last executing test programs: 21m48.170434921s ago: executing program 32 (id=18): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_print_times', 0xd05400, 0x25) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000004c0)={{r3}, 0x10000, 0xe2, 0x1}) syz_usb_control_io$hid(r4, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) splice(r7, 0x0, r6, 0x0, 0xfea8, 0xa) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socket$inet(0x10, 0x80000, 0x0) unshare(0x200) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) 19m8.088318167s ago: executing program 33 (id=337): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000100)='n', 0x1}], 0x1, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_GET_NO_NEW_PRIVS(0x27) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}}, 0x40) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x3, &(0x7f0000000900)=[{0x35, 0x0, 0x1, 0xffff0001}, {0x4, 0x0, 0x0, 0x4}, {0x6, 0x1}]}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB="0001"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc702000008000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) shutdown(r0, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r10, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b4e61e068be5ff85", "f4883a9336baa25efa8b084a37015183", "a1e78db7", "06077bafcf357e5d"}, 0x28) splice(r0, 0x0, r3, 0x0, 0x8000000000000000, 0x6) 17m19.597480962s ago: executing program 34 (id=579): r0 = syz_io_uring_setup(0x1794, &(0x7f0000000040)={0x0, 0x16f3, 0x40, 0x3, 0x87}, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0xd}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_sqe_flags_allowed={0x2, 0x13}], 0x4) 17m0.252028978s ago: executing program 35 (id=621): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x111d00, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000001c0)={0x18, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r1}) close(r0) 16m48.940332498s ago: executing program 36 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x207) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000003780)=[{{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/184, 0xb8}], 0x1, &(0x7f00000005c0)=""/214, 0xd6}, 0x5}, {{&(0x7f00000006c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/55, 0x37}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000003600)=""/31, 0x1f}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/23, 0x17}, {&(0x7f0000000940)=""/119, 0x77}, {&(0x7f00000009c0)=""/101, 0x65}, {&(0x7f0000000a40)=""/56, 0x38}], 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001e00)=""/175, 0xaf}, 0x2}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)=""/142, 0x8e}, {&(0x7f0000001f80)=""/44, 0x2c}, {&(0x7f0000001fc0)=""/89, 0x59}, {&(0x7f0000002040)=""/4084, 0xff4}, {&(0x7f0000003040)=""/28, 0x1c}], 0x5}, 0xe}, {{&(0x7f0000003100)=@alg, 0x80, &(0x7f0000003640)=[{&(0x7f0000003180)=""/95, 0x5f}, {&(0x7f0000003200)=""/120, 0x78}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000003340)=""/69, 0x45}, {&(0x7f00000033c0)=""/115, 0x73}, {&(0x7f0000003440)=""/152, 0x98}, {&(0x7f0000003500)=""/201, 0xc9}, {&(0x7f0000003600)}], 0x8, &(0x7f00000036c0)=""/181, 0xb5}, 0x7}], 0x5, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x9, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) memfd_secret(0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) 16m26.158344345s ago: executing program 37 (id=691): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) unlink(&(0x7f0000000200)='./cgroup\x00') syz_open_dev$char_usb(0xc, 0xb4, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x9ae9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) prlimit64(0x0, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) getpid() chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001340), 0x7, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_usb_connect(0x3, 0xdd, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x300, 0x7, 0x4, 0x7, 0xff, 0x1}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="050f4451c09c393b82100500007d126937c08c113939f6aeff296f780580cd98557321fe28d8bdc070d6fff27b71fcfca98eef32359d71dc6f130f89114d582abaa878124b86c4"], 0x3, [{0xf4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x83e}}]}) 14m31.289750715s ago: executing program 38 (id=935): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getsockopt$packet_int(r1, 0x107, 0x8, 0x0, &(0x7f0000000240)) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xc, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x1000002, 0xffff}}}}]}, 0x58}}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x15) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b20009058900000000000009058501"], 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0xa002a008}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x80b, 0x10, 0x1, 0x4, 0xfffffff8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x80, 0x1}, &(0x7f00000000c0)=0x90) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0), 0x1, 0x9793, &(0x7f0000012f40)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0105872, &(0x7f0000000000)=ANY=[@ANYRESOCT]) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x420, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000480)={0x800, 0x2, 0x6, 0x9, 0x0, 0xc93a}) 13m37.33579477s ago: executing program 39 (id=1079): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x250041, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fcdbdf254f00000008000300", @ANYRES32=r4, @ANYBLOB="40007a800c000300376e3f510da99e1d14"], 0x5c}, 0x1, 0x0, 0x0, 0x929c1f6559b1a90b}, 0x4004090) 13m9.869156123s ago: executing program 40 (id=1108): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0xac, 0x30, 0x20, 0x5ac, 0x24b, 0xda88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1c, 0x2}}]}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x500) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x700, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x57}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xdc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040880) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000300)=@newtclass={0x98, 