last executing test programs: 9.066385107s ago: executing program 2 (id=710): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000040000000000000000635426f29309", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.872036025s ago: executing program 2 (id=713): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) 8.454086371s ago: executing program 3 (id=714): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x20000000000000fa, &(0x7f0000000080)=ANY=[@ANYBLOB="6a0a00ff00000000711090000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9292, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000000500)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) sendfile(r4, r5, &(0x7f0000000000)=0x5, 0x20001) 7.763299206s ago: executing program 2 (id=716): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x5) 6.850215824s ago: executing program 3 (id=718): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept(r0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x6}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80000002}, 0x0, 0x0) 6.798855759s ago: executing program 1 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000880) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/202, 0xca}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/137, 0x89}, {&(0x7f0000001500)=""/152, 0x98}, {&(0x7f00000015c0)=""/186, 0xba}], 0x7}, 0x7f}], 0x4, 0x4022, 0x0) 6.662917495s ago: executing program 5 (id=721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x4e20, 0x4, @private0, 0xff}}}, 0x84) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f83a00", 0x2}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0xfffffffffffffe27}], 0x1}}], 0x2, 0x4048010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) 6.519435479s ago: executing program 4 (id=722): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 6.230212931s ago: executing program 4 (id=723): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x5, 0x40422, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x0) shutdown(0xffffffffffffffff, 0x1) socket(0x2b, 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x800, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 5.798088917s ago: executing program 0 (id=724): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002200)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sched_kthread_work_queue_work\x00', r0, 0x0, 0x1}, 0x2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x46042, &(0x7f0000000680), 0x7, 0x4ce, &(0x7f0000001d00)="$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") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x73, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e1e, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x20}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) 5.656291146s ago: executing program 3 (id=725): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000040000000000000000635426f29309", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.580900419s ago: executing program 2 (id=726): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) write$cgroup_int(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) 5.476775655s ago: executing program 5 (id=727): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') creat(&(0x7f0000000100)='./bus\x00', 0x44) 5.418366648s ago: executing program 1 (id=728): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xe, @local}, 0x1c) 5.365556737s ago: executing program 3 (id=729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x20a4ff, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) 3.223326646s ago: executing program 0 (id=730): bpf$PROG_LOAD(0x5, 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x15249cda8521b178}, {0x2, 0xfffe, 0x1000}], 0x2) semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x8, 0x2203f8eff1bdd5}], 0x1, &(0x7f0000000200)) 2.307957154s ago: executing program 3 (id=731): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f0000000ac0)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}]}, 0xfe, 0x27a, &(0x7f0000001180)="$eJzs3T9oa1UcB/DfzR9r2qBVF0H8AyKihVI3waUuCgUpRURQoSLiJK1QW9waJxcHnVUKgksRN6ujuBQXRXCq2qEugpY3vPKG94Y8bm7ySNu0zWv+ldzPB0Luzfndc05u+j0pgZsEkFvTETEfEcWImImIckQk7QVPZLfp5u5WZXc5ol5/9VrSqMv2M63jpiKiFhHPR5RabRs7bx7c2Hv56U/Xy099s/NGZVjPr93hwf4rR18tfvL9wnMbv/3x32IS81FttrU/j35KOjxWSiIeHMRgV0RS6rKwOOCJcK6lj777M30JHoqIJxv5L0ehGdnP1u75uRzPfnnWsZ////sjw5wr0H/1ejl9D6zVgdwpREQ1ksJsRGTbhcLsbPY//F/FycL7q2sfzry3ur7ybqMZuKqqUe++NNl/6ceJH6ZO5P/fYpZ/YHxVI/ZfW9r+O90+8jkMjK/2T9sfze7S/M+8vflMyD/kjvxDfsk/5Jf8wxi4ZHblH/Krl/zfO6A5AcPh/R/Gz/2tjXJro9axTv4hv+QfxtTXna46PU7+Ib/a8w8A5Et9YtRXIAOjMur1BwAAAAAAAAAAAAAAAAAAOG2rsrvcup1Xd/E3i3Xvly8iDl+MiFKn8YvNHxzPvm188nqSlh2bR6nH8d96vMcOevRt366+rlzqqPv+6df4l/PrY4Pp9+Pju2eenM2ViFpaPFcqnf77S3r+wfsHLmgvv9PjAOd2fvqhk9l94fUBjt+FW9ujHX9hL+KndP2Za64/6Qm68/oX4uHGfef1p9r5FN+VD2722AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDczsAAP//SJRtPw==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000780)={0x0, 0x3, 0x7, 0x2c7c, 0x2, 0x0, [{0x7e1, 0x3, 0xa024}, {0x2, 0xffffffffffffffff, 0x7, '\x00', 0x1300}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2.304991289s ago: executing program 2 (id=732): r0 = syz_open_procfs(0x0, &(0x7f0000001780)='attr/exec\x00') r1 = fanotify_init(0x2, 0x0) fanotify_mark(r1, 0x1, 0x40000011, r0, 0x0) readv(r0, 0x0, 0x0) 2.302903633s ago: executing program 4 (id=733): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.20223126s ago: executing program 1 (id=734): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) r2 = accept$netrom(r1, 0x0, 0x0) writev(r2, &(0x7f00000008c0)=[{&(0x7f00000000c0)="abf43165", 0x4}], 0x1) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.126504465s ago: executing program 0 (id=735): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4f8e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0xf6, 0x8}, {0x9, 0x5, 0x7fff, 0x7}}}}, 0x15) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 2.083574177s ago: executing program 5 (id=736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x1c, r3, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 1.880398941s ago: executing program 4 (id=737): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept(r0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x6}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80000002}, 0x0, 0x0) 1.642279994s ago: executing program 5 (id=738): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 1.450221229s ago: executing program 0 (id=739): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.403572779s ago: executing program 5 (id=740): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x4e20, 0x4, @private0, 0xff}}}, 0x84) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f83a00", 0x2}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0xfffffffffffffe27}], 0x1}}], 0x2, 0x4048010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) 1.186879219s ago: executing program 0 (id=741): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000040000000000000000635426f29309", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 998.175322ms ago: executing program 1 (id=742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002200)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sched_kthread_work_queue_work\x00', r0, 0x0, 0x1}, 0x2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x46042, &(0x7f0000000680), 0x7, 0x4ce, &(0x7f0000001d00)="$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") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x73, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e1e, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x20}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) 626.309918ms ago: executing program 4 (id=743): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 463.094014ms ago: executing program 1 (id=744): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001080)=[{&(0x7f0000000e80)=""/156, 0x9c}], 0x1, 0x2, 0x6) 409.200051ms ago: executing program 4 (id=745): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 379.295146ms ago: executing program 5 (id=746): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6de, &(0x7f0000000180)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xbfe2a6) write$cgroup_freezer_state(r0, &(0x7f0000000c00)='THAWED\x00', 0x7) 338.846499ms ago: executing program 0 (id=747): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000640)='./file0\x00', 0x200000, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x5e2, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) socket$igmp(0x2, 0x3, 0x2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830"], 0x20}}, 0x800) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 176.329392ms ago: executing program 1 (id=748): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="6401005800e1ffff02f91f03b80e5e76f1be29c4cf2bf82596167652b2333f660f09fb628b372b155cd897eb23aea3eecd70b3b72751c8a7", @ANYRES16=0x0, @ANYBLOB="bd0e2dbd7000fcdbdf250a000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000"], 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x40088d1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x2000000) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0xd1a, 0x8000000000000000, 0x3, 0x2, 0x81, 0x2]}, &(0x7f0000000300)=0x78) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") 41.58276ms ago: executing program 2 (id=749): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=750): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x1c, r3, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 91.179491][ T5815] cgroup: Unknown subsys name 'net' [ 91.295715][ T5815] cgroup: Unknown subsys name 'cpuset' [ 91.305334][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.882526][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.937807][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.945888][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.961612][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.011588][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.022043][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.067001][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.074846][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.082484][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.092105][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.101760][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.140409][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.150684][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.159712][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.167904][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.175455][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.183455][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.191082][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.227361][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.229579][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.235569][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.242212][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.249621][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.255883][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.270720][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.278477][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.372850][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.391568][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.399155][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.407246][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.415155][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.947711][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 97.066242][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 97.296423][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 97.316860][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.324147][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.331659][ T5827] bridge_slave_0: entered allmulticast mode [ 97.339084][ T5827] bridge_slave_0: entered promiscuous mode [ 97.439416][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.446631][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.453999][ T5827] bridge_slave_1: entered allmulticast mode [ 97.462438][ T5827] bridge_slave_1: entered promiscuous mode [ 97.572136][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.579326][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.586945][ T5834] bridge_slave_0: entered allmulticast mode [ 97.594826][ T5834] bridge_slave_0: entered promiscuous mode [ 97.603243][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.610380][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.617617][ T5834] bridge_slave_1: entered allmulticast mode [ 97.625434][ T5834] bridge_slave_1: entered promiscuous mode [ 97.679746][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.708657][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 97.720159][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 97.747335][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.858922][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.866330][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.874083][ T5832] bridge_slave_0: entered allmulticast mode [ 97.881857][ T5832] bridge_slave_0: entered promiscuous mode [ 97.892812][ T5827] team0: Port device team_slave_0 added [ 97.902278][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.952767][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 97.965676][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.973138][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.980357][ T5832] bridge_slave_1: entered allmulticast mode [ 97.988463][ T5832] bridge_slave_1: entered promiscuous mode [ 97.997062][ T5827] team0: Port device team_slave_1 added [ 98.020937][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.102129][ T5838] Bluetooth: hci0: command tx timeout [ 98.127223][ T5834] team0: Port device team_slave_0 added [ 98.179331][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.181484][ T5838] Bluetooth: hci1: command tx timeout [ 98.192163][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.218224][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.233589][ T5834] team0: Port device team_slave_1 added [ 98.240221][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.247448][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.273631][ T5838] Bluetooth: hci2: command tx timeout [ 98.279415][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.346669][ T5838] Bluetooth: hci3: command tx timeout [ 98.346677][ T5830] Bluetooth: hci4: command tx timeout [ 98.375578][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.388839][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.444139][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.451559][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.458827][ T5837] bridge_slave_0: entered allmulticast mode [ 98.467151][ T5837] bridge_slave_0: entered promiscuous mode [ 98.476020][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.483239][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.490770][ T5837] bridge_slave_1: entered allmulticast mode [ 98.499200][ T5837] bridge_slave_1: entered promiscuous mode [ 98.505541][ T5838] Bluetooth: hci5: command tx timeout [ 98.545535][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.552639][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.579570][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.599870][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.607281][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.614692][ T5831] bridge_slave_0: entered allmulticast mode [ 98.622811][ T5831] bridge_slave_0: entered promiscuous mode [ 98.684521][ T5832] team0: Port device team_slave_0 added [ 98.692623][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.699585][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.726129][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.756144][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.763570][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.770722][ T5831] bridge_slave_1: entered allmulticast mode [ 98.779304][ T5831] bridge_slave_1: entered promiscuous mode [ 98.789005][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.829268][ T5832] team0: Port device team_slave_1 added [ 98.892548][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.923666][ T5827] hsr_slave_0: entered promiscuous mode [ 98.930173][ T5827] hsr_slave_1: entered promiscuous mode [ 99.015713][ T5837] team0: Port device team_slave_0 added [ 99.054039][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.061018][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.087240][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.106877][ T5834] hsr_slave_0: entered promiscuous mode [ 99.113569][ T5834] hsr_slave_1: entered promiscuous mode [ 99.119797][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.127546][ T5834] Cannot create hsr debugfs directory [ 99.141186][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.148761][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.157235][ T5844] bridge_slave_0: entered allmulticast mode [ 99.165294][ T5844] bridge_slave_0: entered promiscuous mode [ 99.176048][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.187223][ T5837] team0: Port device team_slave_1 added [ 99.216751][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.224090][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.250556][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.270744][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.278085][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.285406][ T5844] bridge_slave_1: entered allmulticast mode [ 99.293293][ T5844] bridge_slave_1: entered promiscuous mode [ 99.303762][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.392133][ T1206] cfg80211: failed to load regulatory.db [ 99.437282][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.444338][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.470716][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.518170][ T5832] hsr_slave_0: entered promiscuous mode [ 99.525046][ T5832] hsr_slave_1: entered promiscuous mode [ 99.531197][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.539522][ T5832] Cannot create hsr debugfs directory [ 99.550180][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.563548][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.587395][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.594547][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.620633][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.684198][ T5831] team0: Port device team_slave_0 added [ 99.749814][ T5831] team0: Port device team_slave_1 added [ 99.773743][ T5844] team0: Port device team_slave_0 added [ 99.830818][ T5844] team0: Port device team_slave_1 added [ 99.837431][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.844441][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.871595][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.947422][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.954675][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.980875][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.073615][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.080597][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.106775][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.134358][ T5837] hsr_slave_0: entered promiscuous mode [ 100.140850][ T5837] hsr_slave_1: entered promiscuous mode [ 100.147193][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.154840][ T5837] Cannot create hsr debugfs directory [ 100.184036][ T5838] Bluetooth: hci0: command tx timeout [ 100.207161][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.214222][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.241270][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.267970][ T5838] Bluetooth: hci1: command tx timeout [ 100.351848][ T5838] Bluetooth: hci2: command tx timeout [ 100.416174][ T5831] hsr_slave_0: entered promiscuous mode [ 100.421694][ T5838] Bluetooth: hci4: command tx timeout [ 100.422120][ T5830] Bluetooth: hci3: command tx timeout [ 100.428637][ T5831] hsr_slave_1: entered promiscuous mode [ 100.438937][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.446960][ T5831] Cannot create hsr debugfs directory [ 100.572120][ T5844] hsr_slave_0: entered promiscuous mode [ 100.578534][ T5844] hsr_slave_1: entered promiscuous mode [ 100.584481][ T5830] Bluetooth: hci5: command tx timeout [ 100.590931][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.598597][ T5844] Cannot create hsr debugfs directory [ 100.740210][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.753113][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.795036][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.836615][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.959049][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.016838][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.053046][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.064138][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.165047][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.190472][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.205942][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.217871][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.289914][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.338240][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.366715][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.403233][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.435372][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.508401][ T5831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.540089][ T5831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.559030][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.577854][ T5831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.590053][ T5831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.610029][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.654827][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.662101][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.709016][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.751798][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.765972][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.773127][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.800836][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.815550][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.838745][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.845880][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.867720][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.895990][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.903163][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.946139][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.046800][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.090085][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.097249][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.144736][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.155239][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.162411][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.212964][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.261211][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.263236][ T5830] Bluetooth: hci0: command tx timeout [ 102.296421][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.303573][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.347748][ T5830] Bluetooth: hci1: command tx timeout [ 102.371807][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.422359][ T5830] Bluetooth: hci2: command tx timeout [ 102.457037][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.464363][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.479905][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.487038][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.501851][ T5830] Bluetooth: hci4: command tx timeout [ 102.507279][ T5838] Bluetooth: hci3: command tx timeout [ 