last executing test programs: 7m22.531398595s ago: executing program 32 (id=38): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce19", 0x59}, {&(0x7f0000000800)="104b0b7073fbd7f77a846bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c", 0x6a}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d9", 0xc9}, {&(0x7f0000000340)="195ca1e84c12829160283de4f634ba203fee4d872e86c3dd408dbae7edffb39f301f8a933a640bd2581f26fde59de5869a945b960d6d87a4706b64ec96592d5ea5e105bd583c18cd854dc50ce949f490816d2288b71f1384d3db8dd0c7a17cd6a21e8bb8da0e70d1def896758b6e0ec3cd1b9e78a6fac968a75f559657b3ad63d17d13c5f1a162443df8cf3f630949cfcbc2f54adbc2", 0x96}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d023e", 0x6}, {&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468ef760112d01b4046540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d933167102a2", 0x71}, {&(0x7f0000001a80)="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", 0x160}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="97ee3b3f46983bb5afd79fe0b01666b2e1daf0709becb91257e88f024ddf07e66c8c7e6258b63b2b9a7cfe015be3d6f9805eea42c6ca6c3cee479f419d63066c0913def93694cf34e6cd93de6cfc6485ecb798231941cd45eba3ba6c232631d78832a9f7fb1b51c81ff248af73dd239f0dd900a024a118b51d0bb4049198388f722aeba7e1f972ef22746c7f62090334575b91bdde999b63e4d36fc9414a4e29ae87f6486d32e9b5046aa05fc23afb5a8a2e6f79346107249edc7d8fe6841b11b2a89d6b25a5db85151ac9048918dbcee8217db4d82ef34b59e60b005adf", 0xde}, {&(0x7f0000000200)="066bb3d3b0b8b5d4577115b4ad68b3b7447796b717b00cba3b8c82501372953c238c4a37c0f717764be024ab7165a0247ba060e50777c0b41420a065", 0x3c}, {&(0x7f0000000940)="c0e25e28e2affcddead2a5f7f2e0da0d076f7adefcde2176a074b72a1d08b01afd61054f933b223a57a5ad1c97acffa70b864aeea61a758c179beb9a7e795a5fdd01932e24d0429cb1faa7f6b2cd5fe5b02a1ef34dfe1d63", 0x58}], 0x3, &(0x7f0000000dc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x12}}], 0x60}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m1.003894514s ago: executing program 33 (id=137): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@flat=@handle={0x73682a85, 0x101, 0x4}, @flat=@weak_handle={0x77682a85, 0x1001}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x17}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6m47.908500082s ago: executing program 34 (id=207): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000480)={0x40, 0x9, 0x1, "ce"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6m35.742980954s ago: executing program 35 (id=188): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x54, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2, 0xff}, 0xe) shutdown(r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 6m10.031049821s ago: executing program 36 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x20000000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000400)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@errors_remount}, {@nombcache}, {@noload}]}, 0x3, 0x44a, &(0x7f0000001380)="$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") 6m8.114077175s ago: executing program 37 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 5m57.583427106s ago: executing program 38 (id=353): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r3, 0x0) 5m39.929625842s ago: executing program 9 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x5, 0x40003, 0x80, 0x2, 0x4, 0x9, 0x4232, 0x0, 0x7, 0x9, 0x7fffffff, 0x5, 0x7, 0x4dbd, 0x0, 0xfffffdfffffffffd], 0x8000000, 0x80300}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m39.166787974s ago: executing program 9 (id=519): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) accept4$inet(r2, 0x0, &(0x7f0000000280), 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x38, 0x40}, [@IFA_CACHEINFO={0x58196e3255f644aa, 0x6, {0x5, 0x69, 0x4, 0xed}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m38.662362264s ago: executing program 9 (id=520): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200002, &(0x7f0000000d40)={[{@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@fat=@uid}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 5m36.688422424s ago: executing program 9 (id=533): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000a40)=ANY=[@ANYBLOB="10000000f3030000000000000000000010000000eb03"], 0x420}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0xfffffffffffffffe, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006740)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="f5", 0x1}], 0x1, 0x0, 0x0, 0x80c0}], 0x1, 0x1) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 5m36.342783852s ago: executing program 9 (id=534): r0 = gettid() r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 5m35.075844074s ago: executing program 9 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/242) ioctl$PPPIOCGFLAGS1(r3, 0x40047452, &(0x7f0000000100)) 5m34.931796016s ago: executing program 39 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/242) ioctl$PPPIOCGFLAGS1(r3, 0x40047452, &(0x7f0000000100)) 5m21.118280201s ago: executing program 5 (id=588): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="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", 0x0, 0x59c}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0xca, 0xfffffffffffffffe, 0x0, 0x3, 0x100], 0x1000, 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m20.75816843s ago: executing program 5 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 5m20.383886541s ago: executing program 5 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x0, 0x0}, &(0x7f0000000080)=0x40) 5m20.156897589s ago: executing program 5 (id=594): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x443, &(0x7f0000001040)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf5, 0x0, 0x1, 0x40, 0x6, @local}, 0x14) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000000, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x6f) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 5m19.581014395s ago: executing program 5 (id=598): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x800) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 5m18.339920416s ago: executing program 5 (id=600): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mkdir(&(0x7f0000000300)='./control\x00', 0x60) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x94c10, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@barrier}, {@data_err_ignore}, {@resgid}, {@bsdgroups}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mkdir(&(0x7f0000000180)='./file0\x00', 0x163) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)='./bus/file0\x00') 5m18.120230614s ago: executing program 40 (id=600): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mkdir(&(0x7f0000000300)='./control\x00', 0x60) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x94c10, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@barrier}, {@data_err_ignore}, {@resgid}, {@bsdgroups}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x163) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)='./bus/file0\x00') 4m28.250196881s ago: executing program 2 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'R'}]}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m27.52920925s ago: executing program 2 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) 4m26.227975565s ago: executing program 2 (id=806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4m25.957485117s ago: executing program 2 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x12) 4m24.594847306s ago: executing program 2 (id=813): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) utimes(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 4m23.676977471s ago: executing program 2 (id=820): r0 = open(0x0, 0x1013c2, 0x1c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m8.355196588s ago: executing program 41 (id=820): r0 = open(0x0, 0x1013c2, 0x1c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m29.698097111s ago: executing program 4 (id=973): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) 3m27.239316469s ago: executing program 4 (id=981): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$binfmt_misc(r3, &(0x7f0000000640)="df", 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e5d, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x78}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 3m25.832164603s ago: executing program 4 (id=992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0xfffffef0) openat2(r5, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001b000)=ANY=[@ANYBLOB="3c000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="3c45070000000000140012800900010076657468000000000400028008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) 3m23.319251826s ago: executing program 4 (id=998): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m22.323305766s ago: executing program 4 (id=1001): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000880)="8e4d", 0x2}], 0x1}, 0x4040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) r4 = socket(0x840000000002, 0x3, 0x100) unshare(0x22020400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m20.394306132s ago: executing program 4 (id=1009): syz_emit_vhci(0x0, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r3 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x6) 3m4.601250128s ago: executing program 42 (id=1009): syz_emit_vhci(0x0, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r3 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x6) 2m47.178006435s ago: executing program 1 (id=1097): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) 2m46.054351756s ago: executing program 1 (id=1100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000000730a00fe000000007704000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 2m45.103451873s ago: executing program 1 (id=1103): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1, @in6=@mcast2, 0x4e21, 0x4, 0x4e23, 0xffff, 0xa, 0x20, 0x20, 0x2b}, {0x5, 0xbe, 0x0, 0x8, 0x9, 0x2, 0x0, 0x8}, {0x6, 0x12d, 0x76, 0x5}, 0xc, 0x6e6bb7, 0x1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x3502, 0x2, 0x3, 0x1, 0x728, 0x7fffffff}}, 0xe4) r3 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x9) 2m44.02052508s ago: executing program 1 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2m42.788267829s ago: executing program 1 (id=1108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) 2m41.932476859s ago: executing program 1 (id=1112): syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) r2 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 2m26.629185685s ago: executing program 43 (id=1112): syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) r2 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 18.862764177s ago: executing program 8 (id=1394): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2280c2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0xc891) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) write$cgroup_int(r0, &(0x7f0000002040)=0x1, 0x12) 17.496086497s ago: executing program 7 (id=1398): r0 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 17.187721952s ago: executing program 8 (id=1399): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001100)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000001240)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f0000001580)={0x440, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x2, 0x37, [0x8000, 0x7fffffff, 0x0, 0x222ae7b, 0x0, 0x6cbe6681, 0x5, 0x1, 0x5, 0x3, 0xaff, 0x9, 0x2, 0x800, 0xde4, 0xc5f, 0x6c16dc08, 0x1, 0x9, 0x0, 0x4000, 0x5, 0x2, 0x8, 0x7, 0x401, 0x5, 0x0, 0xffffffff, 0x3, 0x2, 0x400, 0x0, 0x19a7, 0x408, 0x3ff, 0xfffffffa, 0x7, 0x81, 0x1fffe0, 0xfffffffd, 0x5, 0xfffffff7, 0xfffffffb, 0x3ff, 0x401, 0xa0, 0x6, 0x9, 0x4, 0x9, 0x6, 0xe, 0x528, 0x3, 0xdf, 0x2, 0x7fffffff, 0x6, 0x100, 0x6, 0x6, 0x8b91, 0x7], [0x2, 0x8, 0x3, 0x3, 0x8, 0x9d, 0xa, 0x7e80, 0x5, 0x0, 0x401, 0x3, 0x8, 0x9, 0xff, 0x3, 0x6, 0x4, 0x7f, 0x6, 0x800, 0x6, 0xfd, 0x4, 0x16, 0x1, 0x10000, 0x3, 0x7f, 0xe, 0x0, 0x5, 0x2, 0x1ff, 0x400, 0x2, 0x2, 0x8, 0x3, 0x9, 0xfffffff8, 0x5, 0x8, 0x13, 0xf, 0xd8, 0x4, 0x1, 0xd, 0x6, 0x8, 0xffffff7f, 0x6, 0x6, 0x1, 0x6b, 0x5, 0x6, 0x9, 0x4, 0x7, 0x8, 0x1], [0x361e, 0x7ff, 0x1, 0x7, 0x7, 0x80000000, 0x5, 0xc, 0x3, 0x6, 0xbccf, 0x6, 0x2, 0xdb6, 0xffffffff, 0x1, 0x600, 0x1, 0x8, 0x9, 0xfff, 0x4, 0x3, 0x6, 0x5, 0x287d52bf, 0x7, 0x7fff, 0x6, 0xe, 0x0, 0x0, 0x100, 0x0, 0x8, 0x7, 0x1, 0xa5ec, 0x7, 0x6, 0xd8, 0xb2, 0x9, 0xe6, 0xe, 0xffff, 0x3, 0x7, 0x2, 0x7, 0x9, 0xd, 0xe2dc, 0xd1d2, 0x80000001, 0x6, 0x80000000, 0xb2f, 0x1, 0x6dc0, 0x5, 0xc2, 0x8, 0x5], [0x1ff, 0x0, 0x7, 0x1b, 0x447a, 0x912e, 0x80000001, 0x3, 0x0, 0x4, 0x1000, 0x5a7, 0x24, 0xffff2f83, 0x7, 0x2, 0x4, 0x7, 0x3, 0xa, 0x7, 0x4, 0x3, 0x9, 0x4, 0x6, 0x4, 0x1, 0x9, 0x9, 0xb056, 0x80000001, 0x5, 0x4a, 0x1, 0xffffffff, 0xd, 0x6fb6, 0x10, 0x21, 0xd, 0xffffffff, 0x4, 0x3, 0x0, 0x9, 0x7, 0x4, 0x800, 0xfffffffd, 0x7, 0x80000001, 0x7, 0x10000, 0x6, 0x6, 0x9d, 0x0, 0x1, 0x427, 0x1ff, 0x4c0abe87, 0x5, 0xfffffff2], 0x1e, ['/dev/nullb0\x00', '/-){:]/*\x00', 'qnx4\x00', '{&\x00', '\x00']}}, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x40884) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x80045440, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 16.011965316s ago: executing program 8 (id=1400): r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1000}}, 0x14}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0179e08}) epoll_wait(r1, &(0x7f00000002c0)=[{}, {}], 0x2, 0xc) bind$netlink(r7, 0x0, 0x0) 11.769511806s ago: executing program 0 (id=1405): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 11.758476897s ago: executing program 8 (id=1406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) getdents64(r4, &(0x7f0000000080)=""/147, 0x93) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 10.420105395s ago: executing program 7 (id=1407): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6(0xa, 0x2, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[], 0x0) 9.784115265s ago: executing program 8 (id=1409): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 9.582678892s ago: executing program 6 (id=1410): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x300, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010003c0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0xf11d}}, {@utf8}, {@dmask={'dmask', 0x3d, 0xae4d}}, {}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {@utf8}, {@errors_continue}]}, 0x1, 0x152d, &(0x7f0000001f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) 9.560058104s ago: executing program 0 (id=1411): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x0, 0x32, 0x0, 0x1, 0x1}, 0x28) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x60000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(r3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r5, 0x851, 0x400000000000000) 7.639943267s ago: executing program 6 (id=1413): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x7, @mcast2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000340)="82cb984bd2d33b3021f759b41f320f60523adbd232f56e910c6f8bb7917541bc12b01656381b9034db3f76f4113f15cf69c31af7e7ca575bfa722080e58bff985dc16155d641c38034f94e333977623776b0248bda72cc88445b650e653d13040c61f8f086ca9260a9af5eb101c6001b5f58f1b6d0885c14", 0x78}, {&(0x7f0000000440)="97562805c7adc4474dc82502e78c80b2bdf44eaef127f2779ddc9f281b805f9b1c639052a78b7e22ed490ca2dc23b45624fbffec7c5dd6ed5e50d73230292d5bbaa60c722061c2c9841fc8589a9b06e1cf61bfb83c425dbb69e53c9c5a91dd8586985a9e837e41153eddb101fd9e9e297863bc41e2eeace572b00142d7fb163cf78da3542573128d636ead697f39a422dfd8ef43263fc08a561833235ef5f478431149036d", 0xa5}], 0x2, &(0x7f0000000500)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x800}}, @rthdrdstopts={{0x148, 0x29, 0x37, {0x23, 0x25, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x1, 0xee, "b251437a32d827eb493822e47882dc9140f4ac16b8cf51aa4c55806ddd5c66d8ad64f837c88cdf2bdb44c89ed7933ddc61262c1dfc77c556378f759b71e492405ff31f0542bba24a879ed021db09672fd819e04285e18c24de0266c033a4816e8fad90feff685e62494d192aba9d4601b0c1e513ac2f9e1801396b1275019192adae419386bd6ff5653c7f4e735d843429877b032ce3c027130a6aec366db1aee2dc2707c2e3fa52d4bc10f8a1d7c3cbf946bf08a8ff3e4018feb0357304b74cf911476f469c7c064ab0adb7c3148e6fe8ff15092a5059df5401413d0cb329222da438026be5a6eafbe06642ef32"}]}}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0xff, 0x14, '\x00', [@generic={0x6, 0xa0, "db63b310039c3a46d5d7de5ab3b692a4fba6e73afe12a47d56050b1c59da44916f2f1451d2fd065c2c0f076c3a8030bfe4d26da6ed7ccdbb52bf73a982373f3abf5779c8dbf984ee7f524e061ab7c36feaa41d0aa3976acf2ace95141710e22b87e96fa443dd25423a766757b73eac161fe5a6486eaa0ce8f0b639e6bf5dce01cf52f46e07776eaa5bfaf7c41be9c5ecc433f5df419ed5330a24990e1d81bddf"}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x5e, 0x6, 0x0, 0x5a, 0x0, [@remote, @private2, @empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x2b8}}], 0x1, 0x40004) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@bcast, @bcast, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfrno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r8, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) r10 = syz_io_uring_complete(r8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r11, 0x10f, 0x82, &(0x7f0000001d80), &(0x7f0000000000)=0x4) close(r10) 7.409389126s ago: executing program 3 (id=1414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, 0x0, 0xf) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0x0, &(0x7f0000000380)={0x6, 0x80}, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000002140)={{}, 0x7, 0xff, 0x2}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 7.335421132s ago: executing program 7 (id=1415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3], 0x50) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 5.748439289s ago: executing program 0 (id=1416): write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x9, 0x203104, 0xc, 0x7, 0x401, 0x7, 0x0, 0x0, 0x80, 