: type=1800 audit(1788399316.483:527): pid=20315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3840" name="alua_access_type" dev="configfs" ino=56448 res=0 errno=0 [ 1660.379527][T20315] Unable to extract alua_access_type [ 1663.193541][T20332] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 1668.276084][T20380] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3856'. [ 1668.806256][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.841683][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.003899][T20385] loop7: detected capacity change from 0 to 256 [ 1669.020639][T20385] FAT-fs (loop7): Unrecognized mount option "rų¶°" or missing value [ 1669.084482][T20273] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1670.840354][T18189] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1671.044165][T18189] usb 9-1: device descriptor read/64, error -71 [ 1671.574385][T18189] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1671.889520][T18189] usb 9-1: device descriptor read/64, error -71 [ 1672.069882][T18189] usb usb9-port1: attempt power cycle [ 1672.250823][T20424] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3866'. [ 1672.933712][T18189] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1672.989785][T18189] usb 9-1: device descriptor read/8, error -71 [ 1674.410011][T18189] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1675.609799][T18189] usb 9-1: device descriptor read/8, error -71 [ 1675.769450][T18189] usb usb9-port1: unable to enumerate USB device [ 1676.251880][T20457] loop8: detected capacity change from 0 to 256 [ 1676.280107][T20457] FAT-fs (loop8): Unrecognized mount option "rų¶°" or missing value [ 1677.093630][T20462] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3876'. [ 1680.293417][T20501] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3888'. [ 1681.978916][T20515] block nbd8: shutting down sockets [ 1683.543823][T20537] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3899'. [ 1684.878774][T20551] block nbd7: shutting down sockets [ 1689.019431][T20605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3921'. [ 1689.092414][ T27] audit: type=1800 audit(1788399345.224:528): pid=20608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3925" name="alua_access_type" dev="configfs" ino=57513 res=0 errno=0 [ 1689.125720][T20608] Unable to extract alua_access_type [ 1690.485263][ T27] audit: type=1800 audit(1788399346.594:529): pid=20619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3927" name="alua_access_type" dev="configfs" ino=56918 res=0 errno=0 [ 1691.716875][T20629] loop7: detected capacity change from 0 to 256 [ 1691.747512][T20629] FAT-fs (loop7): Unrecognized mount option "rų¶°" or missing value [ 1695.087143][T20672] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3941'. [ 1696.965411][ T27] audit: type=1800 audit(1788399353.095:530): pid=20686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3945" name="alua_access_type" dev="configfs" ino=57587 res=0 errno=0 [ 1699.037087][T20706] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3950'. [ 1699.980929][T20714] Unable to extract alua_access_type [ 1699.987944][ T27] audit: type=1800 audit(1788399356.115:531): pid=20714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3954" name="alua_access_type" dev="configfs" ino=57117 res=0 errno=0 [ 1702.382808][T20736] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3962'. [ 1702.731328][T20731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3960'. [ 1703.123925][T20731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1703.471399][T20751] Unable to extract alua_access_type [ 1703.472508][ T27] audit: type=1800 audit(1788399359.605:532): pid=20751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3966" name="alua_access_type" dev="configfs" ino=57690 res=0 errno=0 [ 1703.983674][T20766] block nbd7: shutting down sockets [ 1704.141080][T20770] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3971'. [ 1705.652376][ T27] audit: type=1800 audit(1788399361.785:533): pid=20787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3978" name="alua_access_type" dev="configfs" ino=57729 res=0 errno=0 [ 1705.655748][T20787] Unable to extract alua_access_type [ 