last executing test programs: 9m54.12638069s ago: executing program 0 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ustat(0x7, 0x0) 9m53.947718182s ago: executing program 0 (id=53): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) close_range(r5, r6, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9m51.088512847s ago: executing program 0 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000001c0)=r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 9m47.950415526s ago: executing program 0 (id=64): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x1004400, &(0x7f0000000780)={[], [{@subj_role={'subj_role', 0x3d, '-R:).'}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 9m47.776927768s ago: executing program 0 (id=67): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom1\x00', 0x800, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x2b8, 0x0, 0xf8, 0x6000000, 0x200, 0x3a8, 0x3a8, 0x200, 0x3a8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'virt_wifi0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0xd2030000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 9m42.274090426s ago: executing program 0 (id=77): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r5, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00), 0x0, 0xd7, &(0x7f0000000c40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nogrpid}, {@noload}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000000280)="$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") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r6 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003040)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3802, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c, 0x0}}], 0x1, 0x24040002) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0xabea, 0x3fc00, 0x0, 0xf0}) 9m27.144648482s ago: executing program 32 (id=77): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b3434076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r5, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00), 0x0, 0xd7, &(0x7f0000000c40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nogrpid}, {@noload}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000000280)="$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") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r6 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003040)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3802, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c, 0x0}}], 0x1, 0x24040002) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0xabea, 0x3fc00, 0x0, 0xf0}) 8m9.152808933s ago: executing program 2 (id=283): socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) 8m8.184915165s ago: executing program 2 (id=286): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") prlimit64(r0, 0xd, &(0x7f0000000000)={0x25a2}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m6.554645305s ago: executing program 2 (id=289): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m6.354831147s ago: executing program 2 (id=290): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/59, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/72, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8m5.514511888s ago: executing program 2 (id=292): openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x20002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 8m0.401164301s ago: executing program 2 (id=299): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") prlimit64(r0, 0xd, &(0x7f0000000000)={0x25a2}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m44.352405709s ago: executing program 33 (id=299): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") prlimit64(r0, 0xd, &(0x7f0000000000)={0x25a2}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m11.999491406s ago: executing program 5 (id=512): ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x6, 0x0, 0x2, 0x9, 0x7, 0x6, 0x3000000025, 0x35be7902]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e22080018"], 0x2c}}, 0x0) 6m11.586379561s ago: executing program 5 (id=516): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a656064126", 0x7c, 0x0, 0x0, 0x0) 6m7.347774653s ago: executing program 5 (id=529): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x2, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 6m3.58319177s ago: executing program 5 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(r0, &(0x7f0000000000)='wchan\x00') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6m0.531265658s ago: executing program 5 (id=539): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 5m57.592406084s ago: executing program 5 (id=544): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8002, 0xc) pwritev(r0, 0x0, 0x0, 0x10000, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r6) 5m41.491365422s ago: executing program 34 (id=544): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8002, 0xc) pwritev(r0, 0x0, 0x0, 0x10000, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r6) 5m22.093745511s ago: executing program 4 (id=603): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x13, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10) unshare(0x46060480) 5m16.669443748s ago: executing program 4 (id=608): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m13.954218321s ago: executing program 4 (id=611): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', 0x0}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x3bff, 0x4) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 5m11.863274997s ago: executing program 4 (id=614): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0x5760, &(0x7f0000000080)={0x0, 0x4499c, 0x0, 0x1000, 0x29a}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5m9.079486521s ago: executing program 1 (id=616): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 5m8.760305705s ago: executing program 1 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x34d}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) lseek(0xffffffffffffffff, 0x2, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x144) 5m7.648193289s ago: executing program 1 (id=619): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 5m7.324168783s ago: executing program 1 (id=621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='4', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x20044011) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close(r5) 5m5.348740237s ago: executing program 1 (id=624): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="120000000e0000000800000002"], 0x50) 5m4.567216917s ago: executing program 1 (id=626): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000003], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 4m56.869360322s ago: executing program 4 (id=634): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4800) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r0, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="24ff03007600010000000000fcdbdf2507020000", @ANYRES8=r10, @ANYRESOCT=0x0], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32], 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0xc4001) renameat2(0xffffffffffffffff, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x1) 4m55.239661972s ago: executing program 4 (id=636): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') mkdir(0x0, 0x10) wait4(0x0, 0x0, 0x8, &(0x7f0000000040)) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 4m48.436674625s ago: executing program 35 (id=626): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000003], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 4m39.070451599s ago: executing program 36 (id=636): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') mkdir(0x0, 0x10) wait4(0x0, 0x0, 0x8, &(0x7f0000000040)) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 17.376431469s ago: executing program 3 (id=1135): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r5}) 16.584416678s ago: executing program 6 (id=1139): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x11, 0x10ffef8, 0x15, 0xa, 0x20000050, 0xfffffffc, 0x110, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x46) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x443, &(0x7f0000001040)="$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") 16.291788822s ago: executing program 3 (id=1140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 15.296439644s ago: executing program 3 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r3, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00%'], 0x20}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 13.852224841s ago: executing program 3 (id=1147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, 0x0, &(0x7f0000000380)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30}, 0x30) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)) unlink(&(0x7f00000001c0)='./control/file0\x00') 12.279530561s ago: executing program 7 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) 11.776154237s ago: executing program 7 (id=1150): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r5}) 9.999326249s ago: executing program 6 (id=1154): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x937}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x112) 7.757679566s ago: executing program 6 (id=1155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) 7.757152606s ago: executing program 9 (id=1156): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff) 6.873489057s ago: executing program 3 (id=1158): pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sync_file_range(0xffffffffffffffff, 0x123, 0x9, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x1, 0x0) io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x12, 0x2, 0x383}) syz_usb_connect(0x2, 0x52, &(0x7f0000000700)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405035716"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 6.462646852s ago: executing program 6 (id=1159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100), 0x4) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 6.462071992s ago: executing program 9 (id=1160): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.144492579s ago: executing program 8 (id=1161): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.815984474s ago: executing program 8 (id=1162): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, 0x0, &(0x7f0000000300)}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 3.511129477s ago: executing program 9 (id=1163): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.31245307s ago: executing program 8 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 3.149014662s ago: executing program 7 (id=1165): openat$kvm(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 3.104565202s ago: executing program 8 (id=1166): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.084138013s ago: executing program 3 (id=1167): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x46) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r8, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 2.996489083s ago: executing program 9 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2003800, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.793805686s ago: executing program 8 (id=1169): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='4', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x20044011) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close(r4) 1.880135817s ago: executing program 7 (id=1170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x38) 1.879691927s ago: executing program 9 (id=1171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r3, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00%'], 0x20}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 955.878008ms ago: executing program 8 (id=1172): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r2, 0x0, 0x80000001) 840.52638ms ago: executing program 7 (id=1173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) 669.225942ms ago: executing program 6 (id=1174): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 528.992273ms ago: executing program 7 (id=1175): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r5}) 212.459337ms ago: executing program 6 (id=1176): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) add_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000003c0)="e21a5116f3b7dbdb06d57706cb60e6a4318ca828a2677eff85b21478669927efce72c7e29028b8ad3d4046353cce90a0a9f71db457730f763f83842300f21bea633e51bf34caf606cb6c601f5827100de124c59f27631a8fe4e08cae0cb897fe9150f7ad490a8727b8aa5a069e76e2f1456febdccc", 0x75, 0xffffffffffffffff) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pwritev2(r2, &(0x7f0000000600)=[{0x0}, {&(0x7f00000005c0)="6f8c9f02f8478ad03a", 0x9}], 0x2, 0xd, 0xf25, 0x14) 0s ago: executing program 9 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 733402][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.101051][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.120469][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.200091][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.263626][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 290.263642][ T26] audit: type=1326 audit(1745988232.309:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 290.367538][ T6227] fuse: Bad value for 'fd' [ 290.836704][ T26] audit: type=1326 audit(1745988232.319:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 291.044067][ T26] audit: type=1326 audit(1745988232.319:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 291.245009][ T26] audit: type=1326 audit(1745988232.319:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 291.393293][ T26] audit: type=1326 audit(1745988232.419:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 291.417048][ T26] audit: type=1326 audit(1745988232.419:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 291.444377][ T26] audit: type=1326 audit(1745988232.419:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 291.469243][ T26] audit: type=1326 audit(1745988232.419:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 291.516893][ T26] audit: type=1326 audit(1745988232.419:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 293.103493][ T26] audit: type=1326 audit(1745988232.419:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 295.414283][ T48] Bluetooth: hci3: link tx timeout [ 295.419984][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 297.702330][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 298.851641][ T6310] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 299.886052][ T4266] Bluetooth: hci3: link tx timeout [ 299.891281][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.918943][ T6323] loop6: detected capacity change from 0 to 1024 [ 300.079443][ T6323] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 302.823648][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 302.823667][ T26] audit: type=1800 audit(1745988243.929:138): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.447" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 302.972633][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 304.595103][ T6347] loop5: detected capacity change from 0 to 512 [ 304.640731][ T6347] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 304.812159][ T6347] EXT4-fs (loop5): 1 truncate cleaned up [ 304.817958][ T6347] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 304.868302][ T6347] input: syz0 as /devices/virtual/input/input9 [ 306.978620][ T4762] EXT4-fs (loop5): unmounting filesystem. [ 307.202785][ T6362] netlink: 100 bytes leftover after parsing attributes in process `syz.3.454'. [ 307.275752][ T6370] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 307.875956][ T4266] Bluetooth: hci3: link tx timeout [ 307.881205][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 309.298279][ T6401] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 309.343802][ T6401] EXT4-fs (loop9): unable to read superblock [ 309.760590][ T6411] loop4: detected capacity change from 0 to 256 [ 309.872387][ T6411] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 313.406977][ T6438] loop4: detected capacity change from 0 to 1024 [ 313.477343][ T6438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.486063][ T4266] Bluetooth: hci3: link tx timeout [ 313.491232][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.537548][ T6438] EXT4-fs (loop4): invalid inodes per group: 0 [ 313.537548][ T6438] [ 314.356735][ T6452] input: syz0 as /devices/virtual/input/input10 [ 317.384974][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.429332][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.413701][ T4266] Bluetooth: hci3: link tx timeout [ 320.416307][ T952] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 320.418918][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.481351][ T6500] loop4: detected capacity change from 0 to 256 [ 320.613622][ T952] usb 4-1: Using ep0 maxpacket: 16 [ 320.621717][ T952] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 40909, setting to 1024 [ 320.673601][ T952] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 320.703942][ T952] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 321.056702][ T952] usb 4-1: string descriptor 0 read error: -71 [ 321.068249][ T952] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 321.848038][ T952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.895271][ T952] usb 4-1: can't set config #1, error -71 [ 321.926996][ T952] usb 4-1: USB disconnect, device number 4 [ 326.651457][ T6540] loop4: detected capacity change from 0 to 512 [ 326.701307][ T6540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 326.839117][ T6540] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 326.853739][ T6540] EXT4-fs (loop4): 1 truncate cleaned up [ 326.859434][ T6540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 327.009864][ T6540] EXT4-fs (loop4): unmounting filesystem. [ 327.288572][ T4266] Bluetooth: hci3: link tx timeout [ 327.294829][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 327.647351][ T6559] loop5: detected capacity change from 0 to 256 [ 327.751358][ T6559] FAT-fs (loop5): bogus logical sector size 0 [ 327.757656][ T6559] FAT-fs (loop5): Can't find a valid FAT filesystem [ 328.554809][ T6568] input: syz1 as /devices/virtual/input/input11 [ 330.181375][ T6583] loop5: detected capacity change from 0 to 16 [ 330.282370][ T6583] erofs: (device loop5): mounted with root inode @ nid 36. [ 334.393576][ T4266] Bluetooth: hci3: link tx timeout [ 334.398751][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 337.453393][ T4266] Bluetooth: hci3: link tx timeout [ 337.458637][ T4266] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.890203][ T6656] loop6: detected capacity change from 0 to 2048 [ 338.949784][ T6656] EXT4-fs: inline encryption not supported [ 339.063103][ T6656] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 339.341883][ T6687] tmpfs: Unknown parameter 'nolazytimeun' [ 340.147111][ T6689] loop5: detected capacity change from 0 to 512 [ 340.186960][ T6689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.329556][ T6689] EXT4-fs (loop5): orphan cleanup on readonly fs [ 340.363140][ T6689] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.529: bg 0: block 248: padding at end of block bitmap is not set [ 340.388449][ T6689] Quota error (device loop5): write_blk: dquota write failed [ 340.397530][ T6689] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 340.407911][ T6689] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.529: Failed to acquire dquot type 1 [ 340.455634][ T6689] EXT4-fs (loop5): 1 truncate cleaned up [ 340.669952][ T6689] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 341.144474][ T6695] loop4: detected capacity change from 0 to 512 [ 341.177627][ T6695] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.218892][ T6695] ext4: Unknown parameter 'seclabel' [ 341.509703][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 342.723815][ T26] audit: type=1326 audit(1745988284.727:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.3.536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x0 [ 342.796137][ T4762] EXT4-fs (loop5): unmounting filesystem. [ 346.803904][ T6722] loop6: detected capacity change from 0 to 512 [ 346.818742][ T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 348.155155][ T6722] EXT4-fs warning (device loop6): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop6. [ 352.644209][ T26] audit: type=1326 audit(1745988294.707:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6776 comm="syz.6.553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x0 [ 355.365891][ T6798] xt_hashlimit: size too large, truncated to 1048576 [ 363.151444][ T6841] input: syz1 as /devices/virtual/input/input14 [ 366.690941][ T6863] loop6: detected capacity change from 0 to 512 [ 366.752636][ T6863] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.574: bad orphan inode 134217728 [ 366.764068][ T6863] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 366.773097][ T6863] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.975725][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.985971][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.994460][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.003625][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.012859][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 367.022217][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.274156][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 370.138520][ T6905] loop6: detected capacity change from 0 to 4096 [ 370.145893][ T6905] ext4: Unknown parameter 'obj_role' [ 370.369335][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 371.857058][ T6712] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 372.584309][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 373.179825][ T6915] block device autoloading is deprecated and will be removed. [ 373.523623][ T3586] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 373.589019][ T6923] loop3: detected capacity change from 0 to 4096 [ 374.485468][ T3586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.543770][ T3586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.609415][ T3586] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 374.651022][ T3586] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 374.678548][ T3586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.773317][ T3586] usb 5-1: config 0 descriptor?? [ 374.821500][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 374.832146][ T3586] usb 5-1: can't set config #0, error -71 [ 374.902842][ T3586] usb 5-1: USB disconnect, device number 5 [ 375.725846][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 377.207866][ T6955] loop6: detected capacity change from 0 to 256 [ 377.657545][ T6955] FAT-fs (loop6): Directory bread(block 64) failed [ 377.822470][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 377.845678][ T6955] FAT-fs (loop6): Directory bread(block 65) failed [ 377.870774][ T6955] FAT-fs (loop6): Directory bread(block 66) failed [ 377.902378][ T6955] FAT-fs (loop6): Directory bread(block 67) failed [ 377.909160][ T6955] FAT-fs (loop6): Directory bread(block 68) failed [ 377.931655][ T6955] FAT-fs (loop6): Directory bread(block 69) failed [ 378.203358][ T6955] FAT-fs (loop6): Directory bread(block 70) failed [ 378.226429][ T6955] FAT-fs (loop6): Directory bread(block 71) failed [ 378.567137][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.586328][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.626321][ T6955] FAT-fs (loop6): Directory bread(block 72) failed [ 378.648883][ T6955] FAT-fs (loop6): Directory bread(block 73) failed [ 378.731963][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.747771][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.759211][ T6879] device bridge_slave_0 entered promiscuous mode [ 378.774513][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.809577][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.834232][ T6879] device bridge_slave_1 entered promiscuous mode [ 379.030065][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.068848][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.888603][ T6984] loop4: detected capacity change from 0 to 4096 [ 381.895860][ T6984] ext4: Unknown parameter 'obj_role' [ 382.086635][ T6984] loop4: detected capacity change from 0 to 512 [ 382.096339][ T6984] EXT4-fs: Ignoring removed orlov option [ 382.157764][ T6984] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 382.428441][ T6984] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.598: Attempting to read directory block (0) that is past i_size (256) [ 382.447119][ T6984] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 382.455656][ T6984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 382.796855][ T6879] team0: Port device team_slave_0 added [ 382.861400][ T6879] team0: Port device team_slave_1 added [ 383.835753][ T6987] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 384.229301][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.251686][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.283100][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.299298][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.306503][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.333160][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.346945][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 384.422620][ T7000] loop3: detected capacity change from 0 to 256 [ 384.485289][ T7000] exFAT-fs (loop3): bogus fat length [ 384.508572][ T7000] exFAT-fs (loop3): failed to read boot sector [ 384.522263][ T7000] exFAT-fs (loop3): failed to recognize exfat type [ 385.210835][ T7008] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 385.694675][ T7010] loop4: detected capacity change from 0 to 2048 [ 385.708560][ T7010] ext4: Unknown parameter 'noacl' [ 385.927042][ T6879] device hsr_slave_0 entered promiscuous mode [ 386.008295][ T6879] device hsr_slave_1 entered promiscuous mode [ 387.020095][ T6614] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.295853][ T6879] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 393.546773][ T6879] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 393.631418][ T6879] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 394.314214][ T6879] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.322778][ T7048] loop3: detected capacity change from 0 to 512 [ 394.461652][ T7048] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.612: casefold flag without casefold feature [ 394.687492][ T7048] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.612: couldn't read orphan inode 15 (err -117) [ 395.311045][ T7063] loop6: detected capacity change from 0 to 4096 [ 395.321955][ T7063] ext4: Unknown parameter 'obj_role' [ 395.580061][ T7063] loop6: detected capacity change from 0 to 512 [ 395.588765][ T7063] EXT4-fs: Ignoring removed orlov option [ 395.693869][ T7048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 395.770361][ T7063] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 395.854800][ T5873] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.008655][ T7063] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.613: Attempting to read directory block (0) that is past i_size (256) [ 396.056404][ T7063] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 396.064837][ T7063] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 396.358044][ T5873] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.014985][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 397.121629][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.234033][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.264142][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.329090][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.381877][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 397.462192][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.502150][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.550649][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.557901][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.614134][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.652257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.678438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.842559][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.849875][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.918776][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.754333][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.776286][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.848218][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.864679][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.912647][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.952339][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.984542][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.017338][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.047914][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.286957][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.796419][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 