0x28, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xb}, {0x8, 0x4}, {0x6, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x80}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x12a6a0f}]}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x9, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x8e30, 0x3ba2, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x2a0b, 0xf, 0x3}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20050081}, 0x0) 12m44.923924979s ago: executing program 41 (id=1189): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x97ff, @loopback}, 0x80, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000740)="8b0a", 0x2}], 0x2}, 0x200ce0c0) 12m35.837426772s ago: executing program 42 (id=1215): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x161042, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001a40)={{r0}, "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"}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@gid}, {@gid}, {@shortad}, {@uid}, {}, {@lastblock={'lastblock', 0x3d, 0x10000}}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x2, 0x5, 0x34324241, 0x2, 0x8, [{0x10001, 0x5}, {0xfffffffe, 0x8}, {0x3, 0x5}, {0x5, 0x492a}, {0x0, 0x9}, {0x5, 0x102}, {0xb446, 0x4}, {0x10000, 0x7}], 0x5, 0x1, 0x4, 0x0, 0x1}}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000380)={0x1, &(0x7f0000000100)=[{0x6, 0x93, 0x0, 0x4}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x3ea}, [], {0x14, 0x3fa, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0) write$ppp(r0, &(0x7f00000002c0)="4fa1", 0x2) 10m50.727710808s ago: executing program 43 (id=1487): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$unix(0x1, 0x5, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) syz_io_uring_setup(0x2237, &(0x7f0000000400)={0x0, 0x8901, 0x40, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000009e80)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000000080)={0x2002, 0x6, 0x0, 0x6, 0x8000000000000001, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffe, 0xffffb291}) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000600)=""/117, 0x75}, {0x0, 0xf5}], 0x2, 0x9, 0x0) 10m44.961440465s ago: executing program 44 (id=1466): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d6f61657020686173683df7"], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$ax25_int(r0, 0x101, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 10m42.584004655s ago: executing program 45 (id=1511): r0 = syz_open_dev$media(&(0x7f0000000100), 0x62e, 0x20000) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000001040)={r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) dup(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0xb0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) prlimit64(r4, 0x5, &(0x7f0000000000)={0x6, 0x100000001}, 0x0) 10m38.005615783s ago: executing program 46 (id=1522): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4, 0x4}}]}}]}, 0x3c}}, 0x4000010) (fail_nth: 3) 10m28.324525869s ago: executing program 47 (id=1544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac1414aa08000200e000000100000340000300002400028014000180080001000000000037fc02007f0000010c0002800500010000000000080007400000000018000d800c000380060001004e24000008000100ac1e0101cffff7fbfa01b64b8a9654afaf0dfe0db59f62f6631ced722d4402c1c9e5ea115a94e3ae63e652031bbc299c8813507397cf3f5819dbb7aebd7c64e2ae9c612788ccf13a2e7dc879cab8ab73ff48632bc03d565fe741d4a38b1c500f5aeeb0d33310ff9b6384ce"], 0x7c}}, 0x0) 9m4.518927725s ago: executing program 48 (id=1692): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x0, {0xa, 0x4e22, 0xb, @empty, 0x3}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="a6", 0x1}, {&(0x7f0000001ac0)="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", 0x584}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x10b8}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18ff0900002f54be10ff94000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0x0, 0x0}, 0x10) keyctl$restrict_keyring(0xa, 0x0, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000780)='\x00\x00\xf8\x00\x00\x00\x00A\xbd\xc1d\xacW\x83\x9b!\x16\x98\x88\xf8\xc8\xa1#\xc5\xae\xe2\x17\xde2\x90\x12\xe5\x89\x9a\xdf?\\*\xc6\\.\xc1\xc7\xb0y\r~?\fB\f\xd9\x1c\xf4\x05&p\x88|\xc3\xf1\xa76\am\x7fSd+\x1c\xb3\n\xa9\xbbv\xc6\x9b\xf4\b\x92\x0e\a\x14wq\xf2I\bpK\xf3>\x0f0\x8c3\x02\xb1\xce\x00\x00\x00\x00\x94r\x9b\x95\xfbS\xdb\xea\xd4:n\x9fT\xa1}\xae\n\x03EB\xb3\xc1\x1f\x88N\xe7\xbb\x9aa\xa0\xdf\xf2\x17aX_\nV\xb6T\xf2 \xa5\xb2J\x170\xa3\x85\xf0\xaej\x83&Oh4\x91\x9a\x9cWf\x16\xed0\x06\xa8~pF\x02H\x97V=\xda(+s|\xdcE?j\xb5\x9c\xa4\xf0\x84)\xa3|E\xa8\xdc\xdc0T\x84\xa3\x15\xc8Y)\xbf;\xc34g\xdd\xc3\xb9\xd9\xdf\xf7]x\x04\xb8\x13&\xf0r\xfe\xa3)q,&\xbd\n\x91\x8fy\xdd\x87\x85\xb2\xc1\x97X\xed\xbf\xd3wi\xaf\x95\x02t\xbfM\n\\a\xb8\xa2\xa8\x1d\x9f\xf0hO\xee\xd0 /\x86\x15\x94\xb5\xfb\xe0\xc5\xc7\x86\xe7\x8e\xa3\xd1\xba\xee\xbe\x9d\x9bw\x04\xbc\xd9\x84G>|\xd3H\xb4\xbb\xdaIv\x02\r\x1aoS\xd1\xff\x1cx?\xc0\x9b2%1\x8c\xf2\x1cd\x03\x81\xf1\xd0@]\x81n\xe5a\xd5\x91LZ\x80!\xbbq\x9a\xd8\xe18w') sendto$inet(r1, &(0x7f00000003c0)="12c741263bc3c3833860047ab3cfe7a29be13f1763979e4d068480624d2198d928dd598fbf980dc1bda630e6980e76a9fc6730a37a2f0226321def4954280ab71b7d299a2d1804", 0x96, 0xc0a1, 0x0, 0x0) listen(r1, 0x8) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x4e20, 0x5ee, 0x4e20, 0x1, 0x2, 0x20, 0x20, 0x33}, {0xd, 0x0, 0xfffffffffffffffa, 0x7ff, 0xfffffffffffffff9, 0x9, 0x9, 0x101}, {0x80000000, 0xff, 0x67, 0x5fa3}, 0x0, 0x6e6bbb, 0x1, 0x1, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x3c}, 0xa, @in6=@private2, 0x3502, 0x1, 0x1, 0x4, 0x8001, 0xa0, 0x7fffffff}}, 0xe8) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) ioctl(0xffffffffffffffff, 0x8b33, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000004140), 0x381001, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) close(0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8m1.901361081s ago: executing program 49 (id=1877): futex(&(0x7f0000000340), 0x0, 