1706.284262][T20804] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3982'. [ 1707.235828][ T27] audit: type=1800 audit(1788399363.365:534): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3985" name="alua_access_type" dev="configfs" ino=57290 res=0 errno=0 [ 1707.257514][T20807] Unable to extract alua_access_type [ 1709.770012][T20836] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3993'. [ 1710.575901][ T27] audit: type=1800 audit(1788399366.705:535): pid=20842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3995" name="alua_access_type" dev="configfs" ino=58405 res=0 errno=0 [ 1710.607149][T20842] Unable to extract alua_access_type [ 1712.477112][T11992] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1712.727062][T11992] usb 9-1: Using ep0 maxpacket: 16 [ 1712.752363][T11992] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.816019][T11992] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1712.889634][T11992] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1712.939726][T11992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.971281][T11992] usb 9-1: Product: syz [ 1712.975611][T11992] usb 9-1: Manufacturer: syz [ 1712.980956][T11992] usb 9-1: SerialNumber: syz [ 1713.194938][T11992] usb 9-1: 0:2 : does not exist [ 1713.217734][T11992] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1713.278487][T11992] usb 9-1: USB disconnect, device number 6 [ 1713.433506][T20685] udevd[20685]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1719.379401][ T27] audit: type=1800 audit(1788399375.516:536): pid=20944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4023" name="alua_access_type" dev="configfs" ino=58603 res=0 errno=0 [ 1723.921653][ T27] audit: type=1800 audit(1788399380.056:537): pid=20994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4035" name="alua_access_type" dev="configfs" ino=58657 res=0 errno=0 [ 1728.876528][ T27] audit: type=1800 audit(1788399385.006:538): pid=21034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4045" name="alua_access_type" dev="configfs" ino=58703 res=0 errno=0 [ 1730.258532][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.265057][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.866868][ T27] audit: type=1800 audit(1788399390.007:539): pid=21074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4054" name="alua_access_type" dev="configfs" ino=58021 res=0 errno=0 [ 1739.523254][ T27] audit: type=1326 audit(1788399395.657:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.605426][ T27] audit: type=1326 audit(1788399395.657:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.644048][ T27] audit: type=1326 audit(1788399395.687:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.673119][ T27] audit: type=1326 audit(1788399395.697:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.699937][ T27] audit: type=1326 audit(1788399395.707:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.724567][ T27] audit: type=1326 audit(1788399395.707:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.780968][ T27] audit: type=1326 audit(1788399395.707:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.879417][ T27] audit: type=1326 audit(1788399395.707:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.913846][ T27] audit: type=1326 audit(1788399395.707:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1739.938574][ T27] audit: type=1326 audit(1788399395.707:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21112 comm="syz.3.4069" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5b9ed9e159 code=0x7ffc0000 [ 1755.614195][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 1755.614209][ T27] audit: type=1800 audit(1788399411.748:560): pid=21251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4094" name="alua_access_type" dev="configfs" ino=58982 res=0 errno=0 [ 1755.897577][T21260] tipc: Enabling of bearer rejected, failed to enable media [ 1759.680913][T21295] loop8: detected capacity change from 0 to 32768 [ 1768.570379][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4139'. [ 1770.669967][ T27] audit: type=1800 audit(1788399426.799:561): pid=21406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4143" name="alua_access_type" dev="configfs" ino=59110 