0x8}}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000340)="f6ecc35ecff6796100f236f757cafe08f02725ce04c090dbe747d4f5ce27aa6ea4f3f92515cc63e09c84679e4e6363704b4c156135c808b71e", 0x39}, {0x0}, {&(0x7f0000000580)="3af36ffe5ae18eefcc87a22877", 0xd}, {&(0x7f0000000600)="daf6a865dbdb0d44bfbe44ec87978e934809ec890a060a6fb55e1c0eec", 0x1d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000980)="7cfb74fafe0b9e8b30b676d3abdbc0549b80acb76934c3e8d06f4ac0f0d7dcef56f47a6add8f7718f363c0268e04d2ff1cf2c0cc0a5f74989ada9091559af4bc5ec45c82cfcc1cbeeac788f505a76727124ad9c506087c7ef86c640519ceb3729f9077c8b5a02dbaabae2a8cb7967598fac0f9e7f5e78a895908c51bd0958125d9b75db3dc99236260d8a16188d18ab7bbaee5b3aacea581", 0x98}], 0x1}}], 0x2, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.748303159s ago: executing program 6 (id=1417): r0 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 5.74516602s ago: executing program 7 (id=1418): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048005}, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r2, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x20050050, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5.555700765s ago: executing program 8 (id=1419): r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.553199765s ago: executing program 3 (id=1429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.48557376s ago: executing program 3 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x12, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x78, &(0x7f0000000180)=""/120, 0x40f00, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x6, 0x7a21}, 0x10, r1, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x1, 0xd, 0x6}, {0x3, 0x4, 0xf, 0x2}, {0x0, 0x2, 0x2, 0x4}, {0x1, 0x2, 0xd, 0x2}], 0x10, 0x16}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x0, 0x0, 0x2004) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 5.419057426s ago: executing program 0 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) fsopen(&(0x7f0000000000)='msdos\x00', 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="afe28a28263ffd9dbc5af980196765a3c1f82c4a1fae7a322fdf0f6eec50303f6104db417704a701a8d6c5e7f5c99a5cf3eed4e0e1c82545122d6933469933ec605aaf61a5b8b1f8aacbafca498796976da62837e4a0d818ea71474d0412cfe162a7260456c425f2604cbd262e2aef92d09d6d2e105b7e7d377c95ccfe1d0f9af9f7e6a6d85d4a8ebee6fa703efd8c4a106793205a405938d47f97266eaa5fda88f11a03a8305399889ccc48f85c4b6a7747f489dc76c93b06be84635190224018e13954cd2fe714fec88f6aac3c57d5fec99307b8c8327e8854000e81d781e2f5bc37e96bbc3077555f696c6fadd199d9bfbf0997e76925fe17923ac5976e32f52ee407c43070cd8a709a2326ac96b94051cd0cc8f29b43edbc4ed850ae7a30b45db7e72114aeb46bd3a91775582c9206a638456a0e3da847a7be2e21620df89ea7e2da53f77f39cf0eb2d0b601d507d4dd57a534b5c77076052cdb03dd0c241f75f442fdb07624ad9d9fcbba92a4f20b20b424e3c9c92f2831e5efe0be454f3b4dbb9dbe6152bb152206ff0451edeffdbaba54deb39f00e74297c676effb60950dce7a847031ca85a1b3690f573bc31094d6e7d95f5821c0eae6a2685958619d94108eefcbc0dc5dda47ca509878dd8caa875d69af6c88997b5d67e5c67bf9daf89547a55061eb0cc55e2c696b71c7384ba16928fa81f7394a048329c467ef813df172236464f9d1418e5d5386b0eb6d5c4f765d0246ee91ab39c07310b61680788e3a57dab96d1eabe1a0efc2b6c882aed50d993d15f8561bc1f6bde7e79b711bb206685344aae196c1c4b97cd515911341cd60c6ad108e0013f87d063385ea5f057de4315284cb6f8545436981ce1c4bbf13f178e3a504bc0c8b1bead105f7e7622c288aca7206ee18dbb97b1b393d102d9c65e3a765e87f554d98383e4e49ad1c600d8fac4acb970ce04e0c866806bd44b21b5c891c3bccefb87bdf389d6a36992cacfe52b96e7e1014cc58ec29fe0ac221ea6d49f759f20100e7603272d572515fbbb33d2b6f94eb9c6571118b606e18ef88ff88366aa3ecccd6c845f9b8534f49997c940a930693fcdf742fde3676c6cee9eda06ab856a4dfee75c7c9cda6b11da6441644b62116e6fdcae5b5e0148047028a5842c21fb9637771a5ac84ba9740c9c9b56b58c08730a48e81c05b312449edd27843c173d1875c28aeca43761a06fed193378129243aa514bf74d6b76ccd70807440401948d6f3bd9a352cd432e1289f2d4e78add381e4477dd8ac2f2ccd3b6533121ac51c393dc773b9e120ea8194e51d76749b4f0c4e6e40132ba1535015d5ff224ff77310be5a31a6defa004262918136b9db98a94a1fd244be1f5a7cf6762e7bea536df1d312a72776baa881833d295f1a60f2ac98d54f302d8fc72f135ab3256d065a618b60d2a6982ee89c60bac90dd81e0cfc24118c568e8e3a29a9f29e55f479a8fb5638d6cd724605b69aaacafd440020f4776652537454041acc13cdb0bf1489fbac78c4bfae755b259764756407204b22cfe838ddf82523c03b4bc1eeb55c43b1f50b7d03fd4da448ae51cc4a844fd0240e0d131c2693ed770844bf25e3bbea974a5c2a40ed65f1c3a729ed93ec22b93899aa861ce301e1cc1f3e98846a39a49169cbe3eef35e3595207f1014a8dc89d6b512dc05cd23ed4b4741f6ac778794cd1282f42a72301f37816859cb92d53db6793f294df19d0ef1bb453685f3c666b3941c25c92b204c8307c0e83469032f276cef4ce538a4570d652aa212de6fae8ae4d62399de49f0d4bfc0a47fbd79e7a86e12c9d863dde004f9e9d605dac7d688dc5daff78c27bbe727fbab0cd3058e75544261d5d83468ef23e3a224f0ec460855aad927c5c5b3bfce0a3e3c45abb0ee6dbd04242ec765e324209bdf07f4ed21eb15e2f030476fbc3cd05554f54858232625e9b37ac41b8e354ebc85a0282fbf9ad5d6e0c2d7b093bc1f887646faa1e7622f110b546dadf44eff6bafb2a58631a93e560bd67b42ab96d4a9f044f26a481feb8b3f2018a7236799c2d1877a63e5fe64dd207be729eb1cda7977d59bc139e1d2f6cae1defe90b8f6a99ae4dbac317413745521247f3691e894af33c7484afb11f4d2f858ee87e93ad202f9853c6ceee0a92e052225ebf283a017ae2e7cfcf924ea4e3b319a05a9bfe3f476308aa5039fb8a7d3642043957a2090e0727120a7aea16d16e7a4b15d5676966041f76188fb69d89080b6eb2d4d42bc84e298dedda4db06b78df5c7198230ab439f0c3b4f3f649d531664c59eee2d73fe14f01133776b717f6b7118afdb264ace9e44af5bfdf35bfa7f7ab538004c0085c11da725ed284a34c7f27da78acf488bd0f54e6026efbf81af934558c36473d0fdc85519e11b4f30fa3b7ef757c35f4c88a360549def898cc460557433e44621589e71f3118003b4695f3130dc005d32c0330b950c12e430d2a2a6b9a68995bc9e1345dcfa30585603f09e74296cffe8d758b216de00e8302eed0e06f94e7bdf835cf27fcbe57651f36d6d2de82f179f42fc8e7fed4f5c7f5b691c6e038a76cab3e604e42ceda945e155db89cc0013564726053ccd77cd8e626bac72468ae0998f686450d5e0a17ce88e1b15d05f212c336d7cb5013eb94fa861b588be01ed252b487b4d1918c87a341b5daf74f3083bd49ccc6ee26ff8993b5398145ae7f9505c1398f1bdd2cb90636f9e99da243cedccc97252fe15ee10e886c187e5c614f33bbf630c654b1d87e693b765f3a36b67bd1fb46afcd24c96a0b7784e4cabb8a8a5abca853d51694da85296a430b8856f51173946c9f143db65fd1b51b9534657d3a7953ba7186651ddc6f0a625563c3b43cfbc83330507d399ae87731e1ab1f15320779da21d2000d85155a8c9cbd6f642695a565dec615d7bdf8a47a76005b3607cde6176b8303b7eeb2212179d6f5176e45b1759810fcec418e6c41e7b33da9f92211631a070257cea55e644498466d5fc5744f903e6c4a2d3809eb6e70d50a82f66a1a05079ebe9ae0b756bb2781dafd14b1a06c0eb2c9b77b0d8d005d47aacf5447a104f85df3decb0ef8bf1483b47be9c945b95634c474f9cebdc97a91f85aba7172d05cd7b06afa043b8900ab400770fa270029e34ebab31a69367a18057ce532cd66e52b807b8665475977a56ec5407c778994ce9c85e8b96f1313e468cf83d266f14250acee2a4a52001de174d2208bc2a679916e4231fb30a99263a0398e99e9f8236010f17a5de367d673a95b374158d2baae4612ec6898d0fec2f95b45c6bd760a0cabcac1067470492c5e66c11ea745ae803dd24a5c89cac5a0d64bcc15648b1d812be638d10311d640b3251a8001619d09f138bf04e35c02807c2c87c222a6f54da320f0169cece864f4d37af54f0fdcfd455051c0effe17d2c04b3b67807af05cd8176017cd8e35c1ca1b13112f2dddde84be95ef67a6c8ad8a4ab0e7175fd124bda62656c4afec4dc8c0261a855e75575ddbb375e45a5b635fc7bc528ba387dd24f485ba69a9ba2761c243d359bce078d0ba0cdc13b6ee7d66a8546c49a4429af5866f866ba2e1e0a10ff4a3c3b5e240d918f6a896c35f51ad7b02e6d0747ee80a99c8812577600e359b703e571ec18d6b88866f28aef250de65f39b266f6795237f7d3f741127f3d47cefb255d1b3c06c7d8fec9bb8e5c666d7ca7b803dbabc6cacecbca1ed8e89ddc2140f45c4f8572c146d7ab2be20eb72baaee4b1d371aa9f06833ba1a0cb66b701c1fd90e8bcdcfb9bd57a8cad381e7cb2b99250d21384ebf771833ac6f32f4115fcb0ffa177dcae6673b1ff80cbefbaec2c863b263035ad2a0d0a340fed260d4fbf008745bc1b51e5b011b54584f6c0cf3a401f8cfd23f23e830a311bec365064895cbe8a664184aff212bac6f164f6b619e4d8521ae447abc8f59b284aa2e94061aa15afd9070fef452d4fd644da4b6b716784109d92abd31d3221a76eaf592e6529e70a67bd92cdb431c7af9f658b2ace3d954c4a5208f1edcdb8a04461262ed26b24bb3df41b1c28ec42880590b3685f56a3982250ae96c7e1fcb9aa6a9887639d2209cf190e9ea82d5634513eb36c5c0e0769250948967240e29921da36aa0c07c76c81c7bd8b7f1c1c9063b4b1fcd88f63aaf568a7cc9249fad5c996853dd160d80f5251673643fb5e0067c97b0d2b513c1d22a3c2e73786c3c5c17f14c57c2df7c830216e5c3ef066468069428501e1a78c935f4c520c5cfe9daa89ca4bb4895fec8a328453ff630848eeac719bcc09d7bee73e58f4b7cf90f098bb7019c73912b630af92ed9b309c53c5c4edaa3788f9e6d486bd363619cd2c140d9a7175f6c5f977eb6e6f58f18c8d0ace671570e0dd6ed78ca228782ddb71c6f137cf0e27fa85b52b1c15ddf184a72dab098a8b1c1f6746238a8a92848f2478b690b80c131c85e90b69953f5eb54c0b47d59b7e440190e1c9b2d72fdd94c64296ca33aab32cc8f69091df05aaefd4ea00303a3522672f01b5373abae33d34844831a1af2e51276b61e637a93e02e09c306e5fb9619e82bbcf0e43e2f5e8ec8a458b9f1c612634645eb82051fa34f4b13439c3ba2e016972df37f197d09121bd377b1472a2da64698efb11cc88fa36ac173c83ee155b73716639f5d73a29fb783fb27e5ccbab5f9b95a4dca6a7406cd053a7ac9ff25f42ebddd9afe7df308979c314acaacecea602267c6d57fb5f5222e4ccd4b18573b32d6a19f1798a1d78b36b32f0723f7b33b06c2ca43b22e4cce6cda741b3e68a056a0cd6d51b6929cf4a16fb7b2490cbe87e5612dfa7d26ad40ec412021f9033aa2884ee86c7610623fb64663ac5554e694e84877708e77d243bcdb198714fff672b0f927f9cbe5b2436002f02a559dda5232cc150170d7b32d547a080f852c6838809f8ae1995e7ad4b24c7d1ecdb6b5dabca5da671493a3a1b4da1e7ad13ca4b4dbcf53a71348366cef7ee45cb719a8321205aa70da47104e66f344393e64dcfcd015b9d6bc75ec3dd31551de4b614bdc4d89c8de1254a91c4f33cdddf98d8ddf36e8cdc537a7d11dbf51913ca87ca9f644a2a08905e15c0f2bc58168e425b52055e7878ba468909dbed30815e01720df5a1be196471d30c1525070efa59fe62720960e473dc237d7866d77e8ac69cbaa50cea6205b7ccef9437b132f41e87906f3b9c48e9750e7ed1993597f8e599ab8596f4378853ee10e26289e72b92c425f5f0ad0f94d4694415739ccfc06bc5a49237157071116578df4f8aaa1eb4c123c8ada753e4a631f3f9660fbc9404d8af9ef1af380ccee1f2e520c03615fe7c5d276e917d84061f8cc0e5814caac9ecb0ebdf8bfae551197d66ff22236832a0ac38586b059a4ae9054d1810d361f50da921b33904cb6ea7faf44b811e7f7348d07cd32c8f83da01d4d74092493ef5cd3d2cbb9eeed6986f3e4615b8d341cbe13d6eac3bc1e9217fc2f86dd0cab958a6b4e0f0604501b48d352118611e96a974e3642fa785538e7d5b3bc7a363ca95a98a0816e6179bb438f3c110036770da0978987ebcd241464136b2a8d45bf1c2b499b6dba8e44448c73163ae7df71d7c98b705af886dc195cc918c2552fc1696d6749222a4e83279a14001ccb540a64a713fa1691c30e99ae0bf8fdacaaf4aea9d4f89db7d4f364f7a30c80b782f5cd7af01347d78769902f2ed675b6b859b5467cad1bed59a64f13a4b5a827e029c9a3107b08e5f18b930855f7d85f1d78d45d7d3c909b87213158dbe5cfda90936388885a32a61529ab30bf31fcc1d6df9ead0f49ada899dc8be042d2289383f6d09411aea11e6002359ff2e36345b8454ec5f126db94349666a3666323ca164a0f72873b63c9dcc0c60785a66862655d4ab5749bc00bd98ba9e20325e78a572fc93739ce884f3398218c614f8ea33cdff4b797dc2c2874d20670733f30acf52ae4d14c9e83f54533acd42931ea42fcbf89f7a8e602008ecefa4a1e1c693244d4604f9488df30718c455f719a6d93b30173305264c9bdb21e8a68a74e7310dbecdc27afc7b162466c444ce4bda0d937104e683349828a4f0ca8723d54fe13287286f7a6dbb8ece6a7ece355fbee7424e7e524ec33ed5fed03a1ea964af0830108c5e69a071606d9d28450977245cba4d0e1ed8177752526e218cb5e113dff2236c663808533c580da3d83ad502a3d5d30949ca2cea660ccb613cc7661d6857b3b70588976ac8ceed944f7f738e43101369bea05a26ff31692ab45b6c95f794a5c92d8bd42ce8803162cc730782e0c1e468c9d090488763d9d1f1471c2ab1cd8599e078d81a0e84707ea02a0f91c3d588bb54f1f5ba58845617b80263ab8fb2c6757d72eebe00591c7b6cffddb969f6fee2ef9f016f641aa2ccfd59c839ba40ac1a10bb9d94f96e1c6829dd4d2dcb9d0f71726c31d813fa78af8b7621fa47f4b0ed9d9d98e4209676969728a00a92dd592dfee41c806076f0e4100e371c7427f888ef91f03c5b16d87b2ade294f69b77afb199de38bfebfa3ec9285d1829c7c0714bd100c84efc8eb71146a1d4c7f659d77c42119b738d6bcfede23855780a6627d4a417aab498ec60bf69c44fc1f3fd4f99ed941a1234ad1f3120dcc71275c464be23453749841dc1c36a76b28b3659e809a1216aea67658ff76e99580cb202eedb9d4cab23e879723d11f8d4086362271f8f2e6816d47eaeaa5066c3c4338868fd3c8b832581490b6801278e9d1d59771dcc73eef6b9903ba9b9f5e565eece392568c878662ad9cbb931242a27d883fe7839e7e502c368e736f5dc057ed2e4b5c963c54712c772535e22e94c61a13ed50682c065cad0d861b3888ef332ed0236e2747720f97793b46eb39b51057b44f2b9e05de8c077cff7ef5afb56a5d28754d76161909a05573f8aaee5fdf260d80eda7e1b83539e09362a4f9aa0e8f069e0cf221eca87593457b342de27c99cf14c4bc0d8050aa19c8e4a56b3b5d2c3fcc23633f5ab20ec063270c9922292b645a5523f9bba5c6f66368c227bb4b2ad6c1f4c8927552f6b41a312a4bec49669e2968a7d6bf30cf09f8d3fb473ce5a839ed27fa906dbf504aec3a5a2884bf4c569235202dffa763b14f4501ecb8608e77aeb4fda0e4177fad0bc02da3224f183355ad62f6c50efa3c8f8e02bf3cf47ff31210606bb87ce4acb53ead7eff942d65d9905e9bf6acf5829eed4855da2488e0896ad346da16a5c988e31b0632592a2dc3030d28b6d62a3a4638a0a3736f5103ce5fe72baac7fa23d5295c42cd81075ca9f7a9a7fe3cf418f50f7eccd8a7c3e6fb1e8b30c5d8dbb0772a8b44f44cebd8249ce10eb24d1f668765796b4a56a482580456ac49db677284f3b2deaa9514973ad5c156bb4961b2ad05bcde1bcea522790765208eab6eb27777c2ef643ab0c85e9625d259ae29a3b2e864bf936cefd90b63ba2281f8bf8505ef6040335c258d338c014c31810a324dfe382699ac0b92a2747973a297e94fcd75ec7d156bd61cf848d7144f9a9dd89c72b9c323ed6f37110f722da90396816050ad800fb33a92651b0356fd15c4cf876a3509ab32cca3f5bd6906ce5ec186391effb13fac0a10525622023645bfb9742472695c81461db0298f84af1983b6e5e94ae355e0e790fb51fe558bd70e889744872c9ababf42b930340e192ab4295ee72e1392f2bbb137533a919d72e651cbafa37a88232d0f464bd4531e49c65abd629f3e8b920ae3bde61a3538514866f18a937848f7bd99e4a0fbea506b9ee5ab47e41cad31dc261020f91d65c88bf2251c617cfde3314ec540c8128adf417f1ee716473c3d3c049dc7714a832c128869bb4a9bad6f8be1b0a6bb5c0e40417d594a876a5fb50055e7c67e2519698e5ca89fada7c84032a811b0eb5c67364ea809c6be960c9a7b98afc8e6315e780d8f556b97ea65b7fd27ca6fab61164d60a109d182b9b8f7995ee915eb68be320000db4b0bb821ce13a8d55ff70629a5f2bb89a1c7a4b874b49bcb13105493a9560344f89877e7c5e409a15bcda6d27073c3b744b386b0b82098d307dc3aab1ead4306a73cf8382bd3451c0aaa14a8333c6f34e6b5e5d3b240e01243749b3938840c835e16129ddca5d9439511b4fd22752d904dcd60f9405467918e48fa18047493e51a14ccb47128c7449b51cef63178f32cb06155b9e9cb65dba65f8a6f9a45d8d49852609dd0cf8418f463cb15eaaea77c1c89f530c1f6c6c7820d66957ff2fe731628a328f4e7896d5cf6fcc0782c05c47b8f01d28908913e379334fa90ea01906e865202fc6386fc69fb683a1dfd037ec5bbdb368b3530a3cbbbecf2107faeaf32081c65b48a3bd352998df0a781dd86c7c8112407db1bf1ac6446a0c77e8f2e3374fb8217abd59b3d40c9582a3ab663f278a83b22685914b4b2bacc973ffb2dec5e6eb98d6c16463c1e9a896ca4e65206687ca4423c359b4e1ce06a57ecb083b750026719dff109a1d823b4ccff79e5ce416bf3756d913b31faad8c0bab1c62276a581ba8830da7c59c5224db7dd38b032db7cf7022502a8f3cef31dc8344a2d02af978d6f901b1b0097dc425f4f34b73c6ee02a8b48d7a23299c1c6e5190221f84c2ecfe5bdb67b36c5dc23455ae466722c5e4f52b07aa667a6cb55c6a411225e88cf513c7cdd2065a1e044c0008f8b6a5b28f3f00f14e7da47e944ca666cec951593ac26ce5e75f17ca2d438dd8f926ac57d1761a72024187a2f77ef42a7d246f906166afecdcdcf8db8cef6f8855ecd97185fda05bae717eaf3165b99021fbdcee50384a22c8c025c8f82d4839dcb0a6075642dc453c21a4dcdc997d70315dce9a3ac7eb0185924436965d1376624b5c08772ba59b142a066bcd0ad044628e463921d78f1efcf8e8cd1e0fcf525115ae2b104c31561574003770c21e847ab80b65d3a2b53e6ad4a3d5227e3bc82b58b5feabc9c70b55264b32b658227851518664baa871f8128bd826ce818be1edef708e033155ed69a0bd83b246d83ac85b33d7370dcc7f930c25609e2e5f86f1738ba266b079a3743180b9b84a24e4915b1743834ec319e5b238ba6942e4128348be821b21892477e4c5ad3a2031f0ef11d9d54cc90f87cf093e582b1384c8960c36421969f7ee247001f37c66f10ff6dc3edc7de984acb599e9b8bd3e792855ddc703698578edfe74bd27e967dbe77bd4cd0bcbe08ebfa7c5bf95745e670438097ee29215d3ecbde9e8e50e14ec41a9d746de20230140d854e36e95f7c13446db26715b9a30a3d3afa3a5645e0afd3eaf8457a87c528792241e99a415b8709ae334bfa81fd8508c77b50e3d1f2ecf8f7b6b1d187bbac0bd3d49f00fb5c21836a2bd79ea2839bd3a1d396422699dfe0958479c36964efdb2f602d25f202a534df612f347696de6fecffb673d2162f2572c6d04895fc22b638dbf54dfad4d6058683919ec47cc3d3d1f5e4528bae31632081b9b80770ce0e7d44287e18fde786801e7beda77c0b9ee3965f3a4956496fe8e892b65e137d9e47e8e164f7c6fe9c6ac9ece1b7eead32a5a188df5539537e1b736f1c5d67b604d064eda6b6730c51e182cae81e65290f12f68a7146888e438a799d04931f2a0b9b6c565d47d9d322e7358ccdbc08eafc2470414c44f97e33013b976b995bcf96409789bc2bc97d7add4b6eaaa84c18ea936f0eb332185f9de597d6f7793215df2c0be4b5b4085910adb83d248be16deeac399070ad00a24a67cebef51694726a612ea5763f1bbff03a77357d867ec5461c33d73a47db4a51b496be6960ca7c8cb92a51dd578f99e4b1d2b18ce406b2751aeb065ad0225aeb1eedce3b26e3feec915361cd6b4acc105a2962edcd6547691a557f4deb9ca96d39bd92ebc96e763b6139a0421f42c561a7a20ffebef94bc0b7538466064610134ede0221cde98d085531471c0e9761880904952234f0ae34502b3790aad682fe6e7fd7977816e21aa3f7793ca99312ee07ef9b34a31102710bbaa31dcd57d941e6d5fd6b6607d3449bbffb1434d67edc10727230c3283ab7e212152039e9403bc7ae082cb3934794468dc7549aa35cdf35d3c0f754b7fdf47dbb5bc5047923f6841b9a4054a0eef23de222f0ecc04410fccfe3779820d2ac659b84ea56eeefaae980f1bd43aef8e78705ce1995cee4f88400903f66e6d24307090e23d04387909a62a3394890118549baec01b6f2a5c416f68b71bfc2b7a0bf289587664a2b6194d4eccb51bd4177c9487b724f91d088ce68f20882a8dd633b17ad73584e68382877eba4fae1af839baca07f3adc4c9796e07dc69e90bd5efe3a84d3ca40fa8209c2bc9c9303ff2c7979a9508d925c021cea6c7f1483b5c5b00232c292f302fad79aa5fa4820b04a5aed1f9be4cb5fe104070e5b87a33979e5239f514e87559950808fd098792c0b1bd0b9cb94463b22be92962692dca35a8bd0fe0edc28e7e759d2d75db4884f9860d419a29fd89c0a2c11e957483f9c13637e2f66e96bf3454b943b7dd368b71243ef58b0b3d469cdf5572a990a5c998c5796b80031f56bc98f5bf70a717cc5ff4febbfc32b29543548d8862f1ab57fbdbeda2a9901593c0d92d4eca205312c18ce649ed5a3263b66d8ca52734a16035daaa182c24e9ae2851e8dd153d2fe34978e8df50402f133190ada04cfaaac56ca6fa20771a195c76a84651ca4aa9c7c4eb16007ef1e965055ab6cb08a02db6c1a82f8c695ec370095c0afd535ed8abf17ff514451055854a99de69863f393e1679ddf5326e1f4de42220df3839ee71c8fab2c3faee9af0f5e9ee5a3c4c146ae7d36536064a11644a9a195290f3d75f64652050ca8a1ef17eed6f5077a651af1ce5304f2e6fa781a83df2a7c4f5e1c8337d35f93633d684803b7bec4fea60e1f9925580f9199f40f307bfd84de2d51f1df191eeb52a48ed4a19c4f524cc26f7043bbabb1c43c4f20d950e218dbcf09a8bda0e1ca1759466938dd764c85c3d8de92b3534ff5c492d024e6ca87952243fe8b6379ba189032926685afcd3839a4423ba19cb0c5488982ce7cad134c60bc329f855ba4be63475ade6110d6db66613c3c7647e76e3949f8e5299738014743523662fd6b1626bcc0cffdb3b757ddcbeefa2facc49da06d907d21888b9344a3167d143e5f8e022d8c75229fd491145c451ac92f000aeee43219215a8136c7c17327f6e0a3eef7fe1861930d143d92f33aa74984c89f9ba3e9ee887bef4f9b16654cbc739fd6b2eebb255596dfd6639896685b72b0e1ea92019884468f5c78d21a3a69df24a3d8d517cec2122417bad0ac7db0182cc87b8b752e7474a36acb8508d118d44d509cd8594dea3a3a611a6c1c0b3bcf48b4834d8bb5cd18f420ed7aea21810c0303ca2d5fc67b116491f1bbd055221c79ec0dfcfc22c17cba3eb4fea49127615fdcef9cbecba603dd2e01e07af17ab0f4a6179f54edb34db2dc0c937a0aa1151c8a9474afd1af7c0a83174aa1fdd8e4bfb9b10841df5ccf068a5612627c8724b1c68fd3879a57265836409a6d851f1baf0023ca", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) 