401.823928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 401.838545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 401.873385][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.830125][ T7144] loop3: detected capacity change from 0 to 4096 [ 402.841174][ T7144] ext4: Unknown parameter 'obj_role' [ 402.979907][ T22] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 403.102222][ T7144] loop3: detected capacity change from 0 to 512 [ 403.111965][ T7144] EXT4-fs: Ignoring removed orlov option [ 403.145315][ T7144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 403.332840][ T7144] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.627: Attempting to read directory block (0) that is past i_size (256) [ 403.349756][ T7144] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 403.358368][ T7144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 403.751513][ T22] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.203581][ T7146] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 404.923349][ T7157] input: syz0 as /devices/virtual/input/input15 [ 404.933763][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.960423][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 404.987189][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.045795][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.055516][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.102015][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.157000][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.202636][ T6879] device veth0_vlan entered promiscuous mode [ 405.251736][ T6879] device veth1_vlan entered promiscuous mode [ 405.415888][ T6879] device veth0_macvtap entered promiscuous mode [ 405.473096][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 405.493996][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.837034][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.130663][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.324902][ T6879] device veth1_macvtap entered promiscuous mode [ 407.816668][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.834508][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.844695][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.855212][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.903602][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.944671][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.995727][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.043715][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.094502][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.701078][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.746138][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.794541][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.864476][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.914065][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.942037][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.958659][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.971057][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.986689][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.000769][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.019459][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.031376][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.063659][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.084557][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.115417][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.127409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.144470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.181384][ T6879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.195880][ T6879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.238422][ T6879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.274695][ T6879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.924640][ T7189] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 410.992363][ T4468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.173666][ T4468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.336504][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.357666][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.886333][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.960047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.877485][ T7207] loop6: detected capacity change from 0 to 4096 [ 412.895680][ T7207] ext4: Unknown parameter 'obj_role' [ 414.073741][ T7210] xt_hashlimit: size too large, truncated to 1048576 [ 417.599577][ T5873] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 417.677783][ T7209] tty tty35: ldisc open failed (-12), clearing slot 34 [ 417.822876][ T5873] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 417.943699][ T7180] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 423.568227][ T7233] loop6: detected capacity change from 0 to 512 [ 423.651316][ T7233] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 423.866767][ T7233] EXT4-fs (loop6): 1 truncate cleaned up [ 423.872590][ T7233] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 426.277742][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 427.308381][ T7248] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 427.777918][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.788095][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.991481][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.012331][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.022825][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 428.036335][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 429.413814][ T5873] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 429.645435][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 429.659859][ T5873] usb 7-1: unable to get BOS descriptor or descriptor too short [ 429.795962][ T5873] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.826661][ T5873] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.857033][ T5873] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.897067][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.905675][ T5873] usb 7-1: Product: syz [ 429.910008][ T5873] usb 7-1: Manufacturer: syz [ 429.915079][ T5873] usb 7-1: SerialNumber: syz [ 429.986487][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.996918][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.008460][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.017243][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.032767][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 430.043858][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.212309][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 430.249009][ T5873] usb 7-1: 0:2 : does not exist [ 430.282434][ T5873] usb 7-1: unit 5 not found! [ 430.354214][ T7263] xt_hashlimit: size too large, truncated to 1048576 [ 430.687018][ T5873] usb 7-1: USB disconnect, device number 2 [ 432.284048][ T4263] Bluetooth: hci5: command 0x041b tx timeout [ 432.467851][ T7222] udevd[7222]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.523613][ T4263] Bluetooth: hci0: command 0x0409 tx timeout [ 432.561610][ T7286] loop7: detected capacity change from 0 to 512 [ 432.746638][ T7286] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.654: casefold flag without casefold feature [ 432.787919][ T7258] chnl_net:caif_netlink_parms(): no params data found [ 432.837986][ T7286] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.654: couldn't read orphan inode 15 (err -117) [ 432.893772][ T7286] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 433.147452][ T6879] EXT4-fs (loop7): unmounting filesystem. [ 434.598490][ T4263] Bluetooth: hci5: command 0x040f tx timeout [ 435.395794][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 436.825218][ T4263] Bluetooth: hci5: command 0x0419 tx timeout [ 437.190173][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.243638][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.293864][ T7258] device bridge_slave_0 entered promiscuous mode [ 437.302911][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.311436][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.325091][ T7258] device bridge_slave_1 entered promiscuous mode [ 437.403769][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 437.425314][ T7272] chnl_net:caif_netlink_parms(): no params data found [ 437.562470][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.621122][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.166942][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.173287][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.191143][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 441.359914][ T7258] team0: Port device team_slave_0 added [ 441.445692][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.469080][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.503178][ T7272] device bridge_slave_0 entered promiscuous mode [ 441.532113][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.551629][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.598722][ T7272] device bridge_slave_1 entered promiscuous mode [ 442.326290][ T7258] team0: Port device team_slave_1 added [ 442.332288][ T7338] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 442.681730][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.756547][ T7347] loop6: detected capacity change from 0 to 512 [ 442.811320][ T7347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.853932][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.892662][ T7347] EXT4-fs (loop6): orphan cleanup on readonly fs [ 442.924209][ T7347] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.666: bg 0: block 248: padding at end of block bitmap is not set [ 442.947700][ T7347] Quota error (device loop6): write_blk: dquota write failed [ 442.955759][ T7347] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 442.965969][ T7347] EXT4-fs error (device loop6): ext4_acquire_dquot:6802: comm syz.6.666: Failed to acquire dquot type 1 [ 442.987444][ T7347] EXT4-fs (loop6): 1 truncate cleaned up [ 442.999485][ T7347] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 443.047156][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.608751][ T7258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.675858][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.699220][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.727960][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.822655][ T7258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.634808][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 445.773847][ T5819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.256829][ T7258] device hsr_slave_0 entered promiscuous mode [ 446.525754][ T7258] device hsr_slave_1 entered promiscuous mode [ 446.646164][ T7258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.757396][ T7258] Cannot create hsr debugfs directory [ 447.015559][ T5819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.109839][ T7272] team0: Port device team_slave_0 added [ 447.239572][ T5819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.341430][ T7272] team0: Port device team_slave_1 added [ 447.351288][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.668'. [ 447.508872][ T5819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.536546][ T7364] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 447.568891][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.607140][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.719564][ T7272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.772119][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.784429][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.973838][ T7272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.916953][ T7272] device hsr_slave_0 entered promiscuous mode [ 448.935764][ T7272] device hsr_slave_1 entered promiscuous mode [ 448.961005][ T7272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.013568][ T7272] Cannot create hsr debugfs directory [ 449.599425][ T5819] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.079649][ T7258] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 450.209950][ T5819] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.258228][ T7258] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 450.283181][ T7258] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 450.412090][ T5819] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.464871][ T7258] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 450.624235][ T5819] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.673628][ T4333] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 450.853674][ T4333] usb 7-1: Using ep0 maxpacket: 32 [ 450.862783][ T4333] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 450.923618][ T4333] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 450.964871][ T4333] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 450.993689][ T4333] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 451.002109][ T4333] usb 7-1: Product: syz [ 451.076025][ T7272] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 451.085070][ T4333] usb 7-1: Manufacturer: syz [ 451.121795][ T7258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.144928][ T7272] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 451.195330][ T7272] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 451.262396][ T7258] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.273947][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 451.295683][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 451.338572][ T4333] usb 7-1: USB disconnect, device number 3 [ 451.345937][ T7272] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 451.433881][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 451.486753][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 