res=0 errno=0 [ 1772.959369][ T27] audit: type=1800 audit(1788399429.099:562): pid=21433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4154" name="alua_access_type" dev="configfs" ino=59152 res=0 errno=0 [ 1776.143468][ T5814] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1776.299798][ T27] audit: type=1800 audit(1788399432.439:563): pid=21466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4164" name="alua_access_type" dev="configfs" ino=59567 res=0 errno=0 [ 1776.348783][ T27] audit: type=1326 audit(1788399432.479:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21468 comm="syz.3.4163" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b9ed9e159 code=0x0 [ 1776.465177][ T5814] usb 9-1: config 0 has no interfaces? [ 1776.474935][ T5814] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1776.484130][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.492189][ T5814] usb 9-1: Product: syz [ 1776.502082][ T5814] usb 9-1: Manufacturer: syz [ 1776.506839][ T5814] usb 9-1: SerialNumber: syz [ 1776.513222][ T5814] usb 9-1: config 0 descriptor?? [ 1776.741274][ T174] usb 9-1: USB disconnect, device number 7 [ 1779.874123][T21495] SET target dimension over the limit! [ 1780.608542][ T27] audit: type=1800 audit(1788399436.749:565): pid=21501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4174" name="alua_access_type" dev="configfs" ino=59243 res=0 errno=0 [ 1780.973790][T21513] [ 1780.976158][T21513] ====================================================== [ 1780.983180][T21513] WARNING: possible circular locking dependency detected [ 1780.990214][T21513] syzkaller #0 Not tainted [ 1780.994644][T21513] ------------------------------------------------------ [ 1781.001668][T21513] syz.8.4179/21513 is trying to acquire lock: [ 1781.007734][T21513] ffff8880200564d0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 1781.019260][T21513] [ 1781.019260][T21513] but task is already holding lock: [ 1781.026624][T21513] ffff88805d385920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1781.035756][T21513] [ 1781.035756][T21513] which lock already depends on the new lock. [ 1781.035756][T21513] [ 1781.046149][T21513] [ 1781.046149][T21513] the existing dependency chain (in reverse order) is: [ 1781.055153][T21513] [ 1781.055153][T21513] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1781.062790][T21513] __mutex_lock+0x135/0xc80 [ 1781.067866][T21513] tcm_set_name+0x2a/0x90 [ 1781.072713][T21513] function_make+0x199/0x350 [ 1781.077814][T21513] configfs_mkdir+0x515/0x9e0 [ 1781.083007][T21513] vfs_mkdir+0x2a5/0x470 [ 1781.087768][T21513] do_mkdirat+0x1dc/0x450 [ 1781.092611][T21513] __x64_sys_mkdir+0x6e/0x80 [ 1781.097713][T21513] do_syscall_64+0x55/0xb0 [ 1781.102653][T21513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1781.109059][T21513] [ 1781.109059][T21513] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1781.117306][T21513] __mutex_lock+0x135/0xc80 [ 1781.122326][T21513] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1781.129047][T21513] configfs_symlink+0x5a5/0xfe0 [ 1781.134411][T21513] vfs_symlink+0x138/0x2b0 [ 1781.139354][T21513] do_symlinkat+0x1ba/0x400 [ 1781.144368][T21513] __x64_sys_symlinkat+0x99/0xb0 [ 1781.149817][T21513] do_syscall_64+0x55/0xb0 [ 1781.154752][T21513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1781.161157][T21513] [ 1781.161157][T21513] -> #0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}: [ 1781.169845][T21513] __lock_acquire+0x37ef/0x7d80 [ 1781.175219][T21513] lock_acquire+0x19e/0x420 [ 1781.180236][T21513] down_write+0x97/0x200 [ 1781.184997][T21513] configfs_depend_item_unlocked+0x157/0x430 [ 1781.191488][T21513] usbg_make_tpg+0x1f7/0x580 [ 1781.196593][T21513] target_fabric_make_tpg+0xa4/0x6d0 [ 1781.202392][T21513] configfs_mkdir+0x515/0x9e0 [ 1781.207581][T21513] vfs_mkdir+0x2a5/0x470 [ 1781.212340][T21513] do_mkdirat+0x1dc/0x450 [ 1781.217182][T21513] __x64_sys_mkdir+0x6e/0x80 [ 1781.222284][T21513] do_syscall_64+0x55/0xb0 [ 1781.227214][T21513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1781.233618][T21513] [ 1781.233618][T21513] other info that might help us debug this: [ 1781.233618][T21513] [ 1781.243833][T21513] Chain exists of: [ 