4.49574052s ago: executing program 6 (id=1422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) semget$private(0x0, 0x1, 0x2a8) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000080)=[{0x0}], 0x1) 4.443918194s ago: executing program 3 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="836fea94b6", @ANYRES32, @ANYBLOB="000001000a0001"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) clock_getres(0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = timerfd_create(0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='\x8c', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) 2.49534845s ago: executing program 6 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ec, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x348) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r6, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2.491965851s ago: executing program 3 (id=1425): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c25) writev(r2, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) 2.484845231s ago: executing program 0 (id=1426): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x200000, 0x0, 0x4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(0xffffffffffffffff, 0x40026102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) socket(0x2, 0x80805, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x123180, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000400)=0x15) ioctl$TCFLSH(r5, 0x540b, 0x2) 758.741369ms ago: executing program 7 (id=1427): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34042, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2ef491e", 0x0, 0x6, 0x45, 0x8, 0x1ff, "000000060000000e000000000100", "d40acd7c", "04025b51", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x2400cc84) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000440)={0xfff, 0x0, 0xe15, 0x0, 0x4, 0x4063, "57cb51fff751dd7eb26ac71ae5013059", 0xb5, 0x0, 0xfd, 0x0, 0x0, 0xbd}) 755.46688ms ago: executing program 3 (id=1428): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x8814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) 752.86521ms ago: executing program 0 (id=1430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r1 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3], 0x50) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 713.590283ms ago: executing program 6 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 0s ago: executing program 7 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fanotify_init(0xf00, 0x1000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/134, 0x29}, 0x0) kernel console output (not intermixed with test programs): TRFS info (device loop4): enabling ssd optimizations [ 169.952535][ T6493] BTRFS info (device loop4): turning on async discard [ 169.959370][ T6493] BTRFS info (device loop4): turning off async discard [ 170.002737][ T5353] Bluetooth: hci3: command 0x041b tx timeout [ 170.013115][ T6525] capability: warning: `syz.1.460' uses deprecated v2 capabilities in a way that may be insecure [ 170.025234][ T6493] BTRFS info (device loop4): using free space tree [ 170.031803][ T6493] BTRFS info (device loop4): has skinny extents [ 170.034029][ T6397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.113097][ T6397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.131457][ T6397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.183645][ T6397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.472996][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.484933][ T4411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.574340][ T4411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.718359][ T4411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.806269][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.871196][ T4411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.904051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.945519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.966277][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.998716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.018528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.032354][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.039848][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.212788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.220999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.253128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.261928][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.269091][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.356788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.408171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.484610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.513802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.600520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.612480][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.640769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.669830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.692386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.849235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.888588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.930580][ T6594] loop9: detected capacity change from 0 to 32768 [ 171.940875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.963621][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.076084][ T6594] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.466 (6594) [ 172.103294][ T5348] Bluetooth: hci3: command 0x040f tx timeout [ 172.121788][ T4411] tipc: Disabling bearer [ 172.138708][ T6594] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 172.141860][ T4411] tipc: Left network mode [ 172.149584][ T6594] BTRFS info (device loop9): enabling disk space caching [ 172.162163][ T6594] BTRFS info (device loop9): doing ref verification [ 172.169546][ T6594] BTRFS info (device loop9): use zlib compression, level 3 [ 172.177106][ T6594] BTRFS info (device loop9): force clearing of disk cache [ 172.184401][ T6594] BTRFS info (device loop9): doing ref verification [ 172.191132][ T6594] BTRFS info (device loop9): disk space caching is enabled [ 172.198524][ T6594] BTRFS info (device loop9): has skinny extents [ 172.372388][ T6600] device syzkaller0 entered promiscuous mode [ 172.393179][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.421100][ T6624] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 172.664449][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.677558][ T5348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.712827][ T6594] BTRFS info (device loop9): clearing free space tree [ 172.719961][ T6594] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.730363][ T6594] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.862224][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.929003][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.962931][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.742270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.764926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.817947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.827216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.884823][ T6397] device veth0_vlan entered promiscuous mode [ 173.934899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.959962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.002210][ T6397] device veth1_vlan entered promiscuous mode [ 174.083125][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.091091][ T6397] device veth0_macvtap entered promiscuous mode [ 174.106386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.119935][ T6183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.125035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.153040][ T5352] Bluetooth: hci3: command 0x0419 tx timeout [ 174.170032][ T6709] overlayfs: failed to clone lowerpath [ 174.250342][ T6668] loop4: detected capacity change from 0 to 32768 [ 174.308290][ T6397] device veth1_macvtap entered promiscuous mode [ 174.386370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.415344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.534777][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.588463][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.626367][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.668331][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.688903][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.723079][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.760885][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.773586][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.784540][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.822631][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.891651][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.498234][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.630233][ T5348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.640883][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.677090][ T6668] binfmt_misc: register: failed to install interpreter file ./bus [ 175.705647][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.716411][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.747115][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.902742][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.952715][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.995337][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.062641][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.098414][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.130029][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.170369][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.207075][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.218087][ C0] Unknown status report in ack skb [ 176.223665][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.249121][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.300856][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.315290][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.585290][ T6397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.598478][ T6397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.618708][ T6397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.632805][ T5348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.669320][ T6397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.061535][ T4411] device hsr_slave_0 left promiscuous mode [ 177.069203][ T4411] device hsr_slave_1 left promiscuous mode [ 177.101349][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.932910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.963015][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.976203][ T6762] loop4: detected capacity change from 0 to 2048 [ 177.993220][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.057386][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.216591][ T6762] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.234706][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.247465][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.287386][ T6762] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.333795][ T4411] device bridge_slave_1 left promiscuous mode [ 178.364382][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.391020][ T4411] device bridge_slave_0 left promiscuous mode [ 178.409037][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.450747][ T4411] device veth1_macvtap left promiscuous mode [ 178.479852][ T4411] device veth0_macvtap left promiscuous mode [ 178.496701][ T4411] device veth1_vlan left promiscuous mode [ 178.532823][ T4411] device veth0_vlan left promiscuous mode [ 178.952781][ T5352] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 179.040977][ T5348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.213281][ T4411] team0 (unregistering): Port device team_slave_1 removed [ 179.273753][ T4411] team0 (unregistering): Port device team_slave_0 removed [ 179.319116][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.490979][ T4411] bond0 (unregistering): Released all slaves [ 179.562900][ T5352] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.572457][ T5352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.595080][ T5352] usb 10-1: Product: syz [ 179.599523][ T5352] usb 10-1: Manufacturer: syz [ 179.608015][ T5352] usb 10-1: SerialNumber: syz [ 179.655831][ T5352] usb 10-1: config 0 descriptor?? [ 179.671946][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.727539][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.734976][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.744274][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.776767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.793985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.804337][ T6802] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 179.843063][ T6802] device bridge_slave_1 left promiscuous mode [ 179.849548][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.876377][ T6802] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 179.933065][ T5352] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 179.996333][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.435'. [ 180.022729][ T5348] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 180.106845][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.312919][ T5348] usb 9-1: Using ep0 maxpacket: 32 [ 180.443739][ T5348] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 180.462984][ T5348] usb 9-1: config 0 has no interface number 0 [ 180.647031][ T5348] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 180.665562][ T5348] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.690852][ T5348] usb 9-1: Product: syz [ 180.706249][ T5348] usb 9-1: Manufacturer: syz [ 180.725896][ T5348] usb 9-1: SerialNumber: syz [ 180.752447][ T5348] usb 9-1: config 0 descriptor?? [ 180.800196][ T5348] smsc95xx v2.0.0 [ 181.033112][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.145353][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.263089][ T5348] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 181.285321][ T5348] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.420864][ T6843] kvm: pic: non byte write [ 182.003047][ T5348] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 182.022699][ T5352] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 182.034934][ T5352] usb 10-1: USB disconnect, device number 2 [ 182.042469][ T5348] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 182.084088][ T5348] usb 9-1: USB disconnect, device number 3 [ 182.160693][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.285829][ T6850] loop4: detected capacity change from 0 to 32768 [ 182.562673][ T6850] XFS (loop4): Mounting V5 Filesystem [ 183.347048][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.399766][ T6850] XFS (loop4): Ending clean mount [ 183.403340][ T6889] device syzkaller0 entered promiscuous mode [ 183.411461][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 183.504482][ T6850] XFS (loop4): Quotacheck needed: Please wait. [ 183.758749][ T6850] XFS (loop4): Quotacheck: Done. [ 183.843920][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.9.519'. [ 184.391231][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.600702][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.851353][ T6703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.870765][ T6909] loop9: detected capacity change from 0 to 256 [ 184.932141][ T6909] FAT-fs (loop9): Directory bread(block 64) failed [ 184.950237][ T6909] FAT-fs (loop9): Directory bread(block 65) failed [ 185.007236][ T6909] FAT-fs (loop9): Directory bread(block 66) failed [ 185.042639][ T6909] FAT-fs (loop9): Directory bread(block 67) failed [ 185.080001][ T6909] FAT-fs (loop9): Directory bread(block 68) failed [ 185.108100][ T6909] FAT-fs (loop9): Directory bread(block 69) failed [ 185.146519][ T6909] FAT-fs (loop9): Directory bread(block 70) failed [ 185.179151][ T6909] FAT-fs (loop9): Directory bread(block 71) failed [ 185.219011][ T6207] XFS (loop4): Unmounting Filesystem [ 185.227255][ T6909] FAT-fs (loop9): Directory bread(block 72) failed [ 185.282674][ T6909] FAT-fs (loop9): Directory bread(block 73) failed [ 185.438994][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.526713][ T6703] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.992765][ T6703] usb 6-1: Using ep0 maxpacket: 8 [ 186.239114][ T5357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.247886][ T5349] Bluetooth: hci2: command 0x0406 tx timeout [ 186.272740][ T6703] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 186.350886][ T6703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.612688][ T6703] usb 6-1: Product: syz [ 186.630543][ T6703] usb 6-1: Manufacturer: syz [ 186.657612][ T6703] usb 6-1: SerialNumber: syz [ 186.690207][ T6703] usb 6-1: config 0 descriptor?? [ 186.720705][ T6945] 9pnet: Insufficient options for proto=fd [ 186.740496][ T6703] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 187.724782][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.888631][ T4280] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.013823][ T4280] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.134971][ T4280] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.231298][ T4280] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.931522][ T6995] chnl_net:caif_netlink_parms(): no params data found [ 189.673205][ T6703] gspca_sonixj: reg_w1 err -71 [ 189.890160][ T6703] sonixj: probe of 6-1:0.0 failed with error -71 [ 189.907256][ T6703] usb 6-1: USB disconnect, device number 2 [ 190.112777][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.121149][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.155315][ T6995] device bridge_slave_0 entered promiscuous mode [ 190.166039][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.172901][ T7040] loop4: detected capacity change from 0 to 128 [ 190.217057][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.226974][ T6995] device bridge_slave_1 entered promiscuous mode [ 190.237498][ T7036] binder_alloc: 7034: binder_alloc_buf size 12312 failed, no address space [ 190.249915][ T7040] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.276298][ T7036] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 190.291871][ T7040] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.367272][ T6995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.416785][ T6995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.671143][ T7050] loop5: detected capacity change from 0 to 40427 [ 190.709182][ T6995] team0: Port device team_slave_0 added [ 190.778600][ T4230] Bluetooth: hci1: command 0x0409 tx timeout [ 190.803925][ T6995] team0: Port device team_slave_1 added [ 191.805756][ T7050] F2FS-fs (loop5): invalid crc value [ 191.831159][ T7050] F2FS-fs (loop5): Found nat_bits in checkpoint [ 191.865401][ T7050] F2FS-fs (loop5): Start checkpoint disabled! [ 191.885910][ T7050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 192.639724][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.703525][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.802946][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 192.862227][ T6995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.946725][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.950208][ T4413] attempt to access beyond end of device [ 192.950208][ T4413] loop5: rw=1, want=45104, limit=40427 [ 192.977953][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.018445][ T6995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.039669][ T4413] attempt to access beyond end of device [ 193.039669][ T4413] loop5: rw=2049, want=40992, limit=40427 [ 193.199989][ T4280] device hsr_slave_0 left promiscuous mode [ 193.214194][ T4280] device hsr_slave_1 left promiscuous mode [ 193.220709][ T7084] fuse: Bad value for 'fd' [ 193.229257][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.256616][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.281811][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.314770][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.329261][ T4280] device bridge_slave_1 left promiscuous mode [ 193.389284][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.431203][ T4280] device bridge_slave_0 left promiscuous mode [ 193.441079][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.499344][ T4280] device veth1_macvtap left promiscuous mode [ 193.514740][ T4280] device veth0_macvtap left promiscuous mode [ 193.529032][ T4280] device veth1_vlan left promiscuous mode [ 193.537890][ T4280] device veth0_vlan left promiscuous mode [ 194.310555][ T7098] loop4: detected capacity change from 0 to 512 [ 194.415482][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.421838][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.905356][ T7098] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 196.121889][ T7098] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.170021][ T6702] Bluetooth: hci1: command 0x040f tx timeout [ 196.704242][ T7115] overlayfs: failed to clone upperpath [ 196.873944][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 196.966611][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 196.993054][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.022416][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.179097][ T4280] bond0 (unregistering): Released all slaves [ 197.319399][ T6995] device hsr_slave_0 entered promiscuous mode [ 197.345958][ T6995] device hsr_slave_1 entered promiscuous mode [ 197.368265][ T6995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.405067][ T6995] Cannot create hsr debugfs directory [ 197.655022][ T7146] loop4: detected capacity change from 0 to 512 [ 197.709540][ T7146] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.937058][ T7146] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 198.035009][ T7146] EXT4-fs (loop4): 1 truncate cleaned up [ 198.098402][ T7146] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 198.265853][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 200.382692][ T5357] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.622591][ T5357] usb 6-1: Using ep0 maxpacket: 8 [ 200.742761][ T5357] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.746864][ T6995] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.760066][ T5357] usb 6-1: config 0 has no interface number 0 [ 200.783653][ T6995] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.789251][ T5357] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.809436][ T6995] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.832298][ T5357] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.841000][ T6995] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.853499][ T7186] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.889211][ T5357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.925771][ T5357] usb 6-1: config 0 descriptor?? [ 200.983377][ T5357] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 201.105199][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.173653][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.186271][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.210681][ T7171] udc-core: couldn't find an available UDC or it's busy [ 201.221485][ T6995] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.238768][ T7171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 201.269196][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.293612][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.303366][ T5349] usb 6-1: USB disconnect, device number 3 [ 201.334794][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.342127][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.372152][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.386164][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.401062][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.413622][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.420788][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.437285][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.458825][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.474915][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.501469][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.516810][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.535404][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.552142][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.570031][ T6995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.581926][ T6995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.596484][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.606027][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.618018][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.628206][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.639407][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.029998][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 202.131984][ T7228] device bridge_slave_1 left promiscuous mode [ 202.161487][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.218031][ T7228] device bridge_slave_0 left promiscuous mode [ 202.234461][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.284305][ T7237] 9pnet: p9_client_clunk (7237): Trying to clunk with invalid fid [ 202.292179][ T7237] CPU: 0 PID: 7237 Comm: syz.5.592 Not tainted 5.15.189-syzkaller #0 [ 202.300370][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.310467][ T7237] Call Trace: [ 202.313772][ T7237] [ 202.316727][ T7237] dump_stack_lvl+0x168/0x230 [ 202.321537][ T7237] ? show_regs_print_info+0x20/0x20 [ 202.326771][ T7237] ? load_image+0x3b0/0x3b0 [ 202.331407][ T7237] ? v9fs_fid_find+0x2d1/0x320 [ 202.336209][ T7237] p9_client_clunk+0x2b3/0x380 [ 202.341058][ T7237] v9fs_statfs+0x192/0x350 [ 202.345507][ T7237] ? v9fs_drop_inode+0x130/0x130 [ 202.350561][ T7237] ? rcu_is_watching+0x11/0xa0 [ 202.355486][ T7237] user_statfs+0x1f3/0x5b0 [ 202.360036][ T7237] ? vfs_statfs+0x2c0/0x2c0 [ 202.364579][ T7237] __x64_sys_statfs+0xdd/0x1a0 [ 202.369379][ T7237] ? fd_statfs+0x390/0x390 [ 202.373841][ T7237] ? __context_tracking_exit+0x4c/0x80 [ 202.379348][ T7237] ? __lock_acquire+0x7c60/0x7c60 [ 202.384470][ T7237] ? lockdep_hardirqs_on+0x94/0x140 [ 202.389706][ T7237] do_syscall_64+0x4c/0xa0 [ 202.394496][ T7237] ? clear_bhb_loop+0x30/0x80 [ 202.399217][ T7237] ? clear_bhb_loop+0x30/0x80 [ 202.403942][ T7237] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.409991][ T7237] RIP: 0033:0x7fee26ac9be9 [ 202.414533][ T7237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.434341][ T7237] RSP: 002b:00007fee24d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 202.443067][ T7237] RAX: ffffffffffffffda RBX: 00007fee26cf0fa0 RCX: 00007fee26ac9be9 [ 202.451366][ T7237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 202.459466][ T7237] RBP: 00007fee26b4ce19 R08: 0000000000000000 R09: 0000000000000000 [ 202.467475][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.475484][ T7237] R13: 00007fee26cf1038 R14: 00007fee26cf0fa0 R15: 00007fff78c8b9d8 [ 202.483518][ T7237] [ 202.498895][ T4194] Bluetooth: hci4: command 0x1003 tx timeout [ 202.515167][ T146] Bluetooth: hci4: sending frame failed (-49) [ 202.705233][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.728289][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.757181][ T6995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.822224][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.846670][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.907278][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.918111][ T7248] loop5: detected capacity change from 0 to 512 [ 202.923592][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.955961][ T6995] device veth0_vlan entered promiscuous mode [ 202.956577][ T7248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.982688][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.990751][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.016437][ T6995] device veth1_vlan entered promiscuous mode [ 203.047380][ T7248] EXT4-fs (loop5): 1 truncate cleaned up [ 203.060043][ T7248] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,block_validity,debug_want_extra_isize=0x0000000000000068,quota,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: writeback. [ 203.113043][ T7248] EXT4-fs error (device loop5): ext4_ind_map_blocks:604: inode #18: comm syz.5.594: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 203.149870][ T7249] loop4: detected capacity change from 0 to 4096 [ 203.154976][ T4203] udevd[4203]: incorrect jbd checksum on /dev/loop5 [ 203.181281][ T7249] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 203.212219][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.231460][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.247662][ T7258] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.594: bad entry in directory: directory entry overrun - offset=128, inode=18, rec_len=896, size=1012 fake=0 [ 203.271739][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.298995][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.340879][ T6995] device veth0_macvtap entered promiscuous mode [ 203.392367][ T6397] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 203.404683][ T6995] device veth1_macvtap entered promiscuous mode [ 203.478213][ T6397] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 203.539030][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.603327][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.628056][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.647517][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.679584][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.709258][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.728351][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.785879][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.813713][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.823876][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.842444][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.870741][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.889860][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.173858][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.192850][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.217370][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.242723][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.262549][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.282004][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.309083][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.341065][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.364738][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.389442][ T6995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.410381][ T6995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.428261][ T6995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.447741][ T6995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.483324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.497937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.562889][ T6702] Bluetooth: hci4: command 0x1001 tx timeout [ 204.672677][ T146] Bluetooth: hci4: sending frame failed (-49) [ 204.831529][ T4280] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.900968][ T4280] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.003319][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.027384][ T4280] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.052444][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.080970][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.120016][ T4280] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.161996][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.221614][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.285407][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.729411][ T7335] overlayfs: statfs failed on './file0' [ 206.021549][ T7342] loop0: detected capacity change from 0 to 1024 [ 206.202950][ T7342] EXT4-fs (loop0): Ignoring removed orlov option [ 206.263526][ T7342] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,barrier,,errors=continue. Quota mode: none. [ 206.305448][ T7330] chnl_net:caif_netlink_parms(): no params data found [ 206.587335][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.602920][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.622401][ T7330] device bridge_slave_0 entered promiscuous mode [ 206.671390][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.687059][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.705840][ T7330] device bridge_slave_1 entered promiscuous mode [ 206.722694][ T4194] Bluetooth: hci4: command 0x1009 tx timeout [ 206.741252][ T4280] device hsr_slave_0 left promiscuous mode [ 206.751649][ T4280] device hsr_slave_1 left promiscuous mode [ 206.759790][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.775612][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.787436][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.799613][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.811185][ T4280] device bridge_slave_1 left promiscuous mode [ 206.821883][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.838710][ T7365] fuse: Bad value for 'fd' [ 206.845202][ T4280] device bridge_slave_0 left promiscuous mode [ 206.851467][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.904356][ T4280] device veth1_macvtap left promiscuous mode [ 206.910764][ T4280] device veth0_macvtap left promiscuous mode [ 206.917812][ T4280] device veth1_vlan left promiscuous mode [ 206.924388][ T4280] device veth0_vlan left promiscuous mode [ 207.353820][ T6703] Bluetooth: hci3: command 0x0409 tx timeout [ 207.468046][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880605f7400: rx timeout, send abort [ 207.943399][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 207.970121][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f4d0400: rx timeout, send abort [ 207.978756][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880605f7400: abort rx timeout. Force session deactivation [ 208.033892][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 208.048298][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.063622][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.135938][ T4280] bond0 (unregistering): Released all slaves [ 208.225834][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.235487][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 208.260823][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.530696][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805f4d0400: abort rx timeout. Force session deactivation [ 208.533735][ T7330] team0: Port device team_slave_0 added [ 208.553402][ T7330] team0: Port device team_slave_1 added [ 208.623538][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.631620][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.674341][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.720034][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.729710][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.801695][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.812172][ T7387] loop4: detected capacity change from 0 to 1024 [ 208.940853][ T7387] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.624: Invalid block bitmap block 0 in block_group 0 [ 208.957118][ T7330] device hsr_slave_0 entered promiscuous mode [ 208.965368][ T7387] Quota error (device loop4): write_blk: dquota write failed [ 208.973506][ T7387] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 208.986600][ T7330] device hsr_slave_1 entered promiscuous mode [ 208.987133][ T7387] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.624: Failed to acquire dquot type 0 [ 209.007200][ T7387] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.624: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.023567][ T7330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.037494][ T7387] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.624: Invalid inode bitmap blk 0 in block_group 0 [ 209.041004][ T7330] Cannot create hsr debugfs directory [ 209.059101][ T7383] tipc: Started in network mode [ 209.068098][ T7387] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 209.075468][ T7383] tipc: Node identity ac14140f, cluster identity 4711 [ 209.084665][ T4411] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8) [ 209.094297][ T7387] EXT4-fs (loop4): 1 orphan inode deleted [ 209.100072][ T7387] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 209.121947][ T4411] EXT4-fs error (device loop4): ext4_release_dquot:6243: comm kworker/u4:10: Failed to release dquot type 0 [ 209.143756][ T7383] tipc: New replicast peer: 255.255.255.255 [ 209.150425][ T7383] tipc: Enabled bearer , priority 10 [ 209.303634][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 210.084460][ T4194] Bluetooth: hci3: command 0x041b tx timeout [ 210.264615][ T5357] tipc: Node number set to 2886997007 [ 210.687483][ T7421] loop4: detected capacity change from 0 to 256 [ 210.984544][ T7421] loop4: detected capacity change from 0 to 512 [ 211.065807][ T7421] EXT4-fs (loop4): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value [ 211.466636][ T7330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.507003][ T7330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.532315][ T7330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.580991][ T7330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.956981][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.057349][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.073376][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.161750][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.162683][ T4194] Bluetooth: hci3: command 0x040f tx timeout [ 212.196831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.213409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.273408][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.280530][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.351409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.528968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.538455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.563816][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.571235][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.648180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.702261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.815502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.974990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.046884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.123999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.133820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.142979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.151682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.166660][ T7330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.197995][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.259804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.323713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.340201][ T7478] overlayfs: failed to clone upperpath [ 213.482715][ T5351] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 214.243627][ T4194] Bluetooth: hci3: command 0x0419 tx timeout [ 214.652977][ T5351] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 214.662076][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.692032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.702174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.734389][ T5351] usb 5-1: config 0 descriptor?? [ 214.762362][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.870424][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.901043][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.058981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.002282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.161820][ T26] audit: type=1326 audit(1754635624.107:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c71c00be9 code=0x7ffc0000 [ 216.214821][ T7330] device veth0_vlan entered promiscuous mode [ 216.226709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.243343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.261908][ T26] audit: type=1326 audit(1754635624.107:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c71c00be9 code=0x7ffc0000 [ 216.299538][ T7330] device veth1_vlan entered promiscuous mode [ 216.533824][ T26] audit: type=1326 audit(1754635624.107:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c71c00be9 code=0x7ffc0000 [ 217.393867][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.419917][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.438331][ T26] audit: type=1326 audit(1754635624.107:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c71c00be9 code=0x7ffc0000 [ 217.473401][ T7330] device veth0_macvtap entered promiscuous mode [ 217.529611][ T7330] device veth1_macvtap entered promiscuous mode [ 217.562835][ T5351] usb 5-1: Cannot set autoneg [ 217.567717][ T5351] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 217.572610][ T26] audit: type=1326 audit(1754635624.107:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c71c00be9 code=0x7ffc0000 [ 217.666422][ T5351] usb 5-1: USB disconnect, device number 2 [ 217.675176][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.683260][ T26] audit: type=1326 audit(1754635624.107:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c71bff550 code=0x7ffc0000 [ 217.743425][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.756688][ T26] audit: type=1326 audit(1754635624.107:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c71c00be9 code=0x7ffc0000 [ 217.809191][ T26] audit: type=1326 audit(1754635624.107:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c71c02b07 code=0x7ffc0000 [ 217.838124][ T26] audit: type=1326 audit(1754635624.107:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c71c00be9 code=0x7ffc0000 [ 217.924758][ T26] audit: type=1326 audit(1754635624.107:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c71c00be9 code=0x7ffc0000 [ 217.965240][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.982673][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.993249][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.004583][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.015359][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.026964][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.046582][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.095786][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.107374][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.118388][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.129683][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.710047][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.763618][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.812850][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.829003][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.840996][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.859703][ T7330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.880227][ T7330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.052621][ T7330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.149223][ T7330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.329594][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.504844][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.566001][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.715338][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.843446][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.636591][ T7573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'. [ 221.637662][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.863237][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.206609][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.572073][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.667718][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.816147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.853104][ T7578] netlink: 'syz.4.666': attribute type 10 has an invalid length. [ 222.891682][ T7578] device macvlan0 entered promiscuous mode [ 222.960028][ T7578] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 223.180250][ T7581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.254982][ T7581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.266933][ T7586] loop2: detected capacity change from 0 to 32768 [ 223.307606][ T7586] XFS: ikeep mount option is deprecated. [ 223.347743][ T7581] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 223.377715][ T7581] bond0 (unregistering): Released all slaves [ 223.415041][ T7586] XFS (loop2): Mounting V5 Filesystem [ 224.301825][ T7586] XFS (loop2): Ending clean mount [ 224.312298][ T7586] XFS (loop2): Quotacheck needed: Please wait. [ 224.478394][ T7586] XFS (loop2): Quotacheck: Done. [ 224.993824][ T7330] XFS (loop2): Unmounting Filesystem [ 225.494726][ T7640] ptrace attach of "./syz-executor exec"[4188] was attempted by ""[7640] [ 226.911549][ T7655] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 227.456229][ T7655] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.656821][ T7669] netlink: 'syz.8.685': attribute type 8 has an invalid length. [ 227.882047][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.8.687'. [ 227.932158][ T7680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.957443][ T7680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.020496][ T7680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.040044][ T7689] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 228.042679][ T7680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.182956][ T7696] fuse: Bad value for 'fd' [ 229.458692][ T5351] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 229.597495][ T5351] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.620202][ T7720] loop2: detected capacity change from 0 to 1024 [ 230.024550][ T7737] cgroup: Invalid name [ 234.940920][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.441694][ T7848] loop2: detected capacity change from 0 to 64 [ 235.545526][ T7851] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 235.746967][ T7851] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.838989][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.888334][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.313042][ T2285] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 236.572769][ T2285] usb 5-1: Using ep0 maxpacket: 8 [ 236.692905][ T2285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.751449][ T2285] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 236.778519][ T2285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.827450][ T2285] usb 5-1: config 0 descriptor?? [ 237.834383][ T7892] netlink: 'syz.8.735': attribute type 4 has an invalid length. [ 237.863550][ T7892] netlink: 'syz.8.735': attribute type 17 has an invalid length. [ 237.893122][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 238.972014][ T2285] usb 5-1: USB disconnect, device number 3 [ 240.347817][ T7928] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.411980][ T7934] bridge_slave_0: default FDB implementation only supports local addresses [ 240.458534][ T7938] device vlan3 entered promiscuous mode [ 240.629926][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 241.040794][ T7951] xt_ecn: cannot match TCP bits for non-tcp packets [ 241.681458][ T7945] netlink: 'syz.1.748': attribute type 10 has an invalid length. [ 241.700927][ T7945] device macvlan0 entered promiscuous mode [ 241.728145][ T7945] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 242.018418][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 242.065173][ T7945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.131121][ T7945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.170039][ T7945] bond0 (unregistering): (slave team0): Releasing backup interface [ 242.179442][ T7962] mmap: syz.8.750 (7962) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 242.215244][ T7945] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 242.254944][ T7945] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 242.303099][ T7945] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 242.336109][ T7945] bond0 (unregistering): Released all slaves [ 245.972226][ T8026] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 246.000188][ T8026] device macvlan0 entered promiscuous mode [ 246.041892][ T8026] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 246.255358][ T8028] loop4: detected capacity change from 0 to 32768 [ 246.294798][ T8026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.323302][ T8028] XFS: ikeep mount option is deprecated. [ 246.344421][ T8026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.368112][ T8026] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 246.428959][ T8026] bond0 (unregistering): Released all slaves [ 246.989354][ T8028] XFS (loop4): Mounting V5 Filesystem [ 247.268643][ T8028] XFS (loop4): Ending clean mount [ 247.278336][ T8028] XFS (loop4): Quotacheck needed: Please wait. [ 247.538743][ T8028] XFS (loop4): Quotacheck: Done. [ 248.364670][ T6207] XFS (loop4): Unmounting Filesystem [ 248.533349][ T8064] device syzkaller0 entered promiscuous mode [ 248.546915][ T8064] tipc: Started in network mode [ 248.551890][ T8064] tipc: Node identity 7229442cd5dd, cluster identity 4711 [ 248.560386][ T8064] tipc: Enabled bearer , priority 0 [ 248.575402][ T8061] tipc: Resetting bearer [ 248.654258][ T8061] tipc: Disabling bearer [ 249.418716][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 250.588226][ T8067] infiniband syz1: set active [ 250.597892][ T8067] infiniband syz1: added syz_tun [ 250.628990][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 250.653247][ T8067] infiniband syz1: Couldn't open port 1 [ 250.682416][ T8104] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 8104 comm: syz.8.786) [ 250.702824][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 250.702836][ T26] audit: type=1800 audit(1754635658.647:66): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.786" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=50423 res=0 errno=0 [ 250.744992][ T8104] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.786' sets config #1 [ 250.760578][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 250.767272][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.775348][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.783223][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.791217][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.799097][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.807041][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.814995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.823008][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.831154][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.839249][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.847244][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.855192][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.863134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.871000][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.878976][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.886995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.895342][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.903449][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.911357][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.919338][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.927268][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.935420][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.943321][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.951649][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.959747][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.967773][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.975647][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.983675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.991604][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.999851][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 251.007719][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 251.065969][ T8067] RDS/IB: syz1: added [ 251.071058][ T8067] smc: adding ib device syz1 with port count 1 [ 251.131691][ T8067] smc: ib device syz1 port 1 has pnetid [ 251.142997][ T8110] netlink: 'syz.8.788': attribute type 10 has an invalid length. [ 251.261122][ T8110] device macvlan0 entered promiscuous mode [ 251.318134][ T8110] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 251.324685][ T8117] loop2: detected capacity change from 0 to 4096 [ 251.373356][ T8122] loop4: detected capacity change from 0 to 512 [ 251.469052][ T8118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.564481][ T8118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.609251][ T8122] EXT4-fs (loop4): Ignoring removed bh option [ 251.637906][ T8122] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 