102.560616][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.567789][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.661856][ T5838] Bluetooth: hci5: command tx timeout [ 102.675772][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.706660][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.772678][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.808201][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.840421][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.858840][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.866059][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.964178][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.971620][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.178209][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.204877][ T5834] veth0_vlan: entered promiscuous mode [ 103.225652][ T5827] veth0_vlan: entered promiscuous mode [ 103.283243][ T5827] veth1_vlan: entered promiscuous mode [ 103.362960][ T5834] veth1_vlan: entered promiscuous mode [ 103.399957][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.528286][ T5827] veth0_macvtap: entered promiscuous mode [ 103.586939][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.618505][ T5827] veth1_macvtap: entered promiscuous mode [ 103.664959][ T5834] veth0_macvtap: entered promiscuous mode [ 103.709554][ T5834] veth1_macvtap: entered promiscuous mode [ 103.756818][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.791115][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.843019][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.854926][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.866637][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.875959][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.918508][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.977026][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.010204][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.050280][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.059892][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.069348][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.079254][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.114953][ T5837] veth0_vlan: entered promiscuous mode [ 104.190434][ T5837] veth1_vlan: entered promiscuous mode [ 104.208940][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.227707][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.329015][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.342123][ T5838] Bluetooth: hci0: command tx timeout [ 104.344758][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.365054][ T5831] veth0_vlan: entered promiscuous mode [ 104.380965][ T5832] veth0_vlan: entered promiscuous mode [ 104.422307][ T5838] Bluetooth: hci1: command tx timeout [ 104.435658][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.480038][ T5837] veth0_macvtap: entered promiscuous mode [ 104.493804][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.502711][ T5838] Bluetooth: hci2: command tx timeout [ 104.506070][ T5832] veth1_vlan: entered promiscuous mode [ 104.522446][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.533500][ T5844] veth0_vlan: entered promiscuous mode [ 104.558446][ T5831] veth1_vlan: entered promiscuous mode [ 104.583553][ T5838] Bluetooth: hci3: command tx timeout [ 104.588993][ T5830] Bluetooth: hci4: command tx timeout [ 104.616990][ T5837] veth1_macvtap: entered promiscuous mode [ 104.665103][ T5844] veth1_vlan: entered promiscuous mode [ 104.688987][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.692251][ T5832] veth0_macvtap: entered promiscuous mode [ 104.704885][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.727018][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.739175][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.747855][ T5838] Bluetooth: hci5: command tx timeout [ 104.777149][ T5832] veth1_macvtap: entered promiscuous mode [ 104.788024][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.798113][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.807096][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.816328][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.882664][ T5831] veth0_macvtap: entered promiscuous mode [ 104.918948][ T5844] veth0_macvtap: entered promiscuous mode [ 104.938531][ T5831] veth1_macvtap: entered promiscuous mode [ 104.965974][ T5844] veth1_macvtap: entered promiscuous mode [ 105.004848][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.084131][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.147152][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.184937][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.256068][ T5831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.272595][ T5831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.282691][ T5831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.292308][ T5831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.311184][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.342236][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.350907][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.365353][ T5981] syz.3.9 (5981) used obsolete PPPIOCDETACH ioctl [ 105.371085][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.384413][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.396179][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.421877][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.512927][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.639452][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.658697][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.667890][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.676938][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.703153][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.733462][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.894348][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.911547][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.912674][ T5994] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 106.033366][ T5997] netlink: 'syz.3.15': attribute type 4 has an invalid length. [ 106.058739][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.072174][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.171719][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.180866][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 106.199864][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.299792][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.334837][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.351556][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.368651][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.606217][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.646443][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.757292][ T6014] Bluetooth: MGMT ver 1.23 [ 107.264140][ T6029] Zero length message leads to an empty skb [ 107.491571][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.499885][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.679421][ T6039] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 107.734343][ T6039] netlink: 244 bytes leftover after parsing attributes in process `syz.2.27'. [ 108.000358][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.040816][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.163406][ T6024] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.173697][ T6024] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.183925][ T6024] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.193188][ T6024] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.308773][ T6024] syz.1.20 (6024) used greatest stack depth: 20056 bytes left [ 108.650939][ T6063] netlink: 'syz.5.37': attribute type 39 has an invalid length. [ 108.896980][ T6072] loop0: detected capacity change from 0 to 512 [ 109.082703][ T6082] netlink: 'syz.0.39': attribute type 4 has an invalid length. [ 109.454185][ T6086] hub 9-0:1.0: USB hub found [ 109.459838][ T6086] hub 9-0:1.0: 1 port detected [ 110.586343][ T6109] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.623546][ T6114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 110.684502][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 110.701615][ T6110] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 110.764039][ T6123] loop2: detected capacity change from 0 to 512 [ 110.782848][ T6112] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 110.852751][ T6116] netlink: 96 bytes leftover after parsing attributes in process `syz.5.55'. [ 110.900607][ T6127] netlink: 'syz.2.57': attribute type 4 has an invalid length. [ 110.977986][ T6109] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.185140][ T6109] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.263933][ T6140] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.62'. [ 111.324693][ T6135] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.62'. [ 111.409358][ T6109] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.175692][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 112.916168][ T6169] loop2: detected capacity change from 0 to 512 [ 113.025152][ T6169] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 113.037638][ T6172] netlink: 'syz.1.77': attribute type 39 has an invalid length. [ 113.206498][ T6175] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.615953][ T6182] tipc: Started in network mode [ 113.637474][ T6182] tipc: Node identity , cluster identity 4711 [ 113.841893][ T6185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.410989][ T6185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.428414][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 114.492018][ T30] audit: type=1107 audit(1749866130.828:2): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 114.801972][ T6185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.613128][ T6185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.723581][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 115.771270][ T6215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.94'. [ 115.889390][ T6217] warning: `syz.4.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.909040][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 115.996560][ T6214] bond0: (slave bond_slave_1): Releasing backup interface [ 116.316067][ T6185] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.376847][ T6185] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.447193][ T6185] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.531697][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 117.323651][ T6185] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.080260][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 118.118387][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 118.169672][ T6252] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 118.484931][ T6259] vlan2: entered promiscuous mode [ 118.531063][ T6259] bond0: entered promiscuous mode [ 118.587173][ T6259] bond_slave_0: entered promiscuous mode [ 118.617925][ T6259] vlan2: entered allmulticast mode [ 118.647955][ T6259] bond0: entered allmulticast mode [ 118.678385][ T6259] bond_slave_0: entered allmulticast mode [ 118.838567][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 118.943505][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 118.974329][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 119.191119][ T6280] loop0: detected capacity change from 0 to 256 [ 119.248536][ T6280] ======================================================= [ 119.248536][ T6280] WARNING: The mand mount option has been deprecated and [ 119.248536][ T6280] and is ignored by this kernel. Remove the mand [ 119.248536][ T6280] option from the mount to silence this warning. [ 119.248536][ T6280] ======================================================= [ 119.312152][ T6273] syz.2.119 (6273) used greatest stack depth: 17992 bytes left [ 119.447739][ T6109] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.529714][ T6109] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.559201][ T6280] FAT-fs (loop0): Directory bread(block 64) failed [ 119.584616][ T6280] FAT-fs (loop0): Directory bread(block 65) failed [ 119.591278][ T6280] FAT-fs (loop0): Directory bread(block 66) failed [ 119.601300][ T6289] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.630192][ T6280] FAT-fs (loop0): Directory bread(block 67) failed [ 119.643292][ T6109] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.669124][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 119.681727][ T6280] FAT-fs (loop0): Directory bread(block 68) failed [ 119.697824][ T6109] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.699153][ T6280] FAT-fs (loop0): Directory bread(block 69) failed [ 119.738167][ T6289] vlan2: entered promiscuous mode [ 119.747670][ T6289] dummy0: entered promiscuous mode [ 119.754970][ T6280] FAT-fs (loop0): Directory bread(block 70) failed [ 119.775481][ T6280] FAT-fs (loop0): Directory bread(block 71) failed [ 119.807401][ T6280] FAT-fs (loop0): Directory bread(block 72) failed [ 119.814508][ T6298] loop1: detected capacity change from 0 to 512 [ 119.836573][ T6298] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 119.858670][ T6280] FAT-fs (loop0): Directory bread(block 73) failed [ 120.817240][ T6318] hub 9-0:1.0: USB hub found [ 120.823311][ T6318] hub 9-0:1.0: 1 port detected [ 120.869206][ T6320] geneve2: entered promiscuous mode [ 120.905592][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 120.984242][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 121.504746][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 121.562041][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 121.670692][ T6336] vlan2: entered promiscuous mode [ 121.703272][ T6336] team0: entered promiscuous mode [ 121.721610][ T6336] team_slave_0: entered promiscuous mode [ 121.792207][ T6336] team_slave_1: entered promiscuous mode [ 122.614543][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 122.847074][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 122.880077][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 122.963585][ T6378] bridge0: entered promiscuous mode [ 123.015569][ T6378] ip6gretap0: entered promiscuous mode [ 123.405291][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'. [ 123.434150][ T6396] loop1: detected capacity change from 0 to 256 [ 123.517435][ T6393] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 123.541073][ T6397] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 123.568175][ T6396] FAT-fs (loop1): Directory bread(block 64) failed [ 123.569638][ T6393] IPv6: Can't replace route, no match found [ 123.601498][ T6396] FAT-fs (loop1): Directory bread(block 65) failed [ 123.605405][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'. [ 123.626445][ T30] audit: type=1326 audit(1749866139.958:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 123.648903][ T6396] FAT-fs (loop1): Directory bread(block 66) failed [ 123.670788][ T6396] FAT-fs (loop1): Directory bread(block 67) failed [ 123.678215][ T6396] FAT-fs (loop1): Directory bread(block 68) failed [ 123.684898][ T30] audit: type=1326 audit(1749866139.958:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 123.729571][ T6396] FAT-fs (loop1): Directory bread(block 69) failed [ 123.753281][ T6396] FAT-fs (loop1): Directory bread(block 70) failed [ 123.761891][ T6396] FAT-fs (loop1): Directory bread(block 71) failed [ 123.774197][ T30] audit: type=1326 audit(1749866140.008:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 123.797113][ T6396] FAT-fs (loop1): Directory bread(block 72) failed [ 123.831635][ T6396] FAT-fs (loop1): Directory bread(block 73) failed [ 123.871468][ T30] audit: type=1326 audit(1749866140.008:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 123.970881][ T6408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 124.164159][ T30] audit: type=1326 audit(1749866140.008:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 124.186991][ T30] audit: type=1326 audit(1749866140.008:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 124.261667][ T30] audit: type=1326 audit(1749866140.008:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 124.413763][ T30] audit: type=1326 audit(1749866140.008:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 124.478199][ T6421] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 124.581770][ T30] audit: type=1326 audit(1749866140.008:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 124.618084][ T6421] netlink: 224 bytes leftover after parsing attributes in process `syz.2.174'. [ 124.663599][ T30] audit: type=1326 audit(1749866140.008:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 124.969656][ T6432] netlink: 220 bytes leftover after parsing attributes in process `syz.3.180'. [ 124.984286][ T6405] loop4: detected capacity change from 0 to 512 [ 125.078259][ T6405] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 125.087781][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.179'. [ 125.117924][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.179'. [ 125.362535][ T6442] syz_tun: entered promiscuous mode [ 125.368169][ T6442] macsec1: entered promiscuous mode [ 125.394229][ T6442] syz_tun: left promiscuous mode [ 125.400248][ T6447] loop2: detected capacity change from 0 to 512 [ 125.465115][ T6447] netlink: 'syz.2.185': attribute type 4 has an invalid length. [ 125.501567][ T6405] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 126.526094][ T6464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.643020][ T6471] __nla_validate_parse: 3 callbacks suppressed [ 126.643057][ T6471] netlink: 96 bytes leftover after parsing attributes in process `syz.4.192'. [ 126.787836][ T6464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.830581][ T6481] loop3: detected capacity change from 0 to 512 [ 126.921997][ T6487] netlink: 'syz.3.198': attribute type 4 has an invalid length. [ 126.935473][ T6485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.199'. [ 126.960534][ T6473] syzkaller0: entered promiscuous mode [ 126.961436][ T6485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.199'. [ 126.966884][ T6473] syzkaller0: entered allmulticast mode [ 127.023022][ T6464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.289897][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 127.390947][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'. [ 127.410389][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'. [ 128.628683][ T6464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.242803][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 129.255300][ T6504] gretap0: entered promiscuous mode [ 129.280837][ T6504] gretap0: left promiscuous mode [ 129.363349][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 129.407719][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 129.503589][ T6464] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.597075][ T6464] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.718765][ T6464] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.732158][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.215'. [ 129.877308][ T6464] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.205148][ T6573] hub 9-0:1.0: USB hub found [ 130.210138][ T6573] hub 9-0:1.0: 1 port detected [ 130.811735][ T6597] netlink: 'syz.5.225': attribute type 18 has an invalid length. [ 130.926689][ T6501] infiniband syz2: set active [ 130.977209][ T6501] infiniband syz2: added vxcan1 [ 130.999107][ T6501] syz2: rxe_create_cq: returned err = -12 [ 131.012436][ T6597] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.020825][ T6597] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.029069][ T6597] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.037343][ T6597] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.051051][ T6501] infiniband syz2: Couldn't create ib_mad CQ [ 131.062372][ T6501] infiniband syz2: Couldn't open port 1 [ 131.068026][ T5923] vxcan1 speed is unknown, defaulting to 1000 [ 131.124473][ T6593] vxcan1 speed is unknown, defaulting to 1000 [ 131.207584][ T6501] RDS/IB: syz2: added [ 131.234027][ T6501] smc: adding ib device syz2 with port count 1 [ 131.259043][ T6501] smc: ib device syz2 port 1 has pnetid [ 131.294238][ T5923] vxcan1 speed is unknown, defaulting to 1000 [ 131.320385][ T6612] netlink: 244 bytes leftover after parsing attributes in process `syz.1.233'. [ 131.343234][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.233'. [ 132.310118][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 133.334544][ T6619] vxcan1 speed is unknown, defaulting to 1000 [ 134.151030][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 134.224301][ T6702] netlink: 'syz.2.265': attribute type 2 has an invalid length. [ 134.290222][ T6705] loop1: detected capacity change from 0 to 512 [ 134.403789][ T6705] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 134.416117][ T6707] netlink: 'syz.0.268': attribute type 39 has an invalid length. [ 135.255802][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 135.653722][ T6747] loop0: detected capacity change from 0 to 512 [ 135.713056][ T6747] netlink: 'syz.0.283': attribute type 4 has an invalid length. [ 136.064439][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 136.331810][ T6767] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3261 [ 136.685009][ T6778] loop2: detected capacity change from 0 to 512 [ 136.720541][ T6778] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 136.962709][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 137.572579][ T6807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.312'. [ 137.607617][ T6807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.312'. [ 137.711058][ T6810] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 137.732257][ T6810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.313'. [ 137.742866][ T6812] loop1: detected capacity change from 0 to 512 [ 137.795569][ T6812] netlink: 'syz.1.314': attribute type 4 has an invalid length. [ 137.949745][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 138.171963][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 138.757458][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 138.867448][ T6844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.328'. [ 138.899848][ T6848] loop0: detected capacity change from 0 to 512 [ 138.920805][ T6849] netlink: 44 bytes leftover after parsing attributes in process `syz.2.328'. [ 138.982333][ T6848] netlink: 'syz.0.329': attribute type 4 has an invalid length. [ 139.086352][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 139.101189][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 139.292472][ T6858] netlink: 'syz.1.334': attribute type 4 has an invalid length. [ 139.647291][ T6501] vxcan1 speed is unknown, defaulting to 1000 [ 139.669581][ T6871] netlink: 96 bytes leftover after parsing attributes in process `syz.1.337'. [ 140.145945][ T6879] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 140.363239][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.447955][ T6879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.567114][ T6889] loop1: detected capacity change from 0 to 512 [ 140.638762][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 140.679071][ T6892] netlink: 'syz.1.345': attribute type 4 has an invalid length. [ 140.800197][ T6881] bond1: (slave veth3): Enslaving as an active interface with a down link [ 140.859788][ T6884] bond1: (slave veth0_to_bond): making interface the new active one [ 140.872797][ T6884] veth0_to_bond: entered promiscuous mode [ 140.879747][ T6884] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 140.915234][ T6885] bond1: (slave veth5): Enslaving as an active interface with a down link [ 140.973452][ T6891] ip6gretap0: entered promiscuous mode [ 140.980222][ T6891] syz_tun: entered promiscuous mode [ 140.990567][ T6891] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 140.999204][ T6891] Cannot create hsr debugfs directory [ 141.780268][ T6912] vlan2: entered promiscuous mode [ 141.817394][ T6912] dummy0: entered promiscuous mode [ 142.555758][ T6931] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 142.557330][ T1206] IPVS: starting estimator thread 