1781.243833][T21513] &sb->s_type->i_mutex_key#27 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1781.243833][T21513] [ 1781.258517][T21513] Possible unsafe locking scenario: [ 1781.258517][T21513] [ 1781.265955][T21513] CPU0 CPU1 [ 1781.271309][T21513] ---- ---- [ 1781.276660][T21513] lock(&opts->dep_lock); [ 1781.281066][T21513] lock(gadget_subsys.su_mutex); [ 1781.288598][T21513] lock(&opts->dep_lock); [ 1781.295527][T21513] lock(&sb->s_type->i_mutex_key#27); [ 1781.300979][T21513] [ 1781.300979][T21513] *** DEADLOCK *** [ 1781.300979][T21513] [ 1781.309110][T21513] 5 locks held by syz.8.4179/21513: [ 1781.314293][T21513] #0: ffff88801830c418 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1781.323529][T21513] #1: ffff88804cfab910 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 1781.334320][T21513] #2: ffffffff8db2b470 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 1781.344061][T21513] #3: ffffffff8de58e48 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 1781.353721][T21513] #4: ffff88805d385920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1781.363202][T21513] [ 1781.363202][T21513] stack backtrace: [ 1781.369077][T21513] CPU: 0 PID: 21513 Comm: syz.8.4179 Not tainted syzkaller #0 [ 1781.376527][T21513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1781.386573][T21513] Call Trace: [ 1781.389843][T21513] [ 1781.392769][T21513] dump_stack_lvl+0x18c/0x250 [ 1781.397445][T21513] ? load_image+0x420/0x420 [ 1781.401938][T21513] ? show_regs_print_info+0x20/0x20 [ 1781.407132][T21513] ? print_circular_bug+0x12b/0x1a0 [ 1781.412330][T21513] check_noncircular+0x2fc/0x400 [ 1781.417261][T21513] ? print_deadlock_bug+0x5d0/0x5d0 [ 1781.422451][T21513] ? lockdep_lock+0xf5/0x230 [ 1781.427031][T21513] ? __lock_acquire+0x357f/0x7d80 [ 1781.432047][T21513] ? _find_first_zero_bit+0xd6/0x100 [ 1781.437338][T21513] __lock_acquire+0x37ef/0x7d80 [ 1781.442196][T21513] ? is_bpf_text_address+0x28f/0x2a0 [ 1781.447475][T21513] ? verify_lock_unused+0x140/0x140 [ 1781.452672][T21513] lock_acquire+0x19e/0x420 [ 1781.457174][T21513] ? configfs_depend_item_unlocked+0x157/0x430 [ 1781.463324][T21513] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1781.469479][T21513] ? __might_sleep+0xe0/0xe0 [ 1781.474062][T21513] ? rcu_is_watching+0x15/0xb0 [ 1781.478825][T21513] ? read_lock_is_recursive+0x20/0x20 [ 1781.484190][T21513] ? trace_contention_end+0x39/0xe0 [ 1781.489379][T21513] ? __mutex_lock+0x30d/0xc80 [ 1781.494054][T21513] ? do_syscall_64+0x55/0xb0 [ 1781.498639][T21513] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1781.504705][T21513] down_write+0x97/0x200 [ 1781.508943][T21513] ? configfs_depend_item_unlocked+0x157/0x430 [ 1781.515093][T21513] ? down_read_killable+0x340/0x340 [ 1781.520291][T21513] configfs_depend_item_unlocked+0x157/0x430 [ 1781.526266][T21513] usbg_make_tpg+0x1f7/0x580 [ 1781.530858][T21513] ? usbg_drop_tport+0x20/0x20 [ 1781.535617][T21513] ? vscnprintf+0x80/0x80 [ 1781.539959][T21513] target_fabric_make_tpg+0xa4/0x6d0 [ 1781.545239][T21513] ? target_fabric_release_wwn+0xb0/0xb0 [ 1781.550865][T21513] configfs_mkdir+0x515/0x9e0 [ 1781.555540][T21513] vfs_mkdir+0x2a5/0x470 [ 1781.559776][T21513] do_mkdirat+0x1dc/0x450 [ 1781.564096][T21513] ? vfs_mkdir+0x470/0x470 [ 1781.568512][T21513] ? getname_flags+0x20a/0x500 [ 1781.573298][T21513] __x64_sys_mkdir+0x6e/0x80 [ 1781.577881][T21513] do_syscall_64+0x55/0xb0 [ 1781.582292][T21513] ? clear_bhb_loop+0x40/0x90 [ 1781.586964][T21513] ? clear_bhb_loop+0x40/0x90 [ 1781.591637][T21513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1781.597533][T21513] RIP: 0033:0x7fe51a79e159 [ 1781.601939][T21513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.621534][T21513] RSP: 002b:00007fe51b674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1781.629939][T21513] RAX: ffffffffffffffda RBX: 00007fe51aa25fa0 RCX: 00007fe51a79e159 [ 1781.637901][T21513] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 1781.645863][T21513] RBP: 00007fe51a835024 R08: 0000000000000000 R09: 0000000000000000 [ 1781.653825][T21513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1781.661879][T21513] R13: 00007fe51aa26038 R14: 00007fe51aa25fa0 R15: 00007ffd674010b8 [ 1781.669846][T21513]