251.663334][ T8117] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.865115][ T8118] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 252.052629][ T8118] bond0 (unregistering): Released all slaves [ 252.441450][ T8117] EXT4-fs (loop2): shut down requested (1) [ 252.733507][ T8122] EXT4-fs (loop4): 1 truncate cleaned up [ 252.739233][ T8122] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 252.816622][ T6707] Bluetooth: hci5: command 0x0406 tx timeout [ 252.894643][ T8139] input: syz1 as /devices/virtual/input/input6 [ 252.957165][ T8141] xt_ecn: cannot match TCP bits for non-tcp packets [ 254.213404][ T26] audit: type=1800 audit(1754635661.667:67): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.791" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 255.847665][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.854777][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.651874][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 260.776784][ T8274] loop4: detected capacity change from 0 to 32768 [ 261.770475][ T8274] JBD2: Ignoring recovery information on journal [ 261.848888][ T8274] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 262.089961][ T6207] ocfs2: Unmounting device (7,4) on (node local) [ 263.179377][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dfbec00: rx timeout, send abort [ 263.679489][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f666800: rx timeout, send abort [ 263.692597][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dfbec00: abort rx timeout. Force session deactivation [ 264.187845][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f666800: abort rx timeout. Force session deactivation [ 266.483952][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 266.529727][ T8338] device syzkaller0 entered promiscuous mode [ 266.724935][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 274.131587][ T8459] netlink: 'syz.1.863': attribute type 12 has an invalid length. [ 276.675302][ T4412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.767954][ T4412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.829914][ T4412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.917086][ T4412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.192699][ T4471] Bluetooth: hci3: command 0x0409 tx timeout [ 277.437671][ T4412] tipc: Left network mode [ 278.381578][ T8493] chnl_net:caif_netlink_parms(): no params data found [ 278.411439][ T4471] Bluetooth: hci0: command 0x0406 tx timeout [ 279.273552][ T4250] Bluetooth: hci3: command 0x041b tx timeout [ 280.310603][ T8573] device bridge2 entered promiscuous mode [ 280.356705][ T8573] team0: Port device bridge2 added [ 280.364203][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.385056][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.404308][ T8493] device bridge_slave_0 entered promiscuous mode [ 280.424322][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.431503][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.449063][ T8493] device bridge_slave_1 entered promiscuous mode [ 280.528908][ T8493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.541700][ T8493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.592306][ T8493] team0: Port device team_slave_0 added [ 280.602311][ T8493] team0: Port device team_slave_1 added [ 280.643680][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.650755][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.685686][ T8493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.710867][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.722429][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.755956][ T8493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.821362][ T8493] device hsr_slave_0 entered promiscuous mode [ 280.834860][ T8493] device hsr_slave_1 entered promiscuous mode [ 280.841737][ T8493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.854408][ T8493] Cannot create hsr debugfs directory [ 281.157628][ T4412] device hsr_slave_0 left promiscuous mode [ 281.169977][ T4412] device hsr_slave_1 left promiscuous mode [ 281.177484][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.192008][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.200874][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.220220][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.228826][ T4412] device bridge_slave_1 left promiscuous mode [ 281.235697][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.245285][ T4412] device bridge_slave_0 left promiscuous mode [ 281.251562][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.270633][ T4412] device veth1_macvtap left promiscuous mode [ 281.292027][ T4412] device veth0_macvtap left promiscuous mode [ 281.298317][ T4412] device veth1_vlan left promiscuous mode [ 281.304396][ T4412] device veth0_vlan left promiscuous mode [ 281.362810][ T6703] Bluetooth: hci3: command 0x040f tx timeout [ 281.475135][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 281.488667][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 282.036833][ T8493] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 282.050667][ T8493] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 282.063224][ T8493] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 282.082548][ T8493] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 282.222135][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.249164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.258140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.269589][ T8493] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.282756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.292020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.301040][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.308222][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.336683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.345913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.359040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.373581][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.380683][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.392030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.415746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.426598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.439289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.449758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.459627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.469034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.478583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.496099][ T8493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.524821][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.558933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.573709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.593417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.843802][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.851610][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.891576][ T8493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.208557][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.228274][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.260530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.270829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.281821][ T8493] device veth0_vlan entered promiscuous mode [ 283.289615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.298344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.318248][ T8493] device veth1_vlan entered promiscuous mode [ 283.371279][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 283.397696][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 283.406760][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.429149][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.437905][ T4250] Bluetooth: hci3: command 0x0419 tx timeout [ 283.452354][ T8493] device veth0_macvtap entered promiscuous mode [ 283.469225][ T8493] device veth1_macvtap entered promiscuous mode [ 283.499404][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.509950][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.524891][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.538005][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.550560][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.576023][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.608666][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.623871][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.653105][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.668784][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.688436][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.699108][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.724698][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.738787][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.749440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.758411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.767674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.777473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.789686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.804438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.835138][ T8493] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.852871][ T8493] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.861722][ T8493] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.892533][ T8493] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.055448][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.077669][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.114943][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.143395][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.151928][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.176908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.526361][ T26] audit: type=1804 audit(1754635692.477:68): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.899" name="/newroot/85/file1" dev="fuse" ino=1 res=1 errno=0 [ 284.702180][ T26] audit: type=1800 audit(1754635692.507:69): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.899" name="/" dev="fuse" ino=1 res=0 errno=0 [ 285.192737][ T26] audit: type=1804 audit(1754635693.117:70): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.899" name="/newroot/85/file1" dev="fuse" ino=1 res=1 errno=0 [ 285.337774][ T26] audit: type=1800 audit(1754635693.117:71): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.899" name="/" dev="fuse" ino=1 res=0 errno=0 [ 287.106999][ T6703] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 287.382752][ T6703] usb 8-1: Using ep0 maxpacket: 8 [ 287.508845][ T6703] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.529359][ T6703] usb 8-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 287.550193][ T6703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.768985][ T6703] usb 8-1: config 0 descriptor?? [ 288.807490][ T6703] usb 8-1: can't set config #0, error -71 [ 288.822942][ T6703] usb 8-1: USB disconnect, device number 4 [ 289.288692][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 289.312911][ T8780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.455105][ T8784] binder: BINDER_SET_CONTEXT_MGR already set [ 290.481764][ T8784] binder: 8783:8784 ioctl 4018620d 200000000040 returned -16 [ 290.631584][ T8784] binder: 8783:8784 ioctl c0306201 200000001440 returned -11 [ 290.659121][ T8791] loop7: detected capacity change from 0 to 512 [ 290.700152][ T8789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.192085][ T8791] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 291.407013][ T8791] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.800464][ T8821] 9pnet: Insufficient options for proto=fd [ 296.661814][ T8880] netlink: 200 bytes leftover after parsing attributes in process `syz.4.927'. [ 297.504764][ T4293] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 298.065509][ T4293] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 302.700762][ T8951] loop7: detected capacity change from 0 to 4096 [ 303.275527][ T8951] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 304.734368][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 304.996917][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.847371][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.982982][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 312.598880][ T9070] netlink: 'syz.0.967': attribute type 12 has an invalid length. [ 312.627688][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 312.955108][ T13] usb 5-1: device descriptor read/all, error -71 [ 314.338265][ T4293] Bluetooth: hci1: command 0x0406 tx timeout [ 315.359860][ T9096] loop7: detected capacity change from 0 to 4096 [ 315.596716][ T9096] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 315.762090][ T155] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 315.802591][ T8493] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 315.809815][ T8493] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 315.852830][ T8493] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 315.862121][ T26] audit: type=1326 audit(1754635723.807:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 315.888893][ T4414] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 315.916507][ T8493] ntfs3: loop7: ntfs_evict_inode r=3 failed, -22. [ 315.944736][ T26] audit: type=1326 audit(1754635723.807:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 316.045481][ T26] audit: type=1326 audit(1754635723.827:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 316.675691][ T26] audit: type=1326 audit(1754635723.827:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 316.909398][ T9136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.990'. [ 316.920687][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.8.990'. [ 316.988032][ T26] audit: type=1326 audit(1754635723.827:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 317.127352][ T26] audit: type=1326 audit(1754635723.827:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 317.154584][ T26] audit: type=1326 audit(1754635723.827:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 317.277587][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.284858][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.330679][ T26] audit: type=1326 audit(1754635723.827:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 317.418798][ T26] audit: type=1326 audit(1754635723.827:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 317.526060][ T26] audit: type=1326 audit(1754635723.827:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba22a8be9 code=0x7ffc0000 [ 320.747575][ T9197] loop7: detected capacity change from 0 to 128 [ 321.029655][ T9197] FAT-fs (loop7): Unrecognized mount option "s(öƒYg7>-#̘n•¤hortname=winnt" or missing value [ 323.882572][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.002620][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.030057][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.042896][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.052873][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.379568][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.908844][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.931182][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.983218][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 325.012788][ T9235] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 328.358036][ T9293] netlink: 'syz.8.1021': attribute type 12 has an invalid length. [ 332.686718][ T9368] netlink: 'syz.1.1039': attribute type 12 has an invalid length. [ 333.794834][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 340.285958][ T9432] net_ratelimit: 28 callbacks suppressed [ 340.285982][ T9432] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.775265][ T9438] chnl_net:caif_netlink_parms(): no params data found [ 341.255904][ T9438] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.287557][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.343802][ T9438] device bridge_slave_0 entered promiscuous mode [ 342.418061][ T4250] Bluetooth: hci4: command 0x0409 tx timeout [ 342.539580][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.584458][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.905847][ T9438] device bridge_slave_1 entered promiscuous mode [ 343.922314][ T9438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.789905][ T4471] Bluetooth: hci4: command 0x041b tx timeout [ 344.823344][ T9438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.067973][ T9495] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 345.067973][ T9495] program syz.7.1070 not setting count and/or reply_len properly [ 346.960014][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 347.022631][ T4471] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 347.281445][ T9438] team0: Port device team_slave_0 added [ 347.542918][ T4471] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.604115][ T4471] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.739512][ T9438] team0: Port device team_slave_1 added [ 347.746826][ T4471] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 347.841877][ T4471] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.938752][ T4471] usb 8-1: config 0 descriptor?? [ 348.888459][ T4250] usb 8-1: USB disconnect, device number 5 [ 349.032625][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 349.101601][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.129428][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.176597][ T9438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.214199][ T4337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.256454][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.270448][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.307484][ T9438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.361484][ T4337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.184031][ T9438] device hsr_slave_0 entered promiscuous mode [ 350.222619][ T9438] device hsr_slave_1 entered promiscuous mode [ 350.259311][ T9438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.277417][ T9438] Cannot create hsr debugfs directory [ 352.119596][ T4337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.364721][ T4337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.721828][ T9601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 357.721438][ T9634] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 357.840687][ T9634] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 357.857689][ T9634] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 357.912778][ T9634] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 357.922999][ T9634] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 358.018328][ T9634] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 358.070203][ T9634] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 358.077572][ T9634] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 359.985463][ T9438] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.004078][ T9438] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.029047][ T9438] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.056762][ T9438] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 360.200415][ T9669] loop7: detected capacity change from 0 to 64 [ 362.114621][ T9438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.160241][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.193416][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.268459][ T9438] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.423105][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.435628][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.445143][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.452278][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.393312][ T9705] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.400917][ T9705] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.315912][ T9705] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.325031][ T9705] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.336049][ T9705] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.345344][ T9705] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.480318][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.507608][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.524230][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.533956][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.541414][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.553793][ T4337] device hsr_slave_0 left promiscuous mode [ 365.560564][ T4337] device hsr_slave_1 left promiscuous mode [ 365.570280][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.582851][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.597556][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.606620][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.625611][ T4337] device veth1_macvtap left promiscuous mode [ 365.632246][ T4337] device veth0_macvtap left promiscuous mode [ 365.642646][ T4337] device veth1_vlan left promiscuous mode [ 365.648935][ T4337] device veth0_vlan left promiscuous mode [ 365.818579][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 365.838098][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 365.953952][ T9735] tipc: Enabling of bearer rejected, failed to enable media [ 365.988769][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.045091][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.066696][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.271505][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.298322][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.597798][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.618074][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.909124][ T9760] loop7: detected capacity change from 0 to 512 [ 367.979919][ T9760] EXT4-fs (loop7): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 367.996916][ T9760] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 368.004495][ T9760] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 368.031963][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.053815][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.132628][ T9760] EXT4-fs (loop7): DAX unsupported by block device. [ 368.219311][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.236362][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.300085][ T9438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.113172][ T9788] sctp: [Deprecated]: syz.8.1133 (pid 9788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.113172][ T9788] Use struct sctp_sack_info instead [ 370.856348][ T9790] tipc: Enabled bearer , priority 0 [ 371.074593][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.113442][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.449748][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.503077][ T9806] tipc: Enabling of bearer rejected, already enabled [ 373.590813][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.686124][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.789437][ T9835] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.799104][ T9835] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.808186][ T9835] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.817245][ T9835] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.929023][ T9835] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 373.962238][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.993101][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.029829][ T9438] device veth0_vlan entered promiscuous mode [ 374.047956][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.063277][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.097106][ T9438] device veth1_vlan entered promiscuous mode [ 374.209509][ T9438] device veth0_macvtap entered promiscuous mode [ 375.907619][ T9438] device veth1_macvtap entered promiscuous mode [ 376.088270][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 376.140249][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 376.177980][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 376.210028][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.253689][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 376.312830][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 376.331591][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.573381][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.638122][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.327573][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.337671][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.348233][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.359928][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.370400][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.422107][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.506697][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.557571][ T9869] loop7: detected capacity change from 0 to 64 [ 377.562490][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.616481][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.693309][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.713445][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.759201][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.798860][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.887802][ T9438] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.934948][ T9438] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.981408][ T9438] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.017403][ T9438] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.060646][ T9883] tipc: Enabling of bearer rejected, already enabled [ 378.718894][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.726730][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.043446][ T9893] loop7: detected capacity change from 0 to 16 [ 379.229669][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.258973][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.372320][ T9893] erofs: (device loop7): mounted with root inode @ nid 36. [ 379.425612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 379.597070][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.673056][ T2285] Bluetooth: hci0: command 0x0409 tx timeout [ 379.690127][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.862633][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.016785][ T9893] attempt to access beyond end of device [ 380.016785][ T9893] loop7: rw=0, want=15300821032, limit=16 [ 380.069828][ T9893] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 380.079606][ T9921] netlink: 'syz.8.1159': attribute type 1 has an invalid length. [ 380.110025][ T9893] attempt to access beyond end of device [ 380.110025][ T9893] loop7: rw=0, want=15300821032, limit=16 [ 380.141574][ T9921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.150049][ T9893] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 380.205960][ T9925] bond0: (slave veth3): Enslaving as an active interface with a down link [ 381.272167][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.389503][ T9921] bond0: (slave vlan2): Opening slave failed [ 381.752769][ T5357] Bluetooth: hci0: command 0x041b tx timeout [ 382.506953][ T9871] chnl_net:caif_netlink_parms(): no params data found [ 385.406900][ T2285] Bluetooth: hci0: command 0x040f tx timeout [ 385.575641][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.652832][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.672371][ T9871] device bridge_slave_0 entered promiscuous mode [ 385.690979][ T9965] tipc: Enabling of bearer rejected, already enabled [ 387.055113][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.074311][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.050544][ T2285] Bluetooth: hci0: command 0x0419 tx timeout [ 388.162003][ T9871] device bridge_slave_1 entered promiscuous mode [ 388.455419][T10001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.327968][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.360045][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.566453][ T9871] team0: Port device team_slave_0 added [ 391.588351][ T9871] team0: Port device team_slave_1 added [ 395.164882][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1184'. [ 395.219038][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.869860][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.188162][ T9871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.213836][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.221265][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.318339][ T9871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.112215][ T9871] device hsr_slave_0 entered promiscuous mode [ 397.140600][ T9871] device hsr_slave_1 entered promiscuous mode [ 401.173420][ T9686] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 401.219585][ T9686] infiniband syz1: set down [ 401.308675][ T6707] infiniband syz1: ib_query_port failed (-19) [ 401.391860][ T1276] smc: removing ib device syz1 [ 401.429976][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1191'. [ 401.588454][ T6702] Bluetooth: hci3: command 0x0406 tx timeout [ 401.804963][T10090] tipc: Enabling of bearer rejected, already enabled [ 402.567349][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1197'. [ 402.663163][T10103] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1198'. [ 402.725644][ T9871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.775407][ T9871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.835194][ T9871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.855275][ T9871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.017941][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.093380][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.659253][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.735473][ T9871] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.003720][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.013018][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.021593][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.028727][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.037616][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.565405][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.653027][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.660519][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.691656][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.704967][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.723740][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.734071][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.743307][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 410.751802][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.522815][T10195] ksmbd: Unknown IPC event: 0, ignore. [ 412.541434][ T4410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.595079][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 412.704658][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 412.742662][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 412.788101][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.851992][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.874317][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.947971][ T9871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 413.140356][ T4410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.935430][ T4410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.950174][T10245] loop6: detected capacity change from 0 to 256 [ 415.053924][T10245] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x52218cae, utbl_chksum : 0xe619d30d) [ 415.898736][ T4410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.477997][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.526498][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.543995][T10269] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 417.105558][ T9871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.179370][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 417.231170][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.509274][T10279] loop7: detected capacity change from 0 to 512 [ 417.697383][T10279] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 417.805791][ T9871] device veth0_vlan entered promiscuous mode [ 417.859485][T10279] EXT4-fs (loop7): 1 truncate cleaned up [ 417.866188][T10279] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.951008][ T9871] device veth1_vlan entered promiscuous mode [ 418.677726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 418.716946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.830861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 418.896558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 420.189057][ T9871] device veth0_macvtap entered promiscuous mode [ 420.276067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.318449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.348742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.373909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.398180][ T9871] device veth1_macvtap entered promiscuous mode [ 420.728745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.553120][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.616533][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.627035][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.637721][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.648037][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.659316][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.674454][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.686914][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.698766][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.711141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 423.740362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.786998][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.815164][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.845666][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.987925][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.998960][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.010731][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.028998][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.067397][ T9871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.076874][ T9871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.086270][ T9871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.096064][ T9871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.597346][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.710476][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.817539][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 424.937959][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.966195][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.038586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.848381][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.915386][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 426.019818][T10360] netlink: 'syz.8.1252': attribute type 10 has an invalid length. [ 426.562440][T10369] xt_NFQUEUE: number of total queues is 0 [ 427.232437][T10360] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1252'. [ 427.447047][T10360] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 430.353362][T10396] loop6: detected capacity change from 0 to 512 [ 430.580794][T10393] loop3: detected capacity change from 0 to 4096 [ 430.653872][T10393] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 431.292555][T10405] ntfs3: loop3: ino=22, "cgroup.controllers" fallocate(0x40) is not