0x3, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000049c0)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x1ff, 0x9, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @remote, {[@cipso={0x86, 0x3a, 0x3, [{0x5, 0x5, "d0e581"}, {0x2, 0x8, "a9b3cc3393c3"}, {0x5, 0x7, "e6590956a9"}, {0x0, 0x10, "a36aff80ac934034d93ce9d60d4a"}, {0x6, 0x10, "a06c892c9d0db1b7431b6a2c872d"}]}]}}}}}) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) pwrite64(r0, &(0x7f00000002c0), 0x0, 0x8) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000280)={0x1b, 0x3, 0x2, 0x4000}) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x19, r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_discard_preallocations\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_discard_preallocations\x00', r5}, 0x18) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000002100)={0x2, 0x0, 0x100000000, 0x8000000000000001, 0xffffffffffffffff}) 5m52.865794085s ago: executing program 50 (id=2256): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000180)={0x10000, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setown(r0, 0x8, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x25}, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 2m44.981898155s ago: executing program 51 (id=3055): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1fffffff, 0x48800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000380)={r2, 0x2, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20800000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) 2m44.084435609s ago: executing program 52 (id=3064): socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x25, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2m33.193161601s ago: executing program 8 (id=3139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) 2m18.109993297s ago: executing program 53 (id=3139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) 1m51.866206259s ago: executing program 1 (id=3552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x6, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m50.992033812s ago: executing program 1 (id=3560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x2, 0x4}, 0x8) 1m50.785365047s ago: executing program 1 (id=3563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 1m50.368204355s ago: executing program 1 (id=3569): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m50.24112664s ago: executing program 1 (id=3570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 1m49.194164706s ago: executing program 1 (id=3576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x10) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840)}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1m48.608141005s ago: executing program 54 (id=3576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x10) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840)}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 54.141859214s ago: executing program 6 (id=3932): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x83b, 0x0, &(0x7f0000000500), &(0x7f0000000400)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x0, 0xfffffff9, 0x3, 0xca60, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x31887ab3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x5, 0x7, 0x9, 0x20, 0x999d1e2a512ef073}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x6, 0x76}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xc0) prctl$PR_SET_SECUREBITS(0x1c, 0x73) r5 = socket(0x1a, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x8) 52.730817476s ago: executing program 6 (id=3943): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0xfff3}, {}, {0xe, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1501}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 52.47745457s ago: executing program 6 (id=3945): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r1, @ANYBLOB="08002600940900000800b700a6"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x8c, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4e}, @device_b, @device_a, @random="d2e5413fb3f4", {0x7, 0x7}}, 0x10000, @default, 0x1800, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x5}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x8, 0x1, 0x2, 0x0, {0x9, 0x4, 0x0, 0x3, 0x0, 0x1}, 0x300, 0x6ca, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x28}}, [{0xdd, 0x6, "efceea52a3e0"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 52.229264158s ago: executing program 6 (id=3949): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 51.164633707s ago: executing program 6 (id=3952): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) io_setup(0x2, &(0x7f00000001c0)) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 50.546049916s ago: executing program 6 (id=3962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a000001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 49.986249494s ago: executing program 55 (id=3962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a000001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 31.066048438s ago: executing program 9 (id=4106): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x21, 0x7, 0x2) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x4bfa, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 29.152475057s ago: executing program 9 (id=4124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x50, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 28.354223991s ago: executing program 9 (id=4130): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, r1, 0xc000, 0x973f, 0x81, 0x1}) 27.474730753s ago: executing program 9 (id=4136): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x183203, 0x0) 26.519485085s ago: executing program 9 (id=4146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 25.899988053s ago: executing program 9 (id=4150): io_setup(0x6, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) io_submit(r0, 0x0, 0x0) 25.417974156s ago: executing program 56 (id=4150): io_setup(0x6, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) io_submit(r0, 0x0, 0x0) 25.411586521s