451.513405][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.520663][ T4799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.564026][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 451.583199][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.779571][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.786894][ T4799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.813932][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 451.823101][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 451.839213][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.227088][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.239074][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.252749][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.266643][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.676'. [ 453.328136][ T7258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.354324][ T7258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.651125][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.807754][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 454.012013][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 454.253640][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.418007][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.444329][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.493328][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.889967][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.485306][ T7435] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 456.567208][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.827430][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.846284][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.870364][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 456.893630][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.910437][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.917785][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.944120][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.964122][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.982674][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.989947][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.030842][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.050408][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.071272][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.122604][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.261883][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.272521][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.486841][ T7462] xt_hashlimit: size too large, truncated to 1048576 [ 461.276648][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.297628][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.318736][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.384526][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.393123][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.415325][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.432967][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.472801][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.496576][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 461.547362][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.983504][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 462.204519][ T5873] usb 8-1: device descriptor read/64, error -71 [ 462.443966][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 462.493574][ T5873] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 462.673767][ T5873] usb 8-1: device descriptor read/64, error -71 [ 462.958023][ T5873] usb usb8-port1: attempt power cycle [ 463.383775][ T5873] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 463.456093][ T5873] usb 8-1: device descriptor read/8, error -71 [ 463.768179][ T7497] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 463.993804][ T5873] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 464.050615][ T5873] usb 8-1: device descriptor read/8, error -71 [ 464.179474][ T5873] usb usb8-port1: unable to enumerate USB device [ 464.189404][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.209054][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.278451][ T7272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.926456][ T4485] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 465.994166][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 466.023984][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.081229][ T7258] device veth0_vlan entered promiscuous mode [ 466.094388][ T4485] usb 4-1: device descriptor read/64, error -71 [ 466.136213][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.154512][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.181775][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.210872][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.344465][ T5819] device hsr_slave_0 left promiscuous mode [ 466.357721][ T5819] device hsr_slave_1 left promiscuous mode [ 466.365290][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.372762][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.383673][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.399469][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.412635][ T5819] device bridge_slave_1 left promiscuous mode [ 466.431090][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.451672][ T5819] device bridge_slave_0 left promiscuous mode [ 466.460408][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.489036][ T5819] device hsr_slave_0 left promiscuous mode [ 466.500588][ T5819] device hsr_slave_1 left promiscuous mode [ 466.512567][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.532296][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.548186][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.556687][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.565256][ T5819] device bridge_slave_1 left promiscuous mode [ 466.571519][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.580369][ T5819] device bridge_slave_0 left promiscuous mode [ 466.586726][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.603919][ T4485] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 466.681345][ T7538] xt_hashlimit: size too large, truncated to 1048576 [ 467.175201][ T4485] usb 4-1: device descriptor read/64, error -71 [ 467.484004][ T4485] usb usb4-port1: attempt power cycle [ 467.809052][ T26] audit: type=1326 audit(1745988409.869:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 468.931775][ T26] audit: type=1326 audit(1745988409.869:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 468.990664][ T26] audit: type=1326 audit(1745988409.869:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 469.069628][ T26] audit: type=1326 audit(1745988409.869:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 469.104279][ T26] audit: type=1326 audit(1745988409.869:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 469.138486][ T26] audit: type=1326 audit(1745988409.869:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 469.171045][ T26] audit: type=1326 audit(1745988409.879:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 469.203547][ T26] audit: type=1326 audit(1745988409.879:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 469.239320][ T26] audit: type=1326 audit(1745988409.879:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 469.270603][ T26] audit: type=1326 audit(1745988409.879:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7543 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7ffc0000 [ 470.509657][ T5819] device veth1_macvtap left promiscuous mode [ 470.518013][ T5819] device veth0_macvtap left promiscuous mode [ 470.527564][ T5819] device veth1_vlan left promiscuous mode [ 470.533363][ T5819] device veth0_vlan left promiscuous mode [ 470.541481][ T5819] device veth1_macvtap left promiscuous mode [ 470.576627][ T5819] device veth0_macvtap left promiscuous mode [ 470.610445][ T5819] device veth1_vlan left promiscuous mode [ 470.660094][ T5819] device veth0_vlan left promiscuous mode [ 471.747842][ T7561] loop7: detected capacity change from 0 to 512 [ 471.780975][ T7561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 471.949805][ T7561] EXT4-fs (loop7): orphan cleanup on readonly fs [ 471.962831][ T7561] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.707: bg 0: block 248: padding at end of block bitmap is not set [ 471.994257][ T7561] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.707: Failed to acquire dquot type 1 [ 472.020661][ T7561] EXT4-fs (loop7): 1 truncate cleaned up [ 472.030221][ T7561] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 474.099853][ T6879] EXT4-fs (loop7): unmounting filesystem. [ 475.523702][ T4296] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 475.783774][ T4296] usb 7-1: device descriptor read/64, error -71 [ 476.075915][ T4296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 476.199568][ T5819] team0 (unregistering): Port device team_slave_1 removed [ 476.263607][ T4296] usb 7-1: device descriptor read/64, error -71 [ 476.320625][ T5819] team0 (unregistering): Port device team_slave_0 removed [ 476.414316][ T4296] usb usb7-port1: attempt power cycle [ 476.464622][ T5819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.615956][ T5819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.844141][ T4296] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 476.884208][ T4296] usb 7-1: device descriptor read/8, error -71 [ 477.163582][ T4296] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 477.206319][ T4296] usb 7-1: device descriptor read/8, error -71 [ 477.333856][ T4296] usb usb7-port1: unable to enumerate USB device [ 477.458871][ T7579] loop3: detected capacity change from 0 to 256 [ 477.473352][ T7579] FAT-fs (loop3): Unrecognized mount option "shortname=mixe" or missing value [ 477.521371][ T7222] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 478.345753][ T5819] bond0 (unregistering): Released all slaves [ 478.852356][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.879513][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.888129][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.909197][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.918692][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 478.935402][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.343304][ T5819] team0 (unregistering): Port device team_slave_1 removed [ 479.499726][ T5819] team0 (unregistering): Port device team_slave_0 removed [ 479.556180][ T5819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.610408][ T5819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.221036][ T5819] bond0 (unregistering): Released all slaves [ 480.423895][ T7592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.431754][ T7592] IPv6: NLM_F_CREATE should be set when creating new route [ 482.087447][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 483.635896][ T7611] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 484.135017][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 484.640378][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.647998][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.747870][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.909195][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.213934][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 486.810790][ T7593] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.828054][ T7593] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.837710][ T7593] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.847033][ T7593] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.411427][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 487.465646][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 487.833830][ T4296] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 488.054745][ T4296] usb 7-1: device descriptor read/64, error -71 [ 488.160563][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.209159][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.244653][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.265518][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.283753][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 488.403620][ T4296] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 488.573588][ T4296] usb 7-1: device descriptor read/64, error -71 [ 488.694466][ T4296] usb usb7-port1: attempt power cycle [ 488.767343][ T7589] chnl_net:caif_netlink_parms(): no params data found [ 489.113553][ T4296] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 489.154318][ T4296] usb 7-1: device descriptor read/8, error -71 [ 489.317387][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.367204][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.398339][ T7589] device bridge_slave_0 entered promiscuous mode [ 489.433663][ T4296] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 489.490649][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.503908][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.511282][ T4296] usb 7-1: device descriptor read/8, error -71 [ 489.541966][ T7589] device bridge_slave_1 entered promiscuous mode [ 489.549143][ T4263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.559710][ T4263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.568802][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.588588][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.598148][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 489.605999][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.633703][ T4296] usb usb7-port1: unable to enumerate USB device [ 489.686585][ T7589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.739927][ T7589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.958275][ T7589] team0: Port device team_slave_0 added [ 489.993320][ T7589] team0: Port device team_slave_1 added [ 490.057784][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.073513][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.140390][ T7589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.171560][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.183554][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.579907][ T7589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.847079][ T7589] device hsr_slave_0 entered promiscuous mode [ 490.965463][ T7589] device hsr_slave_1 entered promiscuous mode [ 491.013102][ T7589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.038947][ T7589] Cannot create hsr debugfs directory [ 491.671342][ T4263] Bluetooth: hci0: command 0x0409 tx timeout [ 492.432151][ T4485] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 492.487919][ T7649] chnl_net:caif_netlink_parms(): no params data found [ 492.638656][ T4485] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 492.648852][ T4485] usb 4-1: config 0 interface 0 has no altsetting 0 [ 492.659347][ T4485] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 492.669587][ T4485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.678809][ T4485] usb 4-1: Product: syz [ 492.683235][ T4485] usb 4-1: Manufacturer: syz [ 492.688500][ T4485] usb 4-1: SerialNumber: syz [ 492.777595][ T4485] usb 4-1: config 0 descriptor?? [ 492.819186][ T4485] usb 4-1: selecting invalid altsetting 0 [ 492.944531][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.969727][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.990095][ T7649] device bridge_slave_0 entered promiscuous mode [ 493.071072][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.080444][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.081652][ T4293] usb 4-1: USB disconnect, device number 8 [ 493.112014][ T7649] device bridge_slave_1 entered promiscuous mode [ 493.224214][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.311978][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.472226][ T7649] team0: Port device team_slave_0 added [ 493.506312][ T7649] team0: Port device team_slave_1 added [ 493.725561][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 494.303866][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 494.944687][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 494.944734][ T26] audit: type=1326 audit(1745988436.989:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.6.