0... [ 142.671532][ T6935] IPVS: using max 25 ests per chain, 60000 per kthread [ 142.801169][ T6926] vxcan1 speed is unknown, defaulting to 1000 [ 143.312194][ T6954] __nla_validate_parse: 4 callbacks suppressed [ 143.312215][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'. [ 143.390250][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'. [ 143.467395][ T6953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.372'. [ 143.487350][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.372'. [ 143.611753][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 144.066855][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 144.066891][ T30] audit: type=1800 audit(1749866160.408:44): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.368" name="cgroup.controllers" dev="tmpfs" ino=456 res=0 errno=0 [ 144.108276][ T6972] netlink: 'syz.4.377': attribute type 4 has an invalid length. [ 144.418598][ T6988] netlink: 256 bytes leftover after parsing attributes in process `syz.4.384'. [ 144.849996][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.389'. [ 145.099287][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.394'. [ 145.117356][ T7010] vlan2: entered promiscuous mode [ 145.705886][ T30] audit: type=1326 audit(1749866162.048:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 145.772573][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 145.814587][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 145.830804][ T30] audit: type=1326 audit(1749866162.048:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 145.870655][ T30] audit: type=1326 audit(1749866162.098:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 145.994563][ T30] audit: type=1326 audit(1749866162.098:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 146.046124][ T30] audit: type=1326 audit(1749866162.098:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 146.138615][ T30] audit: type=1326 audit(1749866162.098:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 146.177490][ T30] audit: type=1326 audit(1749866162.098:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 146.351466][ T30] audit: type=1326 audit(1749866162.098:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 146.421578][ T30] audit: type=1326 audit(1749866162.098:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080cf8e929 code=0x7ffc0000 [ 146.464571][ T7043] netlink: 'syz.5.406': attribute type 13 has an invalid length. [ 146.472788][ T7043] netlink: 'syz.5.406': attribute type 17 has an invalid length. [ 146.902443][ T7043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.513749][ T7076] netlink: 'syz.2.419': attribute type 13 has an invalid length. [ 147.589977][ T7078] netlink: 'syz.2.419': attribute type 10 has an invalid length. [ 147.740773][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.749205][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.053876][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.070558][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.260769][ T7072] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.298044][ T7072] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.313733][ T7072] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.368220][ T7072] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.528064][ T7111] __nla_validate_parse: 4 callbacks suppressed [ 148.528087][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 148.653868][ T7078] dummy0: entered promiscuous mode [ 148.686549][ T7078] bridge0: port 3(dummy0) entered blocking state [ 148.725268][ T7078] bridge0: port 3(dummy0) entered disabled state [ 148.735504][ T7078] dummy0: entered allmulticast mode [ 148.765554][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 148.782898][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 148.798888][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.5.423'. [ 148.834759][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 148.916879][ T7116] netlink: 'syz.3.428': attribute type 2 has an invalid length. [ 149.357098][ T7132] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 149.433637][ T7135] netlink: 52 bytes leftover after parsing attributes in process `syz.0.434'. [ 149.456262][ T7132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.472220][ T7135] netlink: 52 bytes leftover after parsing attributes in process `syz.0.434'. [ 149.744814][ T7137] bond2: (slave veth7): Enslaving as an active interface with a down link [ 149.804579][ T7132] bond1: (slave veth0_to_bond): Releasing active interface [ 149.896238][ T7132] veth0_to_bond: left promiscuous mode [ 150.513691][ T7132] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 150.594173][ T7148] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 150.603725][ T7148] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 150.613372][ T7148] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 150.786158][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'. [ 150.841603][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'. [ 150.888622][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'. [ 152.905315][ T7211] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 152.989371][ T7215] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 153.170371][ T7224] loop0: detected capacity change from 0 to 256 [ 153.172383][ T7211] IPv6: Can't replace route, no match found [ 153.289780][ T7224] FAT-fs (loop0): Directory bread(block 64) failed [ 153.331559][ T7224] FAT-fs (loop0): Directory bread(block 65) failed [ 153.338265][ T7224] FAT-fs (loop0): Directory bread(block 66) failed [ 153.418546][ T7224] FAT-fs (loop0): Directory bread(block 67) failed [ 153.449050][ T7224] FAT-fs (loop0): Directory bread(block 68) failed [ 153.480531][ T7224] FAT-fs (loop0): Directory bread(block 69) failed [ 153.551703][ T7224] FAT-fs (loop0): Directory bread(block 70) failed [ 153.563532][ T7224] FAT-fs (loop0): Directory bread(block 71) failed [ 153.580462][ T7224] FAT-fs (loop0): Directory bread(block 72) failed [ 153.601529][ T7224] FAT-fs (loop0): Directory bread(block 73) failed [ 153.856911][ T7243] __nla_validate_parse: 11 callbacks suppressed [ 153.856934][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 153.978089][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 154.039516][ T7245] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 154.646097][ T7243] ip6gretap0: entered promiscuous mode [ 154.659544][ T7251] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 154.672928][ T7251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.479'. [ 154.695505][ T7243] syz_tun: entered promiscuous mode [ 154.738418][ T7243] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 154.777972][ T7243] Cannot create hsr debugfs directory [ 154.823957][ T7250] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 154.834502][ T7250] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 154.844169][ T7250] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 156.284257][ T7275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.486'. [ 156.373820][ T7276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.486'. [ 156.711809][ T7285] loop3: detected capacity change from 0 to 256 [ 156.807556][ T7285] FAT-fs (loop3): Directory bread(block 64) failed [ 156.840157][ T7285] FAT-fs (loop3): Directory bread(block 65) failed [ 156.962366][ T7285] FAT-fs (loop3): Directory bread(block 66) failed [ 156.968951][ T7285] FAT-fs (loop3): Directory bread(block 67) failed [ 157.113205][ T7285] FAT-fs (loop3): Directory bread(block 68) failed [ 157.119806][ T7285] FAT-fs (loop3): Directory bread(block 69) failed [ 157.741613][ T7285] FAT-fs (loop3): Directory bread(block 70) failed [ 157.798265][ T7300] netlink: 'syz.0.498': attribute type 2 has an invalid length. [ 157.807385][ T7285] FAT-fs (loop3): Directory bread(block 71) failed [ 157.855693][ T7285] FAT-fs (loop3): Directory bread(block 72) failed [ 157.921299][ T7285] FAT-fs (loop3): Directory bread(block 73) failed [ 158.460594][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.500'. [ 158.895289][ T7307] geneve2: entered promiscuous mode [ 159.372870][ T7325] syz.4.508: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 159.390111][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.4.508 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 159.390152][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.390167][ T7325] Call Trace: [ 159.390176][ T7325] [ 159.390187][ T7325] dump_stack_lvl+0x189/0x250 [ 159.390233][ T7325] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 159.390268][ T7325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.390308][ T7325] ? __pfx__printk+0x10/0x10 [ 159.390335][ T7325] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.390364][ T7325] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.390393][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.390427][ T7325] warn_alloc+0x214/0x310 [ 159.390455][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.390482][ T7325] ? stack_depot_save_flags+0x40/0x900 [ 159.390521][ T7325] ? __pfx_warn_alloc+0x10/0x10 [ 159.390552][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.390579][ T7325] ? kasan_save_track+0x4f/0x80 [ 159.390618][ T7325] ? xskq_create+0x56/0x170 [ 159.390655][ T7325] ? xsk_init_queue+0xb0/0x110 [ 159.390689][ T7325] ? xsk_setsockopt+0x43f/0x710 [ 159.390721][ T7325] ? do_sock_setsockopt+0x25a/0x3e0 [ 159.390750][ T7325] ? __x64_sys_setsockopt+0x18b/0x220 [ 159.390779][ T7325] ? do_syscall_64+0xfa/0x3b0 [ 159.390801][ T7325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.390835][ T7325] __vmalloc_node_range_noprof+0x125/0x12f0 [ 159.390899][ T7325] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 159.390934][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.390961][ T7325] ? __kasan_kmalloc+0x93/0xb0 [ 159.390989][ T7325] vmalloc_user_noprof+0xad/0xf0 [ 159.391021][ T7325] ? xskq_create+0xbf/0x170 [ 159.391060][ T7325] xskq_create+0xbf/0x170 [ 159.391101][ T7325] xsk_init_queue+0xb0/0x110 [ 159.391157][ T7325] xsk_setsockopt+0x43f/0x710 [ 159.391196][ T7325] ? __pfx_xsk_setsockopt+0x10/0x10 [ 159.391228][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.391256][ T7325] ? __lock_acquire+0xab9/0xd20 [ 159.391297][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.391330][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.391357][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.391384][ T7325] ? __pfx_xsk_setsockopt+0x10/0x10 [ 159.391420][ T7325] do_sock_setsockopt+0x25a/0x3e0 [ 159.391456][ T7325] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 159.391491][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.391519][ T7325] ? __fget_files+0x2a/0x420 [ 159.391558][ T7325] __x64_sys_setsockopt+0x18b/0x220 [ 159.391597][ T7325] do_syscall_64+0xfa/0x3b0 [ 159.391619][ T7325] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.391657][ T7325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.391680][ T7325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.391708][ T7325] ? exc_page_fault+0x9f/0xf0 [ 159.391748][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.391772][ T7325] RIP: 0033:0x7f080cf8e929 [ 159.391793][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.391813][ T7325] RSP: 002b:00007f080ddd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.391838][ T7325] RAX: ffffffffffffffda RBX: 00007f080d1b5fa0 RCX: 00007f080cf8e929 [ 159.391856][ T7325] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 159.391870][ T7325] RBP: 00007f080d010b39 R08: 0000000000000004 R09: 0000000000000000 [ 159.391886][ T7325] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.391901][ T7325] R13: 0000000000000000 R14: 00007f080d1b5fa0 R15: 00007ffec7061518 [ 159.391938][ T7325] [ 159.924079][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.505'. [ 159.943621][ T7325] Mem-Info: [ 159.947091][ T7325] active_anon:9234 inactive_anon:0 isolated_anon:0 [ 159.947091][ T7325] active_file:7563 inactive_file:39990 isolated_file:0 [ 159.947091][ T7325] unevictable:768 dirty:175 writeback:0 [ 159.947091][ T7325] slab_reclaimable:10296 slab_unreclaimable:112930 [ 