ago: executing program 5 (id=4154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 25.27251729s ago: executing program 5 (id=4155): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25.044844492s ago: executing program 5 (id=4156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)=ANY=[@ANYBLOB="240000003900070101000000fbe8df25037c000004008c800c0001800600060088470000"], 0x24}}, 0x0) 24.9062121s ago: executing program 5 (id=4158): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x183203, 0x0) 24.596697125s ago: executing program 5 (id=4160): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x9}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="794d1526c957134da5fa82ae5e0ab5aa9f787bc5bc948e2e0c"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0x7a53, &(0x7f0000000240)={0x0, 0x93c7, 0x40, 0x0, 0x17c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000000), 0x0) 24.208044284s ago: executing program 5 (id=4164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) 23.778683869s ago: executing program 57 (id=4164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) 5.881845557s ago: executing program 4 (id=4265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.778091264s ago: executing program 3 (id=4273): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 4.563656252s ago: executing program 0 (id=4274): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 4.396740641s ago: executing program 3 (id=4275): r0 = socket$nl_route(0x10, 0x3, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0xfffffffffffffffe, 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) syz_emit_ethernet(0xe9, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "d85cd2", 0xab, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, {[], @echo_reply={0x81, 0x0, 0x0, 0xfff, 0xa, "f4eecfdcb0912de3eadf90d58636512a717ada4dc2fed9857e37050561d7450fd4db07630a506b26f155e901ca5d30d8ea917949bbeec1a89437640041a76d16c8bcd700253632e22baf58bd0009c36f5a307580a0b3a63b8efc7ef16dc86f05f96f5f869de3bd055bdde8e3e882e0e3ae8064349126f34903aeba7c1adc7132fb1c923fdca48972c05ce742d37f48afbe8eba7a038cd83397f82a3c4590717a2f21b7"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4004004) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8800000, 0x3, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x10, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4084) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x1, 0x3}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 3.748328316s ago: executing program 0 (id=4277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) 2.995090495s ago: executing program 0 (id=4282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x3, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x4) 2.922287487s ago: executing program 2 (id=4283): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, r0, 0x1, 0x9}, 0x14) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @value=r1}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x3, 0x1ffe6}, {0xd, 0xffe0}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.844545532s ago: executing program 0 (id=4285): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') 2.630108343s ago: executing program 0 (id=4286): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000002640)='devices.list\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100dc05000000000040b200850000007b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) madvise(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0xa) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 2.629704887s ago: executing program 2 (id=4287): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 2.619755118s ago: executing program 3 (id=4288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xbeb1dfa7512b8a13}, 0x20000800) 2.593399278s ago: executing program 4 (id=4289): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4004) 2.482618365s ago: executing program 8 (id=4165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2.338200838s ago: executing program 4 (id=4291): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 2.276474879s ago: executing program 8 (id=4293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) finit_module(r1, 0x0, 0x3) 2.233901218s ago: executing program 2 (id=4294): openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='i2c_result\x00', r0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2.203092918s ago: executing program 3 (id=4295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4, 0x86}, 0x8) 1.914116838s ago: executing program 8 (id=4296): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r1, &(0x7f0000000040)="c292df", 0x3, 0x7, 0x0, 0x2}]) 1.853930364s ago: executing program 2 (id=4297): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 1.765622652s ago: executing program 7 (id=4298): fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') 1.746679127s ago: executing program 4 (id=4299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigpending(0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 992.46456ms ago: executing program 7 (id=4300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f00000004c0)="b2b1f700", 0x4, 0xffffffffffffffff) 946.876983ms ago: executing program 3 (id=4301): sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x4002000) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40, &(0x7f00000025c0)={r0, r1+60000000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003d40)={@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, 0x7fffffff, 0x401, 0x2, 0x0, 0x8, 0x280000a}) pselect6(0x40, &(0x7f0000003dc0)={0x81, 0x6, 0x1, 0x0, 0x5, 0x8, 0x9, 0x5}, &(0x7f0000003e00)={0x3f8, 0x4, 0xa, 0x39, 0x9, 0x8, 0xffffffffffffff3f, 0x32d}, &(0x7f0000003e40)={0x8001, 0x189, 0xfffffffffffffffe, 0x2, 0x6, 0x2, 0x80, 0x1d42}, &(0x7f0000003e80), 0x0) syz_emit_ethernet(0xe11, &(0x7f0000003f40)={@random="1bf8f263d4e6", @broadcast, @void, {@x25={0x805, {0x1, 0xb, 0x9, "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"}}}}, &(0x7f0000004f80)={0x0, 0x4, [0x4ea, 0x64d, 0x446, 