supported [ 431.634284][ T9871] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 431.674903][T10396] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 431.923029][T10412] overlayfs: missing 'lowerdir' [ 432.718489][ T4410] device hsr_slave_0 left promiscuous mode [ 432.735813][ T4410] device hsr_slave_1 left promiscuous mode [ 433.547253][T10423] loop7: detected capacity change from 0 to 2048 [ 433.658369][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.668448][T10423] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 433.697421][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.790606][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.816400][T10442] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.832513][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.886139][T10423] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 433.900761][ T4410] device bridge_slave_0 left promiscuous mode [ 433.938245][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.946130][T10423] Remounting filesystem read-only [ 433.951812][T10423] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 434.002092][ T4410] device veth1_macvtap left promiscuous mode [ 434.006838][T10423] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 434.013304][ T4410] device veth0_macvtap left promiscuous mode [ 434.028735][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 434.028751][ T26] audit: type=1800 audit(1754636097.970:107): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1266" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 434.033885][ T4410] device veth1_vlan left promiscuous mode [ 434.109732][ T4410] device veth0_vlan left promiscuous mode [ 434.297743][ T4410] team0 (unregistering): Port device bridge2 removed [ 435.274753][ T4410] team0 (unregistering): Port device team_slave_1 removed [ 435.335913][ T4410] team0 (unregistering): Port device team_slave_0 removed [ 435.632580][T10458] binder: 10452:10458 ioctl 4018620d 0 returned -22 [ 435.640214][T10458] binder: 10452:10458 unknown command 1074553619 [ 435.646613][T10458] binder: 10452:10458 ioctl c0306201 2000000001c0 returned -22 [ 435.775154][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1267'. [ 440.014382][T10505] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 440.202951][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209461][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.587386][T10514] loop6: detected capacity change from 0 to 16 [ 441.398811][T10514] erofs: (device loop6): mounted with root inode @ nid 36. [ 441.412126][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 441.422920][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 441.432142][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 441.442601][T10514] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 441.452151][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 441.461523][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 441.472232][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 441.481481][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 441.491678][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 441.502761][T10514] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 441.512273][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 441.521411][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 441.530969][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 441.540360][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 441.549727][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 441.558851][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 441.568933][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 441.578068][T10514] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 441.587512][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 441.596669][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 441.606889][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 441.616317][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 441.625953][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 441.635230][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 441.644514][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 441.654846][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 441.664111][T10514] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 441.673586][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 441.682784][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 441.692874][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 441.701933][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 441.712346][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 441.721471][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 441.730622][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 441.739728][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 441.748960][T10514] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 441.760727][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 441.770771][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 441.780095][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 441.789609][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 441.798721][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 441.808054][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 221183 of nid 36 [ 441.829457][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 441.839030][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 441.849090][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 441.858189][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 212991 of nid 36 [ 441.868609][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 441.877712][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 441.888034][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 441.897143][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 204799 of nid 36 [ 441.907420][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 441.916541][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 441.926615][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 441.935704][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 441.945854][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 441.955274][T10514] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 441.964919][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 441.974330][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 441.984099][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 441.993588][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 442.002742][T10514] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 442.012173][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 442.021890][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 442.031171][T10514] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 442.040777][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 442.050040][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 442.059557][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 442.069790][T10514] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 442.079992][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 442.100274][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 442.109851][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 442.119135][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 442.129688][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 442.154438][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 442.168324][T10514] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 442.178159][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 442.188094][T10514] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 442.198511][T10514] erofs: (device loop6): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 442.208686][T10514] attempt to access beyond end of device [ 442.208686][T10514] loop6: rw=524288, want=848, limit=16 [ 442.220450][T10514] attempt to access beyond end of device [ 442.220450][T10514] loop6: rw=524288, want=13478624104, limit=16 [ 442.236523][T10514] attempt to access beyond end of device [ 442.236523][T10514] loop6: rw=524288, want=13478624080, limit=16 [ 442.249417][T10514] attempt to access beyond end of device [ 442.249417][T10514] loop6: rw=524288, want=40, limit=16 [ 442.261770][T10514] attempt to access beyond end of device [ 442.261770][T10514] loop6: rw=524288, want=96, limit=16 [ 442.273653][T10514] attempt to access beyond end of device [ 442.273653][T10514] loop6: rw=524288, want=32, limit=16 [ 445.435128][T10556] loop3: detected capacity change from 0 to 64 [ 462.893993][ T6703] Bluetooth: hci4: command 0x0406 tx timeout [ 467.668797][T10676] loop7: detected capacity change from 0 to 256 [ 468.438345][T10676] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.109523][T10676] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 471.223263][T10676] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 477.397832][T10776] delete_channel: no stack [ 477.842682][T10776] delete_channel: no stack [ 482.521232][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1348'. [ 485.091285][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1364'. [ 488.297079][T10853] sp0: Synchronizing with TNC [ 488.840859][T10875] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 488.852578][T10875] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 489.769484][T10851] [U] è` [ 491.415508][T10896] loop6: detected capacity change from 0 to 256 [ 491.708610][T10896] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 491.732523][T10896] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 493.427145][T10896] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 496.580909][T10942] netlink: 'syz.7.1377': attribute type 1 has an invalid length. [ 496.711110][T10942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.336825][T10948] bond1: (slave veth3): Enslaving as an active interface with a down link [ 498.420526][T10948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.648221][T10979] loop3: detected capacity change from 0 to 256 [ 501.633616][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.640219][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.726035][T10979] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 501.780191][T10979] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 503.885333][ T5352] Bluetooth: hci0: command 0x0406 tx timeout [ 503.913814][T10979] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 504.000804][T10994] loop7: detected capacity change from 0 to 16 [ 504.061506][T10994] erofs: (device loop7): mounted with root inode @ nid 36. [ 505.782574][T11013] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 513.895577][T11067] loop6: detected capacity change from 0 to 256 [ 514.068630][T11067] exfat: Deprecated parameter 'utf8' [ 514.076586][T11067] exfat: Deprecated parameter 'namecase' [ 514.090708][T11067] exfat: Deprecated parameter 'utf8' [ 514.541546][T11067] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 514.898442][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 515.562565][T11077] 9pnet: Insufficient options for proto=fd [ 517.199115][T11084] affs: No valid root block on device nullb0 [ 523.727221][T11152] [ 523.729598][T11152] ====================================================== [ 523.736734][T11152] WARNING: possible circular locking dependency detected [ 523.743802][T11152] 5.15.189-syzkaller #0 Not tainted [ 523.749109][T11152] ------------------------------------------------------ [ 523.756231][T11152] syz.3.1428/11152 is trying to acquire lock: [ 523.762317][T11152] ffffffff8d36d418 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_ioctl+0x38d/0xce0 [ 523.771678][T11152] [ 523.771678][T11152] but task is already holding lock: [ 523.779257][T11152] ffff8881441af770 (&nr_node->node_lock){+...}-{2:2}, at: nr_rt_ioctl+0x190/0xce0 [ 523.788514][T11152] [ 523.788514][T11152] which lock already depends on the new lock. [ 523.788514][T11152] [ 523.798929][T11152] [ 523.798929][T11152] the existing dependency chain (in reverse order) is: [ 523.808056][T11152] [ 523.808056][T11152] -> #2 (&nr_node->node_lock){+...}-{2:2}: [ 523.816075][T11152] _raw_spin_lock_bh+0x32/0x50 [ 523.821396][T11152] nr_rt_ioctl+0x190/0xce0 [ 523.826504][T11152] sock_do_ioctl+0xd3/0x2f0 [ 523.831660][T11152] sock_ioctl+0x4ed/0x6e0 [ 523.836548][T11152] __se_sys_ioctl+0xfa/0x170 [ 523.841692][T11152] do_syscall_64+0x4c/0xa0 [ 523.846669][T11152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.853115][T11152] [ 523.853115][T11152] -> #1 (nr_node_list_lock){+...}-{2:2}: [ 523.860966][T11152] _raw_spin_lock_bh+0x32/0x50 [ 523.866367][T11152] nr_rt_device_down+0xa5/0x710 [ 523.871767][T11152] nr_device_event+0x133/0x140 [ 523.877076][T11152] raw_notifier_call_chain+0xcb/0x160 [ 523.882988][T11152] __dev_notify_flags+0x178/0x2d0 [ 523.888558][T11152] dev_change_flags+0xe3/0x1a0 [ 523.893876][T11152] dev_ifsioc+0x147/0xe70 [ 523.898752][T11152] dev_ioctl+0x55f/0xe50 [ 523.903534][T11152] sock_do_ioctl+0x222/0x2f0 [ 523.908673][T11152] sock_ioctl+0x4ed/0x6e0 [ 523.913545][T11152] __se_sys_ioctl+0xfa/0x170 [ 523.918694][T11152] do_syscall_64+0x4c/0xa0 [ 523.923675][T11152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.930119][T11152] [ 523.930119][T11152] -> #0 (nr_neigh_list_lock){+...}-{2:2}: [ 523.938044][T11152] __lock_acquire+0x2c33/0x7c60 [ 523.943446][T11152] lock_acquire+0x197/0x3f0 [ 523.948557][T11152] _raw_spin_lock_bh+0x32/0x50 [ 523.954056][T11152] nr_rt_ioctl+0x38d/0xce0 [ 523.959031][T11152] sock_do_ioctl+0xd3/0x2f0 [ 523.964083][T11152] sock_ioctl+0x4ed/0x6e0 [ 523.968956][T11152] __se_sys_ioctl+0xfa/0x170 [ 523.974191][T11152] do_syscall_64+0x4c/0xa0 [ 523.979156][T11152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.985603][T11152] [ 523.985603][T11152] other info that might help us debug this: [ 523.985603][T11152] [ 523.995944][T11152] Chain exists of: [ 523.995944][T11152] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 523.995944][T11152] [ 524.009800][T11152] Possible unsafe locking scenario: [ 524.009800][T11152] [ 524.017373][T11152] CPU0 CPU1 [ 524.022864][T11152] ---- ---- [ 524.028335][T11152] lock(&nr_node->node_lock); [ 524.033133][T11152] lock(nr_node_list_lock); [ 524.040275][T11152] lock(&nr_node->node_lock); [ 524.047671][T11152] lock(nr_neigh_list_lock); [ 524.052384][T11152] [ 524.052384][T11152] *** DEADLOCK *** [ 524.052384][T11152] [ 524.060555][T11152] 2 locks held by syz.3.1428/11152: [ 524.065775][T11152] #0: ffffffff8d36d478 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_ioctl+0x101/0xce0 [ 524.075397][T11152] #1: ffff8881441af770 (&nr_node->node_lock){+...}-{2:2}, at: nr_rt_ioctl+0x190/0xce0 [ 524.085285][T11152] [ 524.085285][T11152] stack backtrace: [ 524.091193][T11152] CPU: 0 PID: 11152 Comm: syz.3.1428 Not tainted 5.15.189-syzkaller #0 [ 524.099535][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.109809][T11152] Call Trace: [ 524.113120][T11152] [ 524.116080][T11152] dump_stack_lvl+0x168/0x230 [ 524.120786][T11152] ? load_image+0x3b0/0x3b0 [ 524.125448][T11152] ? show_regs_print_info+0x20/0x20 [ 524.130770][T11152] ? print_circular_bug+0x12b/0x1a0 [ 524.136210][T11152] check_noncircular+0x274/0x310 [ 524.141184][T11152] ? add_chain_block+0x940/0x940 [ 524.146152][T11152] ? lockdep_lock+0xdc/0x1e0 [ 524.150771][T11152] ? lockdep_unlock+0x134/0x2d0 [ 524.155656][T11152] ? lockdep_lock+0x1e0/0x1e0 [ 524.160361][T11152] ? mark_lock+0x94/0x320 [ 524.164734][T11152] __lock_acquire+0x2c33/0x7c60 [ 524.169709][T11152] ? mark_lock+0x94/0x320 [ 524.174271][T11152] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 524.180421][T11152] ? verify_lock_unused+0x140/0x140 [ 524.185746][T11152] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 524.191434][T11152] ? lockdep_hardirqs_on+0x94/0x140 [ 524.196684][T11152] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 524.202360][T11152] lock_acquire+0x197/0x3f0 [ 524.206902][T11152] ? nr_rt_ioctl+0x38d/0xce0 [ 524.212234][T11152] ? read_lock_is_recursive+0x10/0x10 [ 524.218174][T11152] ? do_raw_spin_lock+0x11d/0x280 [ 524.223245][T11152] ? __rwlock_init+0x140/0x140 [ 524.228040][T11152] ? lock_chain_count+0x20/0x20 [ 524.233024][T11152] ? nr_rt_ioctl+0x38d/0xce0 [ 524.237647][T11152] _raw_spin_lock_bh+0x32/0x50 [ 524.242704][T11152] ? nr_rt_ioctl+0x38d/0xce0 [ 524.247478][T11152] nr_rt_ioctl+0x38d/0xce0 [ 524.251923][T11152] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 524.257725][T11152] ? nr_dev_get+0x310/0x310 [ 524.262263][T11152] ? apparmor_capable+0x12c/0x190 [ 524.267369][T11152] ? capable+0x84/0xe0 [ 524.271469][T11152] ? nr_ioctl+0x157/0x300 [ 524.275820][T11152] sock_do_ioctl+0xd3/0x2f0 [ 524.280516][T11152] ? sock_show_fdinfo+0xb0/0xb0 [ 524.285669][T11152] sock_ioctl+0x4ed/0x6e0 [ 524.290087][T11152] ? sock_poll+0x3f0/0x3f0 [ 524.294550][T11152] ? bpf_lsm_file_ioctl+0x5/0x10 [ 524.299605][T11152] ? security_file_ioctl+0x7c/0xa0 [ 524.304841][T11152] ? sock_poll+0x3f0/0x3f0 [ 524.309483][T11152] __se_sys_ioctl+0xfa/0x170 [ 524.314114][T11152] do_syscall_64+0x4c/0xa0 [ 524.318551][T11152] ? clear_bhb_loop+0x30/0x80 [ 524.323256][T11152] ? clear_bhb_loop+0x30/0x80 [ 524.328100][T11152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.334208][T11152] RIP: 0033:0x7f649f72fbe9 [ 524.338655][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.358812][T11152] RSP: 002b:00007f649d976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.367868][T11152] RAX: ffffffffffffffda RBX: 00007f649f957090 RCX: 00007f649f72fbe9 [ 524.375875][T11152] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000a [ 524.383870][T11152] RBP: 00007f649f7b2e19 R08: 0000000000000000 R09: 0000000000000000 [ 524.391881][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.400031][T11152] R13: 00007f649f957128 R14: 00007f649f957090 R15: 00007fff0a8cadb8 [ 524.408036][T11152]