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 495.522067][ T26] audit: type=1326 audit(1745988437.499:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.6.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 495.733857][ T4295] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 495.778885][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.793576][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.850356][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.011101][ T4295] usb 8-1: device descriptor read/64, error -71 [ 496.294046][ T4295] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 496.494330][ T4295] usb 8-1: device descriptor read/64, error -71 [ 496.519572][ T7589] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 496.880160][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 496.899105][ T4295] usb usb8-port1: attempt power cycle [ 496.951225][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.963715][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.017574][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.034425][ T7589] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 497.227414][ T7589] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 497.373637][ T7589] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 497.397112][ T7649] device hsr_slave_0 entered promiscuous mode [ 497.425688][ T7649] device hsr_slave_1 entered promiscuous mode [ 497.442837][ T7649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.469515][ T7649] Cannot create hsr debugfs directory [ 498.692482][ T7589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.740216][ T7589] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.758034][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.768605][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.798832][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 498.826362][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.877750][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.884965][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.923506][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 498.963954][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 498.976628][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.986072][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.993222][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.012480][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.134850][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 499.208187][ T5819] device hsr_slave_0 left promiscuous mode [ 499.232991][ T5819] device hsr_slave_1 left promiscuous mode [ 499.253792][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.268504][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.283362][ T5819] device bridge_slave_1 left promiscuous mode [ 499.295622][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.322275][ T5819] device bridge_slave_0 left promiscuous mode [ 499.330943][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.358656][ T5819] device hsr_slave_0 left promiscuous mode [ 499.372470][ T5819] device hsr_slave_1 left promiscuous mode [ 499.389906][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.415858][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.431791][ T5819] device bridge_slave_1 left promiscuous mode [ 499.445642][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.469456][ T5819] device bridge_slave_0 left promiscuous mode [ 499.482198][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.679079][ T5819] device veth0_vlan left promiscuous mode [ 500.203147][ T7755] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.337344][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.343771][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.838257][ T5819] team0 (unregistering): Port device team_slave_1 removed [ 502.065554][ T5819] team0 (unregistering): Port device team_slave_0 removed [ 502.302624][ T5819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.604255][ T5819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.628712][ T5819] bond0 (unregistering): Released all slaves [ 505.459719][ T5819] team0 (unregistering): Port device team_slave_1 removed [ 505.473180][ T7793] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 505.567780][ T5819] team0 (unregistering): Port device team_slave_0 removed [ 505.968733][ T5819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.410006][ T5819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.681618][ T5819] bond0 (unregistering): Released all slaves [ 507.814467][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.825363][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.835468][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.867722][ T7802] netlink: 76 bytes leftover after parsing attributes in process `syz.3.760'. [ 507.986932][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 508.004554][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 508.025198][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 508.051182][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 508.071872][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 508.090824][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 508.587259][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.623605][ T7831] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 510.800421][ T7649] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 510.842577][ T7649] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 511.019581][ T7649] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 511.794906][ T7649] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 512.174816][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.215832][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.269989][ T7589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.572998][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.642808][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.656476][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.723554][ T7649] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.761081][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.778754][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.834054][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.841325][ T4608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.890045][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 513.161115][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 513.318684][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.535806][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.542999][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.923548][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 513.932568][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.037543][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.091793][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.123206][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.160318][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.236254][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.264240][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 514.322475][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.354470][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 514.375887][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.531782][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 514.574446][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.283809][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.495779][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.512786][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.545576][ T7589] device veth0_vlan entered promiscuous mode [ 515.562498][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.585187][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.660394][ T7589] device veth1_vlan entered promiscuous mode [ 515.722671][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 515.742457][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 515.762175][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.804205][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.846037][ T7589] device veth0_macvtap entered promiscuous mode [ 515.885678][ T7589] device veth1_macvtap entered promiscuous mode [ 516.004651][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.043834][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.083010][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.130970][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.169267][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.199482][ T7906] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.782'. [ 516.215511][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.235115][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.258647][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.285855][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.304877][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.325892][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.363480][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.383436][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.393315][ T7589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.443494][ T7589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.479595][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.509354][ T7589] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.526322][ T7589] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.557002][ T7589] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.584984][ T7589] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.694842][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.735253][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.454825][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.488778][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.530450][ T7915] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 517.621326][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.916992][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.951834][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.987150][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 518.124158][ T4507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.133257][ T4507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.151652][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 519.670472][ T7953] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.792'. [ 519.684198][ T3586] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 519.893938][ T3586] usb 9-1: Using ep0 maxpacket: 16 [ 519.908042][ T3586] usb 9-1: unable to get BOS descriptor or descriptor too short [ 519.958614][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.981593][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.996184][ T3586] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.098067][ T3586] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.184235][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.213257][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.240233][ T3586] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.502523][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.210087][ T3586] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.218300][ T3586] usb 9-1: Product: syz [ 521.222535][ T3586] usb 9-1: Manufacturer: syz [ 521.227206][ T3586] usb 9-1: SerialNumber: syz [ 521.272651][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.472989][ T3586] usb 9-1: 0:2 : does not exist [ 521.495898][ T3586] usb 9-1: unit 5 not found! [ 521.556658][ T3586] usb 9-1: USB disconnect, device number 2 [ 521.792119][ T7965] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 521.843941][ T7649] device veth0_vlan entered promiscuous mode [ 521.917323][ T7222] udevd[7222]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.946999][ T7649] device veth1_vlan entered promiscuous mode [ 522.275677][ T7649] device veth0_macvtap entered promiscuous mode [ 522.347029][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 522.370292][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.425466][ T7649] device veth1_macvtap entered promiscuous mode [ 522.452282][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 