0x87e]}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000006ac0)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a00)={0x48, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) 935.905024ms ago: executing program 2 (id=4302): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e25, @empty}, 0x10) 887.921262ms ago: executing program 8 (id=4303): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394f90424fc602f1a09000a", 0x19}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 839.982474ms ago: executing program 4 (id=4304): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0a"], 0x208}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 742.710706ms ago: executing program 7 (id=4305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 741.333801ms ago: executing program 3 (id=4306): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 688.359349ms ago: executing program 8 (id=4307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xbeb1dfa7512b8a13}, 0x20000800) 671.345071ms ago: executing program 4 (id=4308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 545.877502ms ago: executing program 2 (id=4309): openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='i2c_result\x00', r0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 377.698994ms ago: executing program 7 (id=4310): r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0xb) tkill(r0, 0x11) 179.943292ms ago: executing program 0 (id=4311): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 107.643932ms ago: executing program 7 (id=4312): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600"], 0x78) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 0s ago: executing program 7 (id=4313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4, 0x86}, 0x8) kernel console output (not intermixed with test programs): m tag 0x0 [ 1261.270935][ T5928] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 1261.297633][ T5928] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 1261.318413][ T5928] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 1261.334654][ T5928] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1261.345581][ T5845] Bluetooth: hci1: unexpected event for opcode 0x040e [ 1261.458721][ T5928] usb 10-1: USB disconnect, device number 13 [ 1261.648776][ T6006] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1261.803405][ T6006] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1262.024066][ T6006] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1262.037854][ T6006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1262.049245][ T6006] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1262.061237][ T6006] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1262.074748][ T6006] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1262.084059][ T6006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.094979][ T6006] usb 9-1: config 0 descriptor?? [ 1262.109590][ T5928] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1262.338499][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 1262.377074][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1262.565315][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1262.654479][ T5845] Bluetooth: hci6: unexpected event for opcode 0x040e [ 1262.695000][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1262.744447][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1262.775868][T17153] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1262.817904][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1262.868073][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.098477][ T5928] usb 5-1: GET_CAPABILITIES returned 0 [ 1263.104442][ T5928] usbtmc 5-1:16.0: can't read capabilities [ 1263.200660][ T6006] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1263.243919][ T6006] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1263.283229][ T6006] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1263.305412][ T5928] usb 5-1: USB disconnect, device number 54 [ 1263.312519][ T6006] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1263.337744][ T6006] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1263.382699][ T6006] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1263.506692][ T6006] usb 9-1: USB disconnect, device number 21 [ 1263.569617][ T5845] Bluetooth: hci3: unexpected event for opcode 0x040e [ 1263.698404][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1263.705575][ C0] EXT4-fs (loop5): initial error at time 1766154725: ext4_mb_generate_buddy:1306 [ 1263.714770][ C0] EXT4-fs (loop5): last error at time 1766154725: ext4_mb_generate_buddy:1306 [ 1264.549303][T17231] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 1264.638580][T17231] macsec1: entered promiscuous mode [ 1264.676986][T17231] macsec1: entered allmulticast mode [ 1264.698197][T17231] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 1264.875537][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 1264.888475][T17245] netlink: 'syz.2.3018': attribute type 20 has an invalid length. [ 1264.999153][ T6360] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.008368][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 1265.029231][ T6360] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.042728][ T6360] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.051716][T17245] netlink: 'syz.2.3018': attribute type 20 has an invalid length. [ 1265.060372][ T6360] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1265.240962][ T5845] Bluetooth: hci6: unexpected event for opcode 0x040e [ 1265.270279][T17262] can0: slcan on ptm0. [ 1265.520093][T17260] can0 (unregistered): slcan off ptm0. [ 1266.165991][T17273] tipc: Started in network mode [ 1266.201298][T17273] tipc: Node identity 0aecff137f0b, cluster identity 4711 [ 1266.248777][T17273] tipc: Enabled bearer , priority 0 [ 1266.366424][T17271] tipc: Disabling bearer [ 1266.754755][T17296] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1266.795507][T17296] overlayfs: failed to set xattr on upper [ 1266.815871][T17296] overlayfs: ...falling back to redirect_dir=nofollow. [ 