159.947091][ T7325] mapped:35934 shmem:1391 pagetables:1230 [ 159.947091][ T7325] sec_pagetables:0 bounce:0 [ 159.947091][ T7325] kernel_misc_reclaimable:0 [ 159.947091][ T7325] free:1294493 free_pcp:17268 free_cma:0 [ 159.995338][ T7325] Node 0 active_anon:37436kB inactive_anon:0kB active_file:30252kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143736kB dirty:700kB writeback:0kB shmem:4028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13056kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.427130][ T7325] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.528561][ T7325] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.577447][ T7325] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 160.639348][ T7325] Node 0 DMA32 free:1250016kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24612kB inactive_anon:0kB active_file:30252kB inactive_file:157364kB unevictable:1536kB writepending:696kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:72048kB local_pcp:43424kB free_cma:0kB [ 160.761083][ T7325] lowmem_reserve[]: 0 0 1 1 1 [ 160.785296][ T7344] netlink: 'syz.1.515': attribute type 2 has an invalid length. [ 160.790600][ T7325] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 160.868018][ T7325] lowmem_reserve[]: 0 0 0 0 0 [ 160.888526][ T7325] Node 1 Normal free:3908556kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15584kB local_pcp:10912kB free_cma:0kB [ 160.910196][ T7348] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 160.972320][ T7325] lowmem_reserve[]: 0 0 0 0 0 [ 160.980512][ T7348] netlink: 224 bytes leftover after parsing attributes in process `syz.0.514'. [ 161.019414][ T7325] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.049236][ T7325] Node 0 DMA32: 377*4kB (U) 108*8kB (UME) 155*16kB (U) 150*32kB (U) 8*64kB (UME) 2*128kB (ME) 2*256kB (ME) 1*512kB (E) 1*1024kB (U) 2*2048kB (UM) 301*4096kB (M) = 1249460kB [ 161.096275][ T7351] loop5: detected capacity change from 0 to 256 [ 161.097766][ T7325] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 161.120348][ T7325] Node 1 Normal: 181*4kB (UME) 49*8kB (UME) 27*16kB (UME) 96*32kB (UME) 29*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 950*4096kB (M) = 3908556kB [ 161.140193][ T7325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.151657][ T7325] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.162415][ T7325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.173140][ T7325] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.185552][ T7353] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.185830][ T7325] 48795 total pagecache pages [ 161.197997][ T7325] 0 pages in swap cache [ 161.202990][ T7325] Free swap = 124996kB [ 161.207495][ T7325] Total swap = 124996kB [ 161.237725][ T7325] 2097051 pages RAM [ 161.267700][ T7325] 0 pages HighMem/MovableOnly [ 161.276142][ T7351] FAT-fs (loop5): Directory bread(block 64) failed [ 161.289256][ T7325] 424689 pages reserved [ 161.295723][ T7351] FAT-fs (loop5): Directory bread(block 65) failed [ 161.309186][ T7325] 0 pages cma reserved [ 161.339190][ T7351] FAT-fs (loop5): Directory bread(block 66) failed [ 161.366970][ T7351] FAT-fs (loop5): Directory bread(block 67) failed [ 161.408572][ T7351] FAT-fs (loop5): Directory bread(block 68) failed [ 161.436289][ T7351] FAT-fs (loop5): Directory bread(block 69) failed [ 161.467321][ T7351] FAT-fs (loop5): Directory bread(block 70) failed [ 161.515364][ T7351] FAT-fs (loop5): Directory bread(block 71) failed [ 161.540470][ T7351] FAT-fs (loop5): Directory bread(block 72) failed [ 161.550962][ T7351] FAT-fs (loop5): Directory bread(block 73) failed [ 161.812919][ T7370] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 161.923149][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 162.799414][ T7362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.891516][ T7368] netlink: 96 bytes leftover after parsing attributes in process `syz.0.523'. [ 162.904261][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.524'. [ 162.992769][ T7367] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 163.078620][ T7370] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 163.374075][ T7362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.733477][ T7391] netlink: 'syz.5.530': attribute type 2 has an invalid length. [ 163.783013][ T7362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.221218][ T7362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.414483][ T7409] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 164.511214][ T7412] loop3: detected capacity change from 0 to 256 [ 164.670674][ T7362] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.750590][ T7362] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.782173][ T7412] FAT-fs (loop3): Directory bread(block 64) failed [ 164.800635][ T7412] FAT-fs (loop3): Directory bread(block 65) failed [ 164.831594][ T7412] FAT-fs (loop3): Directory bread(block 66) failed [ 164.838139][ T7412] FAT-fs (loop3): Directory bread(block 67) failed [ 164.911624][ T7412] FAT-fs (loop3): Directory bread(block 68) failed [ 164.918203][ T7412] FAT-fs (loop3): Directory bread(block 69) failed [ 164.921982][ T7362] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.940048][ T7412] FAT-fs (loop3): Directory bread(block 70) failed [ 164.979441][ T7412] FAT-fs (loop3): Directory bread(block 71) failed [ 165.003284][ T7424] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 165.024411][ T7362] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.032897][ T7412] FAT-fs (loop3): Directory bread(block 72) failed [ 165.039432][ T7412] FAT-fs (loop3): Directory bread(block 73) failed [ 165.215490][ T7432] netlink: 'syz.4.547': attribute type 2 has an invalid length. [ 165.394214][ T7424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.615045][ T7429] bond3: (slave veth9): Enslaving as an active interface with a down link [ 165.772167][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.550'. [ 166.341841][ T7430] bond2: (slave veth0_to_bond): Releasing active interface [ 166.627570][ T7430] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 167.640644][ T7470] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 167.657791][ T7472] loop2: detected capacity change from 0 to 512 [ 167.720666][ T7470] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 167.807820][ T7472] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.921410][ T7472] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 168.026260][ T7472] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 168.078632][ T7487] loop0: detected capacity change from 0 to 256 [ 168.096883][ T7472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 168.148749][ T7472] System zones: 0-2, 18-18, 34-34 [ 168.154806][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 168.199825][ T7472] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.561: iget: bad i_size value: 360287970189639680 [ 168.234948][ T7487] FAT-fs (loop0): Directory bread(block 64) failed [ 168.260502][ T7472] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.561: couldn't read orphan inode 15 (err -117) [ 168.342785][ T7472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.372045][ T7487] FAT-fs (loop0): Directory bread(block 65) failed [ 168.386683][ T7472] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.561: iget: bad i_size value: 360287970189639680 [ 168.406659][ T7487] FAT-fs (loop0): Directory bread(block 66) failed [ 168.431519][ T7487] FAT-fs (loop0): Directory bread(block 67) failed [ 168.438146][ T7487] FAT-fs (loop0): Directory bread(block 68) failed [ 168.453730][ T7497] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 168.465333][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 168.465349][ T30] audit: type=1800 audit(1749866184.798:57): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.561" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 168.481541][ T7487] FAT-fs (loop0): Directory bread(block 69) failed [ 168.565200][ T7487] FAT-fs (loop0): Directory bread(block 70) failed [ 168.570608][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.611440][ T7487] FAT-fs (loop0): Directory bread(block 71) failed [ 168.618087][ T7487] FAT-fs (loop0): Directory bread(block 72) failed [ 168.689390][ T7487] FAT-fs (loop0): Directory bread(block 73) failed [ 168.726793][ T7500] netlink: 'syz.1.570': attribute type 64 has an invalid length. [ 168.734601][ T7502] loop3: detected capacity change from 0 to 128 [ 168.736416][ T7502] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.784398][ T7502] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.801280][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.570'. [ 168.806036][ T7502] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.941861][ T7507] netlink: 'syz.1.570': attribute type 64 has an invalid length. [ 168.995792][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.570'. [ 169.107362][ T7502] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 169.269641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 169.321769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 169.371515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 169.531860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 169.601723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 169.708408][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.890839][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 169.930281][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 169.955158][ T7530] loop2: detected capacity change from 0 to 1024 [ 169.979978][ T7530] EXT4-fs: inline encryption not supported [ 169.995219][ T7530] EXT4-fs: Ignoring removed bh option [ 170.102640][ T7530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.192023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.471706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.581807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.805715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 171.002592][ T7544] cgroup: Unknown subsys name 'cpuset' [ 171.011313][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.165357][ T7547] netlink: 'syz.5.584': attribute type 4 has an invalid length. [ 171.307634][ T7554] loop1: detected capacity change from 0 to 256 [ 171.434618][ T7554] FAT-fs (loop1): Directory bread(block 64) failed [ 171.451869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 171.484858][ T7554] FAT-fs (loop1): Directory bread(block 65) failed [ 171.503189][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 171.532073][ T7554] FAT-fs (loop1): Directory bread(block 66) failed [ 171.538625][ T7554] FAT-fs (loop1): Directory bread(block 67) failed [ 171.575598][ T7554] FAT-fs (loop1): Directory bread(block 68) failed [ 171.598429][ T7554] FAT-fs (loop1): Directory bread(block 69) failed [ 171.641757][ T7554] FAT-fs (loop1): Directory bread(block 70) failed [ 171.678762][ T7554] FAT-fs (loop1): Directory bread(block 71) failed [ 171.738282][ T7554] FAT-fs (loop1): Directory bread(block 72) failed [ 171.778771][ T7554] FAT-fs (loop1): Directory bread(block 73) failed [ 171.894154][ T7570] loop0: detected capacity change from 0 to 8 [ 172.038026][ T7570] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.075913][ T7570] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.124188][ T30] audit: type=1800 audit(1749866188.458:58): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.595" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 172.155213][ T7570] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.205478][ T7570] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.238202][ T7570] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.265890][ T7570] SQUASHFS error: Failed to read block 0x4de: -5 [ 174.788198][ T7596] loop1: detected capacity change from 0 to 16 [ 174.879871][ T7596] erofs (device loop1): mounted with root inode @ nid 36. [ 175.015002][ T7599] loop2: detected capacity change from 0 to 512 [ 175.094048][ T7599] netlink: 'syz.2.607': attribute type 4 has an invalid length. [ 175.122165][ T7605] netlink: 'syz.3.608': attribute type 39 has an invalid length. [ 175.687551][ T7605] syz_tun (unregistering): left promiscuous mode [ 175.924248][ T7612] netlink: 240 bytes leftover after parsing attributes in process `syz.2.612'. [ 176.050506][ T7618] loop1: detected capacity change from 0 to 128 [ 176.105478][ T7618] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.133693][ T7618] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.396670][ T5827] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.852378][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 176.861958][ T7639] netlink: 'syz.2.624': attribute type 4 has an invalid length. [ 176.943055][ T7642] loop4: detected capacity change from 0 to 512 [ 177.072960][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.125735][ T7642] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.179222][ T7650] netlink: 240 bytes leftover after parsing attributes in process `syz.3.628'. [ 177.199310][ T7654] loop2: detected capacity change from 0 to 8 [ 177.293999][ T7654] SQUASHFS error: Failed to read block 0x4de: -5 [ 177.316231][ T7654] SQUASHFS error: Failed to read block 0x4de: -5 [ 177.336530][ T30] audit: type=1800 audit(1749866193.678:59): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.629" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 177.362069][ T7654] SQUASHFS error: Failed to read block 0x4de: -5 [ 177.372105][ T7654] SQUASHFS error: Failed to read block 0x4de: -5 [ 177.394437][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.616589][ T7666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 177.707830][ T7666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 178.034789][ T7681] netlink: 'syz.4.642': attribute type 4 has an invalid length. [ 182.487845][ T7692] loop1: detected capacity change from 0 to 256 [ 182.586372][ T7692] FAT-fs (loop1): Directory bread(block 64) failed [ 182.611499][ T7692] FAT-fs (loop1): Directory bread(block 65) failed [ 182.625041][ T7692] FAT-fs (loop1): Directory bread(block 66) failed [ 182.669850][ T7692] FAT-fs (loop1): Directory bread(block 67) failed [ 182.706117][ T7692] FAT-fs (loop1): Directory bread(block 68) failed [ 182.733993][ T7692] FAT-fs (loop1): Directory bread(block 69) failed [ 182.740678][ T7692] FAT-fs (loop1): Directory bread(block 70) failed [ 182.806655][ T7692] FAT-fs (loop1): Directory bread(block 71) failed [ 182.822677][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.653'. [ 182.866068][ T7692] FAT-fs (loop1): Directory bread(block 72) failed [ 182.871621][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 182.891723][ T7692] FAT-fs (loop1): Directory bread(block 73) failed [ 182.932008][ T7708] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 182.948388][ T7710] IPv6: Can't replace route, no match found [ 182.987614][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.653'. [ 183.024618][ T7709] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 183.432895][ T7716] loop0: detected capacity change from 0 to 1024 [ 183.887555][ T7725] loop2: detected capacity change from 0 to 512 [ 183.927842][ T7725] EXT4-fs (loop2): Test dummy encryption mode enabled [ 183.987292][ T7728] netlink: 'syz.4.659': attribute type 2 has an invalid length. [ 183.992414][ T7725] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 184.127862][ T7716] hfsplus: xattr searching failed [ 184.176130][ T7716] hfsplus: xattr searching failed [ 184.208908][ T7716] hfsplus: xattr searching failed [ 184.236525][ T7733] loop4: detected capacity change from 0 to 512 [ 184.283627][ T7733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.284227][ T7730] loop1: detected capacity change from 0 to 4096 [ 184.290404][ T7733] EXT4-fs: Ignoring removed i_version option [ 184.339902][ T7730] EXT4-fs (loop1): Test dummy encryption mode enabled [ 184.375355][ T7733] EXT4-fs (loop4): 1 orphan inode deleted [ 184.404673][ T7730] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 184.430597][ T7733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.553450][ T6235] hfsplus: b-tree write err: -5, ino 3 [ 184.783303][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.851087][ T7747] loop0: detected capacity change from 0 to 512 [ 184.871332][ T7747] EXT4-fs: Ignoring removed i_version option [ 184.949885][ T7747] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 184.991038][ T7747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 185.051605][ T7747] System zones: 1-12 [ 185.055846][ T7747] EXT4-fs (loop0): orphan cleanup on readonly fs [ 185.132659][ T7747] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.663: invalid indirect mapped block 12 (level 1) [ 185.214408][ T7747] EXT4-fs (loop0): Remounting filesystem read-only [ 185.246992][ T7747] EXT4-fs (loop0): 1 truncate cleaned up [ 185.272932][ T7763] netlink: 'syz.5.673': attribute type 2 has an invalid length. [ 185.292629][ T7747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 185.586868][ T7767] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 185.610544][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 185.702975][ T7767] netlink: 224 bytes leftover after parsing attributes in process `syz.2.675'. [ 185.885578][ T7773] loop5: detected capacity change from 0 to 8192 [ 186.193440][ T7780] Bluetooth: MGMT ver 1.23 [ 187.534351][ T7785] loop2: detected capacity change from 0 to 256 [ 187.584495][ T7785] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 189.918441][ T7791] vxcan1 speed is unknown, defaulting to 1000 [ 190.026370][ T7800] netlink: 'syz.2.689': attribute type 2 has an invalid length. [ 190.048299][ T7803] loop4: detected capacity change from 0 to 512 [ 190.149473][ T7803] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.218461][ T7803] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 190.241869][ T7803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 190.251625][ T7803] System zones: 0-2, 18-18, 34-34 [ 190.268663][ T7803] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.690: iget: bad i_size value: 360287970189639680 [ 190.317485][ T7803] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.690: couldn't read orphan inode 15 (err -117) [ 190.383418][ T7803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.385898][ T7811] loop2: detected capacity change from 0 to 1024 [ 190.479937][ T7811] hfsplus: xattr searching failed [ 190.504619][ T7803] EXT4-fs (loop4): shut down requested (2) [ 190.595070][ T6170] hfsplus: b-tree write err: -5, ino 3 [ 190.642846][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.035445][ T5838] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 192.130621][ T7824] loop2: detected capacity change from 0 to 764 [ 192.943008][ T7824] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 193.412054][ T7103] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.248241][ T7839] input: syz1 as /devices/virtual/input/input6 [ 194.292094][ T7103] usb 6-1: Using ep0 maxpacket: 16 [ 194.326358][ T7103] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 194.367240][ T7103] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.378077][ T7103] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.413945][ T7103] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.441589][ T7103] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.469905][ T7103] usb 6-1: Product: syz [ 194.491911][ T7103] usb 6-1: Manufacturer: syz [ 194.509449][ T7103] usb 6-1: SerialNumber: syz [ 194.721621][ T7855] netlink: 'syz.2.707': attribute type 39 has an invalid length. [ 194.988962][ T7103] usb 6-1: 0:2 : does not exist [ 195.171226][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.711'. [ 195.290827][ T7871] loop1: detected capacity change from 0 to 1024 [ 195.322145][ T7869] loop4: detected capacity change from 0 to 2048 [ 195.682882][ T7873] loop2: detected capacity change from 0 to 2048 [ 196.002189][ T7873] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 196.020544][ T7873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.025661][ T7103] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 197.152532][ T7103] usb 6-1: USB disconnect, device number 2 [ 197.273454][ T7882] loop2: detected capacity change from 0 to 1024 [ 197.282381][ T7882] EXT4-fs: Ignoring removed nobh option [ 197.287993][ T7882] EXT4-fs: Ignoring removed bh option [ 197.343566][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.432905][ T7882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.530797][ T7879] loop0: detected capacity change from 0 to 8192 [ 197.816078][ T5845] loop0: p3 p4 < > [ 197.821905][ T5845] loop0: p3 size 2051506176 extends beyond EOD, truncated [ 198.175199][ T7903] netlink: 'syz.4.723': attribute type 39 has an invalid length. [ 198.446083][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.501809][ T7903] syz_tun (unregistering): left promiscuous mode [ 198.578194][ T7907] loop0: detected capacity change from 0 to 512 [ 198.649856][ T7907] netlink: 'syz.0.724': attribute type 4 has an invalid length. [ 200.961888][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 201.685656][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 201.802032][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.170657][ T7952] loop1: detected capacity change from 0 to 512 [ 203.296432][ T7953] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 203.543887][ T7957] loop3: detected capacity change from 0 to 128 [ 203.733563][ T7957] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.811686][ T7957] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.842162][ T7964] loop5: detected capacity change from 0 to 1024 [ 203.844402][ T7968] loop4: detected capacity change from 0 to 256 [ 203.898400][ T7968] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.958029][ T30] audit: type=1326 audit(1749866220.298:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 203.974779][ T7968] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 204.043181][ T7964] hfsplus: xattr searching failed [ 204.056338][ T7968] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 204.087010][ T30] audit: type=1326 audit(1749866220.318:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.138709][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.142319][ T7964] hfsplus: xattr searching failed [ 204.191530][ T7964] hfsplus: xattr searching failed [ 204.198123][ T30] audit: type=1326 audit(1749866220.378:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.243654][ T30] audit: type=1326 audit(1749866220.378:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.297375][ T7968] loop4: detected capacity change from 256 to 0 [ 204.303773][ T30] audit: type=1326 audit(1749866220.378:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.329968][ T7968] [ 204.332331][ T7968] ====================================================== [ 204.339368][ T7968] WARNING: possible circular locking dependency detected [ 204.346414][ T7968] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 204.353543][ T7968] ------------------------------------------------------ [ 204.360834][ T7968] syz.4.745/7968 is trying to acquire lock: [ 204.366738][ T7968] ffffffff8f87ab28 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 204.377325][ T7968] [ 204.377325][ T7968] but task is already holding lock: [ 204.384703][ T7968] ffff888142b2c520 (&q->q_usage_counter(io)#21){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 204.389755][ T30] audit: type=1326 audit(1749866220.388:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.394938][ T7968] [ 204.394938][ T7968] which lock already depends on the new lock. [ 204.394938][ T7968] [ 204.394949][ T7968] [ 204.394949][ T7968] the existing dependency chain (in reverse order) is: [ 204.394959][ T7968] [ 204.394959][ T7968] -> #2 (&q->q_usage_counter(io)#21){++++}-{0:0}: [ 204.395007][ T7968] lock_acquire+0x120/0x360 [ 204.395043][ T7968] blk_alloc_queue+0x538/0x620 [ 204.395076][ T7968] __blk_mq_alloc_disk+0x162/0x340 [ 204.395113][ T7968] loop_add+0x41b/0xad0 [ 204.395139][ T7968] loop_init+0x173/0x230 [ 204.395171][ T7968] do_one_initcall+0x236/0x820 [ 204.395220][ T7968] do_initcall_level+0x137/0x1f0 [ 204.395245][ T7968] do_initcalls+0x69/0xd0 [ 204.395267][ T7968] kernel_init_freeable+0x3d9/0x570 [ 204.395291][ T7968] kernel_init+0x1d/0x1d0 [ 204.395318][ T7968] ret_from_fork+0x3fc/0x770 [ 204.395352][ T7968] ret_from_fork_asm+0x1a/0x30 [ 204.395377][ T7968] [ 204.395377][ T7968] -> #1 [ 204.459040][ T30] audit: type=1326 audit(1749866220.388:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.461203][ T7968] (fs_reclaim){+.