523.354325][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.446184][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.545702][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.581247][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.591959][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.603115][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.619155][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.630133][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.642979][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.703719][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.819171][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.833482][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.853569][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.870485][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.890599][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.910538][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.960642][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.001756][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.030186][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.107414][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.170414][ T7649] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.213343][ T7649] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.239907][ T7649] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.253500][ T8005] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.803'. [ 525.271328][ T7649] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.481517][ T5742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.532233][ T5742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.598810][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 525.630795][ T5819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.714337][ T5819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.775505][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.988022][ T8021] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 527.151934][ T4292] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 527.354951][ T4292] usb 4-1: Using ep0 maxpacket: 16 [ 527.362441][ T4292] usb 4-1: unable to get BOS descriptor or descriptor too short [ 527.417125][ T4292] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.477074][ T4292] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.537029][ T4292] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.562685][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.051067][ T4292] usb 4-1: Product: syz [ 528.070188][ T4292] usb 4-1: Manufacturer: syz [ 528.075888][ T4292] usb 4-1: SerialNumber: syz [ 528.335374][ T4292] usb 4-1: 0:2 : does not exist [ 528.343844][ T4292] usb 4-1: unit 5 not found! [ 528.601428][ T8062] loop9: detected capacity change from 0 to 512 [ 529.214085][ T8062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 529.276825][ T8062] EXT4-fs (loop9): orphan cleanup on readonly fs [ 529.289233][ T8062] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5 [ 529.299743][ T8062] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 529.309293][ T8062] EXT4-fs error (device loop9): ext4_acquire_dquot:6802: comm syz.9.812: Failed to acquire dquot type 1 [ 529.364689][ T8062] EXT4-fs (loop9): 1 truncate cleaned up [ 529.861635][ T4292] usb 4-1: USB disconnect, device number 9 [ 530.420823][ T8062] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 531.375026][ T8069] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.814'. [ 531.837146][ T7649] EXT4-fs (loop9): unmounting filesystem. [ 532.141425][ T7222] udevd[7222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.293906][ T8086] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 534.472041][ T26] audit: type=1326 audit(1745988475.849:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.7.816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f416518e969 code=0x0 [ 536.556596][ T4263] Bluetooth: hci0: link tx timeout [ 536.562336][ T4263] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 536.985626][ T8129] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.828'. [ 537.583489][ T7705] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 537.717474][ T8147] loop8: detected capacity change from 0 to 512 [ 537.784625][ T7705] usb 10-1: Using ep0 maxpacket: 16 [ 537.791624][ T7705] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 537.840648][ T7705] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.876789][ T7705] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.927257][ T8147] EXT4-fs error (device loop8): ext4_do_update_inode:5252: inode #16: comm syz.8.833: corrupted inode contents [ 537.953619][ T7705] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.031072][ T8147] EXT4-fs error (device loop8): ext4_dirty_inode:6117: inode #16: comm syz.8.833: mark_inode_dirty error [ 538.069280][ T8147] EXT4-fs error (device loop8): ext4_do_update_inode:5252: inode #16: comm syz.8.833: corrupted inode contents [ 538.096769][ T8147] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.833: mark_inode_dirty error [ 538.176606][ T7705] usb 10-1: Product: syz [ 538.180930][ T7705] usb 10-1: Manufacturer: syz [ 538.193417][ T7705] usb 10-1: SerialNumber: syz [ 538.198079][ T8147] EXT4-fs error (device loop8): ext4_do_update_inode:5252: inode #16: comm syz.8.833: corrupted inode contents [ 538.233230][ T4263] Bluetooth: hci0: link tx timeout [ 538.237216][ T8147] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 538.238509][ T4263] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.332878][ T8147] EXT4-fs error (device loop8): ext4_do_update_inode:5252: inode #16: comm syz.8.833: corrupted inode contents [ 538.424115][ T8147] EXT4-fs error (device loop8): ext4_truncate:4311: inode #16: comm syz.8.833: mark_inode_dirty error [ 538.474042][ T8147] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 538.490903][ T7705] usb 10-1: 0:2 : does not exist [ 538.511215][ T7705] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 538.531614][ T8147] EXT4-fs (loop8): 1 truncate cleaned up [ 538.548621][ T6021] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 538.570916][ T6021] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:23: Failed to release dquot type 1 [ 538.587354][ T8147] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 538.603758][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 538.617636][ T7705] usb 10-1: USB disconnect, device number 2 [ 538.659462][ T8147] ext4 filesystem being mounted at /syzcgroup/unified/syz8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.871081][ T8147] EXT4-fs error (device loop8): ext4_get_group_desc:277: comm syz.8.833: block_group >= groups_count - block_group = 1048576, groups_count = 1 [ 538.905796][ T7222] udevd[7222]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.949335][ T8147] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4629: inode #33554445: comm syz.8.833: unable to read itable block [ 539.510662][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.9.839'. [ 540.444896][ T8192] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.840'. [ 540.798437][ T8200] loop9: detected capacity change from 0 to 1024 [ 540.909505][ T8200] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 543.283725][ T8217] input: syz1 as /devices/virtual/input/input18 [ 543.333550][ T8217] input: failed to attach handler leds to device input18, error: -6 [ 543.404244][ T4263] Bluetooth: hci0: link tx timeout [ 543.409420][ T4263] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 543.554592][ T7649] EXT4-fs (loop9): unmounting filesystem. [ 545.483129][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.6.853'. [ 546.504742][ T8256] loop7: detected capacity change from 0 to 1024 [ 546.512087][ T8256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 546.623513][ T8256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 546.782324][ T8256] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 548.095755][ T6879] EXT4-fs (loop7): unmounting filesystem. [ 548.279505][ T4263] Bluetooth: hci0: link tx timeout [ 548.284938][ T4263] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 548.293227][ T4263] Bluetooth: hci0: link tx timeout [ 548.298477][ T4263] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 550.273699][ T7705] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 550.363720][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 550.534337][ T7705] usb 8-1: Using ep0 maxpacket: 16 [ 550.566202][ T7705] usb 8-1: unable to get BOS descriptor or descriptor too short [ 550.699778][ T7705] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.733191][ T7705] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.752068][ T8320] loop3: detected capacity change from 0 to 512 [ 550.781434][ T7705] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.808521][ T7705] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.833741][ T7705] usb 8-1: Product: syz [ 550.847933][ T7705] usb 8-1: Manufacturer: syz [ 550.861997][ T7705] usb 8-1: SerialNumber: syz [ 551.063160][ T8320] EXT4-fs error (device loop3): ext4_do_update_inode:5252: inode #16: comm syz.3.868: corrupted inode contents [ 551.084413][ T8335] loop9: detected capacity change from 0 to 2048 [ 551.331382][ T8320] EXT4-fs error (device loop3): ext4_dirty_inode:6117: inode #16: comm syz.3.868: mark_inode_dirty error [ 551.699558][ T8335] loop9: p1 < > p3 [ 551.709555][ T8320] EXT4-fs error (device loop3): ext4_do_update_inode:5252: inode #16: comm syz.3.868: corrupted inode contents [ 551.881174][ T7705] usb 8-1: 0:2 : does not exist [ 551.886676][ T7705] usb 8-1: unit 5 not found! [ 551.915891][ T7705] usb 8-1: USB disconnect, device number 9 [ 551.944585][ T8335] loop9: p3 size 134217728 extends beyond EOD, truncated [ 551.952673][ T8320] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.868: mark_inode_dirty error [ 551.983238][ T8320] EXT4-fs error (device loop3): ext4_do_update_inode:5252: inode #16: comm syz.3.868: corrupted inode contents [ 552.054652][ T8320] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 552.094256][ T8320] EXT4-fs error (device loop3): ext4_do_update_inode:5252: inode #16: comm syz.3.868: corrupted inode contents [ 552.121309][ T8320] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.868: mark_inode_dirty error [ 552.151232][ T8320] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 552.182876][ T8320] EXT4-fs (loop3): 1 truncate cleaned up [ 552.190128][ T7222] udevd[7222]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.207446][ T4384] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 552.218198][ T8320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 552.227418][ T4384] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:10: Failed to release dquot type 1 [ 552.275136][ T8320] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.404765][ T8338] loop9: detected capacity change from 0 to 8192 [ 552.470479][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 552.715040][ T8356] netlink: 44 bytes leftover after parsing attributes in process `syz.7.874'. [ 554.253571][ T4485] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 554.627053][ T4485] usb 4-1: device descriptor read/64, error -71 [ 554.933731][ T4485] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 555.263484][ T4485] usb 4-1: device descriptor read/64, error -71 [ 555.394589][ T4485] usb usb4-port1: attempt power cycle [ 555.893562][ T4485] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 555.964532][ T4485] usb 4-1: device descriptor read/8, error -71 [ 556.319572][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.8.882'. [ 557.053820][ T4296] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 557.324358][ T4296] usb 10-1: Using ep0 maxpacket: 16 [ 557.346319][ T4296] usb 10-1: unable to get BOS descriptor or descriptor too short [ 557.572385][ T4296] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.582762][ T4296] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.620011][ T4296] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 557.712704][ T4296] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.086294][ T4296] usb 10-1: Product: syz [ 558.552757][ T4296] usb 10-1: Manufacturer: syz [ 558.559652][ T4296] usb 10-1: SerialNumber: syz [ 558.678150][ T8424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.888'. [ 558.791848][ T4296] usb 10-1: 0:2 : does not exist [ 558.803753][ T4296] usb 10-1: unit 5 not found! [ 559.027357][ T4296] usb 10-1: USB disconnect, device number 3 [ 561.823700][ T4296] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 562.063530][ T4296] usb 10-1: device descriptor read/64, error -71 [ 562.266940][ T8470] loop7: detected capacity change from 0 to 512 [ 562.288553][ T8470] EXT4-fs (loop7): Test dummy encryption mode enabled [ 562.302793][ T8470] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 562.351730][ T8470] EXT4-fs (loop7): 1 truncate cleaned up [ 562.353118][ T8473] netlink: 44 bytes leftover after parsing attributes in process `syz.6.901'. [ 562.357897][ T8470] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 562.385034][ T4296] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 562.504962][ T6879] EXT4-fs (loop7): unmounting filesystem. [ 562.573624][ T4296] usb 10-1: device descriptor read/64, error -71 [ 562.698287][ T8483] loop7: detected capacity change from 0 to 256 [ 562.767556][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.774095][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.888273][ T4296] usb usb10-port1: attempt power cycle [ 562.946673][ T7222] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 562.966220][ T8488] capability: warning: `syz.8.904' uses deprecated v2 capabilities in a way that may be insecure [ 563.118960][ T8492] netlink: 'syz.6.905': attribute type 61 has an invalid length. [ 563.323711][ T4296] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 563.396834][ T4296] usb 10-1: device descriptor read/8, error -71 [ 564.083438][ T4296] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 564.253724][ T4296] usb 10-1: device descriptor read/8, error -71 [ 564.375197][ T4296] usb usb10-port1: unable to enumerate USB device [ 565.849907][ T8522] netlink: 44 bytes leftover after parsing attributes in process `syz.8.915'. [ 566.146236][ T8527] loop6: detected capacity change from 0 to 128 [ 566.685062][ T8527] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 566.789193][ T8527] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 567.020564][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 567.833710][ T4296] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 568.043840][ T4296] usb 7-1: device descriptor read/64, error -71 [ 568.168948][ T8554] loop3: detected capacity change from 0 to 256 [ 568.205887][ T8554] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 568.753397][ T8571] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 568.765460][ T8571] Cannot find add_set index 0 as target [ 569.255942][ T4296] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 570.116093][ T4296] usb 7-1: device descriptor read/64, error -71 [ 570.264576][ T4296] usb usb7-port1: attempt power cycle [ 570.583123][ T8598] loop9: detected capacity change from 0 to 512 [ 570.590781][ T8598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.621375][ T8598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 570.937254][ T8598] EXT4-fs (loop9): orphan cleanup on readonly fs [ 570.948804][ T8598] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5 [ 570.958777][ T8598] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 570.968570][ T8598] EXT4-fs error (device loop9): ext4_acquire_dquot:6802: comm syz.9.928: Failed to acquire dquot type 1 [ 570.996190][ T8598] EXT4-fs (loop9): 1 truncate cleaned up [ 571.007358][ T8598] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 572.784539][ T7649] EXT4-fs (loop9): unmounting filesystem. [ 576.837209][ T8659] loop7: detected capacity change from 0 to 512 [ 576.898459][ T8659] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 577.213201][ T8659] EXT4-fs (loop7): 1 truncate cleaned up [ 577.219064][ T8659] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 577.238650][ T8659] EXT4-fs (loop7): unmounting filesystem. [ 578.106524][ T8676] loop9: detected capacity change from 0 to 4096 [ 578.118109][ T8676] ext4: Unknown parameter 'defcontext' [ 578.662374][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.9.946'. [ 578.672077][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.9.946'. [ 579.783753][ T14] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 580.114250][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 580.141102][ T14] usb 8-1: unable to get BOS descriptor or descriptor too short [ 580.171716][ T14] usb 8-1: no configurations [ 580.193176][ T14] usb 8-1: can't read configurations, error -22 [ 582.480696][ T8718] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.557361][ T8718] netlink: 156 bytes leftover after parsing attributes in process `syz.7.955'. [ 582.636945][ T8720] loop7: detected capacity change from 0 to 16 [ 582.714167][ T8720] erofs: (device loop7): mounted with root inode @ nid 36. [ 583.690338][ T8747] xt_hashlimit: size too large, truncated to 1048576 [ 585.550719][ T8761] xt_hashlimit: size too large, truncated to 1048576 [ 585.791922][ T8762] loop9: detected capacity change from 0 to 4096 [ 586.347397][ T8762] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 589.071037][ T8800] loop3: detected capacity change from 0 to 256 [ 589.090762][ T8800] FAT-fs (loop3): Unrecognized mount option "io" or missing value [ 592.543536][ T7222] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 592.689550][ T7649] EXT4-fs (loop9): unmounting filesystem. [ 597.369373][ T8905] xt_hashlimit: size too large, truncated to 1048576 [ 599.080524][ T8903] tty tty39: ldisc open failed (-12), clearing slot 38 [ 599.088582][ T8906] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 603.577293][ T8953] loop3: detected capacity change from 0 to 2048 [ 603.671448][ T8953] loop3: p1 < > p3 [ 603.754147][ T8953] loop3: p3 size 134217728 extends beyond EOD, truncated [ 603.966326][ T8945] input: syz0 as /devices/virtual/input/input19 [ 604.028726][ T7222] udevd[7222]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 604.823133][ T8960] xt_hashlimit: size too large, truncated to 1048576 [ 605.803416][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 607.264941][ T9003] loop7: detected capacity change from 0 to 128 [ 607.281292][ T9003] FAT-fs (loop7): Unrecognized mount option "00000000000000000000" or missing value [ 607.410805][ T9003] loop7: detected capacity change from 0 to 512 [ 607.469018][ T9000] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1009'. [ 607.579005][ T9003] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.1008: attempt to clear invalid blocks 1 len 1 [ 607.598122][ T9003] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1008: bg 0: block 343: padding at end of block bitmap is not set [ 607.615073][ T9003] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 607.626910][ T9003] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1008: invalid indirect mapped block 1819239214 (level 0) [ 607.643923][ T9003] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1008: invalid indirect mapped block 1819239214 (level 1) [ 607.685542][ T9003] EXT4-fs (loop7): 1 truncate cleaned up [ 607.691364][ T9003] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 609.311441][ T9017] loop9: detected capacity change from 0 to 512 [ 609.369791][ T9017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 609.534376][ T9017] EXT4-fs (loop9): orphan cleanup on readonly fs [ 609.560104][ T9017] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1011: bg 0: block 248: padding at end of block bitmap is not set [ 609.577197][ T9017] Quota error (device loop9): write_blk: dquota write failed [ 609.585152][ T9017] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 609.595346][ T9017] EXT4-fs error (device loop9): ext4_acquire_dquot:6802: comm syz.9.1011: Failed to acquire dquot type 1 [ 609.621945][ T9017] EXT4-fs (loop9): 1 truncate cleaned up [ 609.632892][ T9017] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 611.301204][ T9024] loop6: detected capacity change from 0 to 256 [ 614.378271][ T9024] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 616.400760][ T7649] EXT4-fs (loop9): unmounting filesystem. [ 616.414379][ T6879] EXT4-fs (loop7): unmounting filesystem. [ 616.730512][ T9035] loop6: detected capacity change from 0 to 512 [ 616.838506][ T9035] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1014: casefold flag without casefold feature [ 616.858627][ T9035] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1014: couldn't read orphan inode 15 (err -117) [ 617.007480][ T9035] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 617.544677][ T26] audit: type=1326 audit(1745988559.379:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 617.907861][ T26] audit: type=1326 audit(1745988559.389:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 617.992678][ T26] audit: type=1326 audit(1745988559.389:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 618.027170][ T26] audit: type=1326 audit(1745988559.389:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 618.083865][ T26] audit: type=1326 audit(1745988559.389:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 618.196582][ T26] audit: type=1326 audit(1745988559.389:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 618.220685][ T26] audit: type=1326 audit(1745988559.389:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 618.272170][ T26] audit: type=1326 audit(1745988559.549:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 618.947890][ T26] audit: type=1326 audit(1745988559.549:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 619.075988][ T26] audit: type=1326 audit(1745988559.549:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe418e969 code=0x7fc00000 [ 619.151510][ T9037] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 620.063581][ T9075] loop3: detected capacity change from 0 to 256 [ 620.245742][ T9075] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 623.211958][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 624.629912][ T9112] xt_hashlimit: size too large, truncated to 1048576 [ 624.697911][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.716778][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.138137][ T9136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1031'. [ 629.224904][ T9156] loop3: detected capacity change from 0 to 512 [ 629.444255][ T9156] __quota_error: 57 callbacks suppressed [ 629.444275][ T9156] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 629.460685][ T9156] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 629.471305][ T9156] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1033: Failed to acquire dquot type 0 [ 629.485904][ T9156] EXT4-fs (loop3): Remounting filesystem read-only [ 629.809389][ T9156] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 629.820159][ T9156] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 629.829702][ T9156] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1033: Failed to acquire dquot type 0 [ 630.150048][ T9171] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 630.943508][ T9156] EXT4-fs (loop3): Remounting filesystem read-only [ 630.953707][ T9156] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 630.964826][ T9156] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 630.974294][ T9156] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1033: Failed to acquire dquot type 0 [ 631.000940][ T9156] EXT4-fs (loop3): Remounting filesystem read-only [ 631.008735][ T9156] EXT4-fs (loop3): 1 orphan inode deleted [ 631.014544][ T9156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 631.023588][ T9156] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.235894][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 631.284463][ T14] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 631.688118][ T9181] xt_hashlimit: size too large, truncated to 1048576 [ 638.299189][ T9221] syz.6.1045[9221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 638.299668][ T9221] syz.6.1045[9221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 638.395023][ T9221] loop6: detected capacity change from 0 to 512 [ 638.701039][ T9221] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1045: invalid indirect mapped block 11 (level 0) [ 638.716817][ T9221] EXT4-fs (loop6): Remounting filesystem read-only [ 638.734715][ T9221] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1045: attempt to clear invalid blocks 1024 len 1 [ 638.752551][ T9221] EXT4-fs (loop6): Remounting filesystem read-only [ 638.761675][ T9221] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 638.796671][ T9221] EXT4-fs (loop6): Remounting filesystem read-only [ 638.804303][ T9221] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1045: invalid indirect mapped block 1819239214 (level 0) [ 638.823492][ T9221] EXT4-fs (loop6): Remounting filesystem read-only [ 638.830178][ T9221] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1045: invalid indirect mapped block 33554432 (level 2) [ 638.849483][ T9221] EXT4-fs (loop6): Remounting filesystem read-only [ 638.862325][ T9221] EXT4-fs (loop6): 1 truncate cleaned up [ 638.868193][ T9221] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 640.526145][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 641.021856][ T9227] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 641.771776][ T26] audit: type=1326 audit(1745988583.829:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.6.1048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc18d58e969 code=0x0 [ 643.490048][ T9230] device vlan2 entered promiscuous mode [ 643.504558][ T9230] device syz_tun entered promiscuous mode [ 645.118737][ T9244] loop7: detected capacity change from 0 to 4096 [ 645.126017][ T9244] ext4: Unknown parameter 'obj_role' [ 645.134653][ T4298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 645.237422][ T4298] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 645.439690][ T26] audit: type=1326 audit(1745988587.499:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 645.491121][ T9253] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1052'. [ 645.619916][ T26] audit: type=1326 audit(1745988587.499:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 645.642345][ T26] audit: type=1326 audit(1745988587.499:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 646.642731][ T26] audit: type=1326 audit(1745988587.499:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 647.354130][ T9208] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 647.628353][ T26] audit: type=1326 audit(1745988587.499:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 647.796540][ T26] audit: type=1326 audit(1745988587.529:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 647.898762][ T26] audit: type=1326 audit(1745988587.529:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 647.982150][ T26] audit: type=1326 audit(1745988587.529:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 648.018956][ T26] audit: type=1326 audit(1745988587.529:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 648.070030][ T26] audit: type=1326 audit(1745988587.529:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 648.254866][ T26] audit: type=1326 audit(1745988587.529:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 648.923919][ T26] audit: type=1326 audit(1745988587.529:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 649.062013][ T26] audit: type=1326 audit(1745988587.529:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 649.201585][ T26] audit: type=1326 audit(1745988587.529:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2378e969 code=0x7ffc0000 [ 649.496831][ T9300] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1062'. [ 651.988803][ T9330] loop6: detected capacity change from 0 to 4096 [ 651.996098][ T9330] ext4: Unknown parameter 'obj_role' [ 652.005370][ T4298] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 652.102695][ T4298] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 653.634643][ T9260] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 654.120711][ T9327] loop6: detected capacity change from 0 to 512 [ 654.127649][ T9327] EXT4-fs: Ignoring removed orlov option [ 654.165423][ T9327] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 655.695915][ T9327] EXT4-fs: error -4 creating inode table initialization thread [ 655.704263][ T9327] EXT4-fs (loop6): mount failed [ 655.824227][ T9394] loop7: detected capacity change from 0 to 40427 [ 656.272669][ T9245] I/O error, dev loop7, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 