1266.848998][T17296] overlayfs: ...falling back to index=off. [ 1266.867883][T17296] overlayfs: ...falling back to uuid=null. [ 1266.924778][T17287] syzkaller1: entered promiscuous mode [ 1266.930852][T17287] syzkaller1: entered allmulticast mode [ 1267.276986][T17314] 9pnet_virtio: no channels available for device syz [ 1267.733426][T17326] sp0: Synchronizing with TNC [ 1268.717931][ T6006] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1268.789892][ T5928] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1268.851609][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1268.867262][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1268.876292][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1268.882552][ T6046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.883931][ T6006] usb 2-1: Using ep0 maxpacket: 32 [ 1268.903178][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1268.912506][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1268.916598][ T6046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.923520][ T6006] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.957913][ T6006] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1268.978299][ T6006] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1268.983077][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 1268.990284][ T6006] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1269.014937][ T6006] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1269.024817][ T6006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.026711][ T5928] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1269.037702][ T6006] usb 2-1: Product: syz [ 1269.056709][ T6006] usb 2-1: Manufacturer: syz [ 1269.067040][ T6006] usb 2-1: SerialNumber: syz [ 1269.075297][ T5928] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1269.096337][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1269.111345][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1269.114417][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1269.121814][ T5928] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1269.161785][ T5928] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1269.178716][ T6046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1269.190280][ T6006] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input29 [ 1269.190462][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.228078][ T6046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.330517][ T6006] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1269.350633][ T6006] (id 0x00) [ 1269.421982][ T6046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1269.454519][ T6046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.477877][ T6006] rc_core: IR keymap rc-imon-pad not found [ 1269.487736][ T6006] Registered IR keymap rc-empty [ 1269.488035][ T5928] usb 6-1: GET_CAPABILITIES returned 0 [ 1269.501378][ T6006] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1269.512982][ T5928] usbtmc 6-1:16.0: can't read capabilities [ 1269.526751][ T6006] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1269.568775][ T6006] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1269.592519][ T6006] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input30 [ 1269.610118][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1269.613433][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1269.614327][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1269.615325][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1269.616224][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1269.618817][ T6046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1269.618850][ T6046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.655142][ T6006] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:30> initialized [ 1269.742113][ T5928] usb 6-1: USB disconnect, device number 25 [ 1269.767737][T12584] usb 2-1: USB disconnect, device number 30 [ 1270.151427][ T6046] bridge_slave_1: left allmulticast mode [ 1270.157904][ T6046] bridge_slave_1: left promiscuous mode [ 1270.163821][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.176225][ T6046] bridge_slave_0: left allmulticast mode [ 1270.182868][ T6046] bridge_slave_0: left promiscuous mode [ 1270.208285][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.517293][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3073'. [ 1270.532367][T17377] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1270.988520][ T5845] Bluetooth: hci0: command tx timeout [ 1271.239671][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.253545][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.265308][ T6046] bond0 (unregistering): Released all slaves [ 1271.306725][T17387] sp0: Synchronizing with TNC [ 1271.311516][T17350] chnl_net:caif_netlink_parms(): no params data found [ 1271.593902][T17358] chnl_net:caif_netlink_parms(): no params data found [ 1271.698064][ T5845] Bluetooth: hci3: command tx timeout [ 1271.724092][T17397] program syz.1.3080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1272.142404][ T6046] mac80211_hwsim hwsim56 wlan0 (unregistering): left allmulticast mode [ 1272.457889][T17350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.457957][T17431] sp0: Synchronizing with TNC [ 1272.470925][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.479849][T17350] bridge_slave_0: entered allmulticast mode [ 1272.487915][T17350] bridge_slave_0: entered promiscuous mode [ 1272.510609][T17358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.518129][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.525655][T17358] bridge_slave_0: entered allmulticast mode [ 1272.533544][T17358] bridge_slave_0: entered promiscuous mode [ 1272.548308][T17350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.555587][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.563689][T17350] bridge_slave_1: entered allmulticast mode [ 1272.571659][T17350] bridge_slave_1: entered promiscuous mode [ 1272.585651][ T6046] hsr_slave_0: left promiscuous mode [ 1272.592404][ T6046] hsr_slave_1: left promiscuous