+.}-{0:0}: [ 204.461240][ T7968] lock_acquire+0x120/0x360 [ 204.478043][ T30] audit: type=1326 audit(1749866220.388:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.481353][ T7968] fs_reclaim_acquire+0x72/0x100 [ 204.481388][ T7968] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 204.481410][ T7968] __alloc_skb+0x112/0x2d0 [ 204.481437][ T7968] alloc_uevent_skb+0x7d/0x230 [ 204.488579][ T7971] loop0: detected capacity change from 0 to 8192 [ 204.491971][ T7968] kobject_uevent_net_broadcast+0x2fa/0x560 [ 204.492007][ T7968] kobject_uevent_env+0x55b/0x8c0 [ 204.492033][ T7968] kobject_synth_uevent+0x527/0xb00 [ 204.499856][ T30] audit: type=1326 audit(1749866220.408:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.501951][ T7968] bus_uevent_store+0x115/0x170 [ 204.501980][ T7968] kernfs_fop_write_iter+0x378/0x4f0 [ 204.511465][ T30] audit: type=1326 audit(1749866220.408:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884a18e929 code=0x7ffc0000 [ 204.512160][ T7968] vfs_write+0x54b/0xa90 [ 204.671966][ T7968] ksys_write+0x145/0x250 [ 204.676820][ T7968] do_syscall_64+0xfa/0x3b0 [ 204.681843][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.688256][ T7968] [ 204.688256][ T7968] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 204.696092][ T7968] validate_chain+0xb9b/0x2140 [ 204.701383][ T7968] __lock_acquire+0xab9/0xd20 [ 204.706606][ T7968] lock_acquire+0x120/0x360 [ 204.711643][ T7968] __mutex_lock+0x182/0xe80 [ 204.716663][ T7968] kobject_uevent_net_broadcast+0x27e/0x560 [ 204.723082][ T7968] kobject_uevent_env+0x55b/0x8c0 [ 204.728630][ T7968] loop_set_status+0x4d3/0xaf0 [ 204.733923][ T7968] lo_ioctl+0xa5e/0x2410 [ 204.738689][ T7968] blkdev_ioctl+0x5a8/0x6d0 [ 204.743724][ T7968] __se_sys_ioctl+0xfc/0x170 [ 204.748866][ T7968] do_syscall_64+0xfa/0x3b0 [ 204.753900][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.760316][ T7968] [ 204.760316][ T7968] other info that might help us debug this: [ 204.760316][ T7968] [ 204.770540][ T7968] Chain exists of: [ 204.770540][ T7968] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#21 [ 204.770540][ T7968] [ 204.784315][ T7968] Possible unsafe locking scenario: [ 204.784315][ T7968] [ 204.791768][ T7968] CPU0 CPU1 [ 204.797126][ T7968] ---- ---- [ 204.802488][ T7968] lock(&q->q_usage_counter(io)#21); [ 204.807880][ T7968] lock(fs_reclaim); [ 204.814389][ T7968] lock(&q->q_usage_counter(io)#21); [ 204.822306][ T7968] lock(uevent_sock_mutex); [ 204.826899][ T7968] [ 204.826899][ T7968] *** DEADLOCK *** [ 204.826899][ T7968] [ 204.835030][ T7968] 3 locks held by syz.4.745/7968: [ 204.840041][ T7968] #0: ffff888024b17400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xaf0 [ 204.849482][ T7968] #1: ffff888142b2c520 (&q->q_usage_counter(io)#21){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 204.860145][ T7968] #2: ffff888142b2c558 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 204.871067][ T7968] [ 204.871067][ T7968] stack backtrace: [ 204.876951][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.4.745 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 204.876977][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.876991][ T7968] Call Trace: [ 204.877001][ T7968] [ 204.877011][ T7968] dump_stack_lvl+0x189/0x250 [ 204.877052][ T7968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.877087][ T7968] ? __pfx__printk+0x10/0x10 [ 204.877111][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.877137][ T7968] ? print_lock_name+0xde/0x100 [ 204.877160][ T7968] print_circular_bug+0x2ee/0x310 [ 204.877185][ T7968] check_noncircular+0x134/0x160 [ 204.877209][ T7968] validate_chain+0xb9b/0x2140 [ 204.877238][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.877265][ T7968] __lock_acquire+0xab9/0xd20 [ 204.877299][ T7968] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 204.877326][ T7968] lock_acquire+0x120/0x360 [ 204.877355][ T7968] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 204.877388][ T7968] __mutex_lock+0x182/0xe80 [ 204.877408][ T7968] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 204.877439][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.877464][ T7968] ? vsnprintf+0xe11/0xf00 [ 204.877493][ T7968] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 204.877520][ T7968] ? __pfx___mutex_lock+0x10/0x10 [ 204.877538][ T7968] ? add_uevent_var+0x278/0x450 [ 204.877566][ T7968] ? kobject_uevent_env+0x50a/0x8c0 [ 204.877590][ T7968] ? __pfx_add_uevent_var+0x10/0x10 [ 204.877616][ T7968] kobject_uevent_net_broadcast+0x27e/0x560 [ 204.877645][ T7968] kobject_uevent_env+0x55b/0x8c0 [ 204.877675][ T7968] loop_set_status+0x4d3/0xaf0 [ 204.877712][ T7968] lo_ioctl+0xa5e/0x2410 [ 204.877742][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.877766][ T7968] ? stack_trace_save+0x9c/0xe0 [ 204.877791][ T7968] ? __pfx_lo_ioctl+0x10/0x10 [ 204.877821][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.877846][ T7968] ? kasan_save_track+0x4f/0x80 [ 204.877878][ T7968] ? kasan_save_track+0x3e/0x80 [ 204.877909][ T7968] ? kasan_save_free_info+0x46/0x50 [ 204.877935][ T7968] ? __kasan_slab_free+0x62/0x70 [ 204.877953][ T7968] ? kfree+0x18e/0x440 [ 204.877984][ T7968] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 204.878011][ T7968] ? do_dentry_open+0x35e/0x1970 [ 204.878037][ T7968] ? vfs_open+0x3b/0x340 [ 204.878061][ T7968] ? path_openat+0x2ee5/0x3830 [ 204.878093][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878120][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878144][ T7968] ? __lock_acquire+0xab9/0xd20 [ 204.878176][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878201][ T7968] ? __lock_acquire+0xab9/0xd20 [ 204.878234][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878258][ T7968] ? __lock_acquire+0xab9/0xd20 [ 204.878301][ T7968] ? __lock_acquire+0xab9/0xd20 [ 204.878352][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878378][ T7968] ? is_bpf_text_address+0x26/0x2b0 [ 204.878414][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878442][ T7968] ? is_bpf_text_address+0x292/0x2b0 [ 204.878475][ T7968] ? is_bpf_text_address+0x26/0x2b0 [ 204.878509][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878533][ T7968] ? kernel_text_address+0xa5/0xe0 [ 204.878561][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878585][ T7968] ? __kernel_text_address+0xd/0x40 [ 204.878611][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878636][ T7968] ? unwind_get_return_address+0x4d/0x90 [ 204.878670][ T7968] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.878693][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878717][ T7968] ? arch_stack_walk+0xfc/0x150 [ 204.878743][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878767][ T7968] ? stack_trace_save+0x9c/0xe0 [ 204.878790][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878814][ T7968] ? stack_depot_save_flags+0x40/0x900 [ 204.878844][ T7968] ? __entry_text_end+0x1020b5/0x1020b9 [ 204.878872][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.878896][ T7968] ? kasan_save_track+0x4f/0x80 [ 204.878928][ T7968] ? kasan_save_track+0x3e/0x80 [ 204.878959][ T7968] ? kasan_save_free_info+0x46/0x50 [ 204.878985][ T7968] ? __kasan_slab_free+0x62/0x70 [ 204.879003][ T7968] ? kfree+0x18e/0x440 [ 204.879034][ T7968] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 204.879057][ T7968] ? security_file_ioctl+0xcb/0x2d0 [ 204.879079][ T7968] ? __se_sys_ioctl+0x47/0x170 [ 204.879110][ T7968] ? do_syscall_64+0xfa/0x3b0 [ 204.879128][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.879160][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.879185][ T7968] ? do_vfs_ioctl+0xf37/0x1990 [ 204.879218][ T7968] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 204.879253][ T7968] ? kasan_quarantine_put+0xdd/0x220 [ 204.879285][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.879313][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.879337][ T7968] ? blkdev_common_ioctl+0xfc3/0x2450 [ 204.879370][ T7968] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 204.879396][ T7968] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 204.879420][ T7968] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 204.879456][ T7968] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 204.879480][ T7968] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 204.879506][ T7968] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.879539][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.879563][ T7968] ? __lock_acquire+0xab9/0xd20 [ 204.879602][ T7968] ? __pfx_lo_ioctl+0x10/0x10 [ 204.879629][ T7968] blkdev_ioctl+0x5a8/0x6d0 [ 204.879662][ T7968] ? __pfx_blkdev_ioctl+0x10/0x10 [ 204.879693][ T7968] ? __fget_files+0x2a/0x420 [ 204.879718][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.879742][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.879767][ T7968] ? __pfx_blkdev_ioctl+0x10/0x10 [ 204.879799][ T7968] __se_sys_ioctl+0xfc/0x170 [ 204.879832][ T7968] do_syscall_64+0xfa/0x3b0 [ 204.879851][ T7968] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.879884][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.879904][ T7968] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.879928][ T7968] ? exc_page_fault+0x9f/0xf0 [ 204.879961][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.879982][ T7968] RIP: 0033:0x7f080cf8e929 [ 204.880002][ T7968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.880019][ T7968] RSP: 002b:00007f080ddd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.880041][ T7968] RAX: ffffffffffffffda RBX: 00007f080d1b5fa0 RCX: 00007f080cf8e929 [ 204.880057][ T7968] RDX: 00002000000000c0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 204.880070][ T7968] RBP: 00007f080d010b39 R08: 0000000000000000 R09: 0000000000000000 [ 204.880083][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.880096][ T7968] R13: 0000000000000000 R14: 00007f080d1b5fa0 R15: 00007ffec7061518 [ 204.880118][ T7968] [ 205.681187][ T7972] loop1: detected capacity change from 0 to 512 [ 205.750339][ T7976] syz.4.745: attempt to access beyond end of device [ 205.750339][ T7976] loop4: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 205.766761][ C0] I/O error, dev loop4, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 205.781499][ T7972] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 205.795591][ T7976] syz.4.745: attempt to access beyond end of device [ 205.795591][ T7976] loop4: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 206.324681][ T7976] syz.4.745: attempt to access beyond end of device [ 206.324681][ T7976] loop4: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 206.345820][ T1142] hfsplus: b-tree write err: -5, ino 3 [ 206.354346][ T7976] syz.4.745: attempt to access beyond end of device [ 206.354346][ T7976] loop4: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 206.385921][ T7976] syz.4.745: attempt to access beyond end of device [ 206.385921][ T7976] loop4: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 206.461522][ T7976] syz.4.745: attempt to access beyond end of device [ 206.461522][ T7976] loop4: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 206.513195][ T7976] syz.4.745: attempt to access beyond end of device [ 206.513195][ T7976] loop4: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 206.514232][ T7972] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 206.561818][ T7976] syz.4.745: attempt to access beyond end of device [ 206.561818][ T7976] loop4: rw=0, sector=160, nr_sectors = 1 limit=0 [ 206.638889][ T5832] syz-executor: attempt to access beyond end of device [ 206.638889][ T5832] loop4: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 206.663926][ T5832] syz-executor: attempt to access beyond end of device [ 206.663926][ T5832] loop4: rw=524288, sector=161, nr_sectors = 1 limit=0