656.631355][ T9419] loop3: detected capacity change from 0 to 512 [ 656.672660][ T9419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 656.811690][ T9419] EXT4-fs (loop3): orphan cleanup on readonly fs [ 656.848750][ T9419] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1078: bg 0: block 248: padding at end of block bitmap is not set [ 656.865285][ T9419] __quota_error: 8 callbacks suppressed [ 656.865326][ T9419] Quota error (device loop3): write_blk: dquota write failed [ 656.879055][ T9419] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 656.889374][ T9419] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1078: Failed to acquire dquot type 1 [ 656.926148][ T9419] EXT4-fs (loop3): 1 truncate cleaned up [ 657.331418][ T9423] xt_hashlimit: size too large, truncated to 1048576 [ 659.279620][ T9419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 660.047480][ T26] audit: type=1326 audit(1745988602.109:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.6.1080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x0 [ 661.367403][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 665.643319][ T26] audit: type=1326 audit(1745988607.699:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 665.782544][ T3586] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 665.840444][ T3586] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 665.859025][ T26] audit: type=1326 audit(1745988607.699:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 666.044515][ T9467] loop7: detected capacity change from 0 to 4096 [ 666.061214][ T26] audit: type=1326 audit(1745988607.699:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 666.152443][ T9467] ext4: Unknown parameter 'obj_role' [ 666.625915][ T26] audit: type=1326 audit(1745988607.699:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 667.742042][ T26] audit: type=1326 audit(1745988607.699:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 667.973363][ T26] audit: type=1326 audit(1745988607.699:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 668.103627][ T26] audit: type=1326 audit(1745988607.699:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 669.310631][ T26] audit: type=1326 audit(1745988607.699:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 669.343882][ T26] audit: type=1326 audit(1745988607.699:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 669.392993][ T26] audit: type=1326 audit(1745988607.699:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18d58e969 code=0x7fc00000 [ 671.493524][ T7705] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 672.266625][ T7705] usb 10-1: Using ep0 maxpacket: 16 [ 672.293559][ T7705] usb 10-1: unable to get BOS descriptor or descriptor too short [ 672.304050][ T7705] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.328950][ T7705] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.568080][ T7705] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.587768][ T7705] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.779937][ T7705] usb 10-1: Product: syz [ 672.785891][ T7705] usb 10-1: Manufacturer: syz [ 672.801055][ T7705] usb 10-1: can't set config #1, error -71 [ 672.826602][ T7705] usb 10-1: USB disconnect, device number 8 [ 674.369392][ T9563] cgroup: Unknown subsys name 'dont_appraise' [ 674.653354][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 674.653371][ T26] audit: type=1326 audit(1745988616.709:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 674.784932][ T9565] loop3: detected capacity change from 0 to 512 [ 674.831113][ T9565] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 675.058289][ T9565] EXT4-fs (loop3): 1 truncate cleaned up [ 675.064333][ T9565] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 675.365638][ T26] audit: type=1326 audit(1745988616.709:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 675.510078][ T26] audit: type=1326 audit(1745988616.709:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 675.556250][ T26] audit: type=1326 audit(1745988616.709:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 675.588425][ T26] audit: type=1326 audit(1745988616.709:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 675.627428][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 675.642473][ T26] audit: type=1326 audit(1745988616.709:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 675.684184][ T26] audit: type=1326 audit(1745988616.709:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 675.769161][ T26] audit: type=1326 audit(1745988616.709:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 675.820269][ T26] audit: type=1326 audit(1745988616.709:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 675.844493][ T26] audit: type=1326 audit(1745988616.709:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.9.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fdf8e969 code=0x7fc00000 [ 676.071149][ T7] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 679.633521][ T7] usb 7-1: device not accepting address 15, error -71 [ 680.096668][ T9598] loop3: detected capacity change from 0 to 128 [ 680.189229][ T9598] syz.3.1118: attempt to access beyond end of device [ 680.189229][ T9598] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 680.252217][ T9598] syz.3.1118: attempt to access beyond end of device [ 680.252217][ T9598] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 680.273450][ T4485] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 680.456674][ T9598] syz.3.1118: attempt to access beyond end of device [ 680.456674][ T9598] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 680.553397][ T4485] usb 10-1: Using ep0 maxpacket: 16 [ 680.567539][ T9598] syz.3.1118: attempt to access beyond end of device [ 680.567539][ T9598] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 680.626188][ T4485] usb 10-1: unable to get BOS descriptor or descriptor too short [ 680.722758][ T4485] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.914188][ T4485] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.194802][ T9598] syz.3.1118: attempt to access beyond end of device [ 681.194802][ T9598] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 681.208835][ T9598] syz.3.1118: attempt to access beyond end of device [ 681.208835][ T9598] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 682.625377][ T4485] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.643356][ T4485] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.651572][ T4485] usb 10-1: Product: syz [ 682.839738][ T4485] usb 10-1: Manufacturer: syz [ 682.875083][ T4485] usb 10-1: can't set config #1, error -71 [ 683.133660][ T4485] usb 10-1: USB disconnect, device number 9 [ 683.712218][ T9625] loop9: detected capacity change from 0 to 256 [ 683.725807][ T9626] loop7: detected capacity change from 0 to 512 [ 683.787864][ T9625] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 683.821231][ T9626] EXT4-fs (loop7): orphan cleanup on readonly fs [ 683.836186][ T9626] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 683.870087][ T9626] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1127: invalid indirect mapped block 4278190080 (level 0) [ 683.891169][ T9626] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1127: invalid indirect mapped block 1 (level 1) [ 683.905464][ T9626] EXT4-fs (loop7): 1 truncate cleaned up [ 683.911166][ T9626] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 683.923120][ T9626] EXT4-fs (loop7): unmounting filesystem. [ 684.401492][ T9635] loop6: detected capacity change from 0 to 512 [ 684.430292][ T9635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 684.544005][ T9635] EXT4-fs (loop6): orphan cleanup on readonly fs [ 684.559715][ T9635] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1129: bg 0: block 248: padding at end of block bitmap is not set [ 684.595535][ T9635] __quota_error: 57 callbacks suppressed [ 684.595579][ T9635] Quota error (device loop6): write_blk: dquota write failed [ 684.609245][ T9635] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 684.619451][ T9635] EXT4-fs error (device loop6): ext4_acquire_dquot:6802: comm syz.6.1129: Failed to acquire dquot type 1 [ 684.638593][ T9635] EXT4-fs (loop6): 1 truncate cleaned up [ 684.649645][ T9635] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 685.647674][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.654105][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.490815][ T5787] EXT4-fs (loop6): unmounting filesystem. [ 687.893575][ T4336] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 688.053738][ T4336] usb 10-1: device descriptor read/64, error -71 [ 688.313517][ T22] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 688.413542][ T4336] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 688.543408][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 688.577279][ T22] usb 7-1: unable to get BOS descriptor or descriptor too short [ 688.604187][ T4336] usb 10-1: device descriptor read/64, error -71 [ 688.632807][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.643771][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.665155][ T22] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 688.683486][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.730286][ T22] usb 7-1: Product: syz [ 688.735237][ T4336] usb usb10-port1: attempt power cycle [ 688.755237][ T22] usb 7-1: Manufacturer: syz [ 688.765796][ T22] usb 7-1: SerialNumber: syz [ 689.016514][ T22] usb 7-1: 0:2 : does not exist [ 689.021498][ T22] usb 7-1: unit 5 not found! [ 689.804233][ T22] usb 7-1: USB disconnect, device number 17 [ 690.635709][ T9260] udevd[9260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.395414][ T9692] loop6: detected capacity change from 0 to 512 [ 692.430349][ T9692] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 692.485925][ T9692] EXT4-fs (loop6): 1 truncate cleaned up [ 692.491637][ T9692] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 692.502569][ T9692] EXT4-fs (loop6): unmounting filesystem. [ 695.993333][ T4336] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 696.183487][ T4336] usb 10-1: Using ep0 maxpacket: 16 [ 696.196811][ T4336] usb 10-1: unable to get BOS descriptor or descriptor too short [ 696.243542][ T4336] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.281548][ T4336] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.308214][ T4336] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.331381][ T4336] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.547007][ T4336] usb 10-1: Product: syz [ 696.551333][ T4336] usb 10-1: Manufacturer: syz [ 696.557027][ T4336] usb 10-1: SerialNumber: syz [ 698.623469][ T4336] usb 10-1: 0:2 : does not exist [ 698.656132][ T4336] usb 10-1: unit 5 not found! [ 698.762457][ T4336] usb 10-1: USB disconnect, device number 13 [ 699.229411][ T9260] udevd[9260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.392319][ T9749] loop9: detected capacity change from 0 to 512 [ 700.426175][ T9749] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 700.740440][ T9749] EXT4-fs (loop9): 1 truncate cleaned up [ 700.746666][ T9749] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 702.861540][ T7649] EXT4-fs (loop9): unmounting filesystem. [ 703.682354][ T9776] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 707.159319][ T9807] [ 707.162114][ T9807] ============================= [ 707.167278][ T9807] WARNING: suspicious RCU usage [ 707.172195][ T9807] 6.1.135-syzkaller #0 Not tainted [ 707.177413][ T9807] ----------------------------- [ 707.182275][ T9807] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 707.190877][ T9807] [ 707.190877][ T9807] other info that might help us debug this: [ 707.190877][ T9807] [ 707.201553][ T9807] [ 707.201553][ T9807] rcu_scheduler_active = 2, debug_locks = 1 [ 707.210059][ T9807] 1 lock held by syz.9.1177/9807: [ 707.215249][ T9807] #0: ffffffff8c92ab60 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 707.225560][ T9807] [ 707.225560][ T9807] stack backtrace: [ 707.231483][ T9807] CPU: 1 PID: 9807 Comm: syz.9.1177 Not tainted 6.1.135-syzkaller #0 [ 707.239576][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 707.249662][ T9807] Call Trace: [ 707.252962][ T9807] [ 707.255911][ T9807] dump_stack_lvl+0x168/0x22e [ 707.260656][ T9807] ? show_regs_print_info+0x12/0x12 [ 707.265909][ T9807] ? load_image+0x3b0/0x3b0 [ 707.270464][ T9807] lockdep_rcu_suspicious+0x1dd/0x300 [ 707.275881][ T9807] get_callchain_entry+0x2a5/0x3b0 [ 707.281121][ T9807] get_perf_callchain+0x9f/0x480 [ 707.286103][ T9807] ? put_callchain_entry+0xb0/0xb0 [ 707.291254][ T9807] ? plist_add+0x3d4/0x480 [ 707.295717][ T9807] ? verify_lock_unused+0x140/0x140 [ 707.301046][ T9807] __bpf_get_stack+0x2ce/0x4f0 [ 707.305846][ T9807] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 707.312035][ T9807] ? __cant_sleep+0x210/0x210 [ 707.316762][ T9807] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 707.322456][ T9807] bpf_get_stack_raw_tp+0x175/0x1d0 [ 707.327726][ T9807] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 707.333228][ T9807] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 707.338641][ T9807] bpf_prog_test_run_syscall+0x30d/0x490 [ 707.344315][ T9807] ? sock_gen_cookie+0x60/0x60 [ 707.349120][ T9807] ? sock_gen_cookie+0x60/0x60 [ 707.353915][ T9807] bpf_prog_test_run+0x31e/0x390 [ 707.358893][ T9807] __sys_bpf+0x593/0x6d0 [ 707.363175][ T9807] ? bpf_link_show_fdinfo+0x310/0x310 [ 707.368670][ T9807] ? lock_chain_count+0x20/0x20 [ 707.373586][ T9807] __x64_sys_bpf+0x78/0x90 [ 707.378067][ T9807] do_syscall_64+0x4c/0xa0 [ 707.382530][ T9807] ? clear_bhb_loop+0x45/0xa0 [ 707.387261][ T9807] ? clear_bhb_loop+0x45/0xa0 [ 707.391972][ T9807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 707.397909][ T9807] RIP: 0033:0x7f89fdf8e969 [ 707.402352][ T9807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.422178][ T9807] RSP: 002b:00007f89fed6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 707.430657][ T9807] RAX: ffffffffffffffda RBX: 00007f89fe1b5fa0 RCX: 00007f89fdf8e969 [ 707.438675][ T9807] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 707.446679][ T9807] RBP: 00007f89fe010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 707.454685][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.462683][ T9807] R13: 0000000000000000 R14: 00007f89fe1b5fa0 R15: 00007ffe1dc5dd98 [ 707.470701][ T9807]