mode [ 1272.600106][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.608353][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.620234][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.628331][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.663424][ T6046] veth1_macvtap: left promiscuous mode [ 1272.681510][ T6046] veth0_macvtap: left promiscuous mode [ 1272.689034][ T6046] veth1_vlan: left promiscuous mode [ 1272.695736][ T6046] veth0_vlan: left promiscuous mode [ 1273.043109][ T5845] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1273.063239][ T5830] Bluetooth: hci0: command tx timeout [ 1273.777652][ T5830] Bluetooth: hci3: command tx timeout [ 1274.589322][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 1274.674488][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 1275.144667][ T5830] Bluetooth: hci0: command tx timeout [ 1275.692847][T17358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.702010][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.711154][T17358] bridge_slave_1: entered allmulticast mode [ 1275.719768][T17358] bridge_slave_1: entered promiscuous mode [ 1275.857353][ T5830] Bluetooth: hci3: command tx timeout [ 1275.924957][T17358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.967181][T17358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.010843][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.089020][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.208098][T17358] team0: Port device team_slave_0 added [ 1276.219820][T17358] team0: Port device team_slave_1 added [ 1276.263136][T17482] binder: BC_ACQUIRE_RESULT not supported [ 1276.269922][T17482] binder: 17481:17482 ioctl c0306201 200000000440 returned -22 [ 1276.323915][T17350] team0: Port device team_slave_0 added [ 1276.355032][T17350] team0: Port device team_slave_1 added [ 1276.365292][T17358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.373197][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.401572][T17358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.441927][T17358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.450540][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.478764][T17358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.550038][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.564306][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.612207][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.673062][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.680384][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.712751][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.740421][T17358] hsr_slave_0: entered promiscuous mode [ 1276.747667][T17358] hsr_slave_1: entered promiscuous mode [ 1276.753966][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3115'. [ 1276.764674][T17358] debugfs: 'hsr0' already exists in 'hsr' [ 1276.771505][T17358] Cannot create hsr debugfs directory [ 1277.062364][T17350] hsr_slave_0: entered promiscuous mode [ 1277.077586][T17350] hsr_slave_1: entered promiscuous mode [ 1277.094323][T17350] debugfs: 'hsr0' already exists in 'hsr' [ 1277.107279][T17350] Cannot create hsr debugfs directory [ 1277.289452][ T5830] Bluetooth: hci0: command tx timeout [ 1278.043326][ T5830] Bluetooth: hci3: command tx timeout [ 1278.333721][T17512] syzkaller0: entered promiscuous mode [ 1278.352641][T17512] syzkaller0: entered allmulticast mode [ 1279.014648][T17358] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1279.030969][T17358] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1279.043760][T17358] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1279.083631][T17358] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1280.060315][T17358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.184643][T17557] syzkaller0: entered promiscuous mode [ 1280.203885][T17557] syzkaller0: entered allmulticast mode [ 1280.250279][T17358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.354563][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.361888][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.469627][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.477393][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.654352][T17350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1280.698089][T17350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1280.720559][T17350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1280.753450][T17350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1281.124858][T17358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.924862][T17350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.949895][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.000297][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.002034][T17595] overlayfs: failed to resolve './file0': -2 [ 1282.007795][ T4166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.063798][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.071081][ T4166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.477917][T17358] veth0_vlan: entered promiscuous mode [ 1282.510518][T17358] veth1_vlan: entered promiscuous mode [ 1282.575210][T17358] veth0_macvtap: entered promiscuous mode [ 1282.597322][T17358] veth1_macvtap: entered promiscuous mode [ 1282.655155][T17358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.669483][T17350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.687535][T17358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.720808][ T137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.743779][ T137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.758582][ T137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.775215][ T137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.971697][T17350] veth0_vlan: entered promiscuous mode [ 1283.006409][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.011522][T17350] veth1_vlan: entered promiscuous mode [ 1283.029883][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.153012][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.178147][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.189530][T17623] syzkaller0: entered promiscuous mode [ 1283.195113][T17623] syzkaller0: entered allmulticast mode [ 1283.232855][T17350] veth0_macvtap: entered promiscuous mode [ 1283.245601][T17623] tipc: Started in network mode [ 1283.252174][T17623] tipc: Node identity 0ebbcdfcf4ff, cluster identity 4711 [ 1283.260189][T17623] tipc: Enabled bearer , priority 0 [ 1283.273527][T17350] veth1_macvtap: entered promiscuous mode [ 1283.317288][T17622] tipc: Resetting bearer [ 1283.398678][T17632] overlayfs: failed to resolve './file0': -2 [ 1283.398985][T17622] tipc: Disabling bearer [ 1283.520492][T17350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.560174][T17350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.595250][ T4166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.606290][ T4166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.660633][ T6825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.672524][ T6825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.900421][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.919255][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.952006][T17649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3167'. [ 1284.030670][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.068202][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.276569][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3171'. [ 1284.362470][T17662] loop3: detected capacity change from 0 to 4096 [ 1284.530498][T17662] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=4 [ 1284.541208][T17662] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1284.560600][T17662] EXT4-fs (loop3): mount failed [ 1285.674168][T17697] can0: slcan on ptm0. [ 1285.748144][T17695] can0 (unregistered): slcan off ptm0. [ 1286.126534][T17716] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3194'. [ 1286.613362][T17736] loop1: detected capacity change from 0 to 4096 [ 1286.632528][T17736] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=4 [ 1286.655970][T17736] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1286.680183][T17736] EXT4-fs (loop1): mount failed [ 1286.853713][T17746] overlayfs: failed to resolve './file0': -2 [ 1286.943123][T17750] netlink: 208 bytes leftover after parsing attributes in process `syz.9.3209'. [ 1287.270875][T17763] syzkaller0: entered promiscuous mode [ 1287.277037][T17763] syzkaller0: entered allmulticast mode [ 1287.621791][T17779] overlayfs: failed to resolve './file0': -2 [ 1287.653864][T17776] loop7: detected capacity change from 0 to 4096 [ 1287.700399][T17776] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=4 [ 1287.766134][T17776] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1287.817116][T17786] netlink: 208 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1287.842955][T17776] EXT4-fs (loop7): mount failed [ 1288.311988][T17809] syzkaller0: entered promiscuous mode [ 1288.336163][T17809] syzkaller0: entered allmulticast mode [ 1288.533669][T17821] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3238'. [ 1289.362316][T17856] syzkaller0: entered promiscuous mode [ 1289.371236][T17856] syzkaller0: entered allmulticast mode [ 1289.606623][ T6105] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1289.761172][ T6105] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1289.779657][ T6105] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1289.806526][ T6105] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1289.836787][ T6105] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1289.856160][ T6105] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.865502][ T6105] usb 8-1: Product: syz [ 1289.872831][ T6105] usb 8-1: Manufacturer: syz [ 1289.887174][ T6105] usb 8-1: SerialNumber: syz [ 1289.916058][ T6105] hub 8-1:1.0: bad descriptor, ignoring hub [ 1289.922548][ T6105] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1290.122879][ T6105] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1290.161720][T17888] syzkaller0: entered promiscuous mode [ 1290.167675][T17888] syzkaller0: entered allmulticast mode [ 1290.253164][T17890] syzkaller0: entered promiscuous mode [ 1290.259970][T17890] syzkaller0: entered allmulticast mode [ 1290.280600][T17890] tipc: Enabled bearer , priority 0 [ 1290.326824][T17889] tipc: Resetting bearer [ 1290.432061][T17889] tipc: Disabling bearer [ 1290.457415][ T6105] usb 8-1: USB disconnect, device number 7 [ 1290.486780][ T6105] usblp0: removed [ 1290.605519][T17903] loop3: detected capacity change from 0 to 1024 [ 1290.623073][T17903] EXT4-fs: Ignoring removed i_version option [ 1290.640763][T17903] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1290.797074][ T6105] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1290.842180][ T31] audit: type=1326 audit(1766155056.462:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1290.869931][T17919] veth1_to_bond: entered allmulticast mode [ 1290.893368][T17917] veth1_to_bond: left allmulticast mode [ 1290.906512][ T31] audit: type=1326 audit(1766155056.492:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1290.976822][ T6105] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1290.993081][ T31] audit: type=1326 audit(1766155056.492:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1290.995495][T17923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3284'. [ 1291.018215][ T6105] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1291.077655][ T6105] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1291.106540][ T31] audit: type=1326 audit(1766155056.492:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1291.154107][ T31] audit: type=1326 audit(1766155056.492:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1291.187095][ T6105] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1291.206525][ T6105] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.226906][ T31] audit: type=1326 audit(1766155056.492:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1291.249677][ T6105] usb 8-1: Product: syz [ 1291.254059][ T6105] usb 8-1: Manufacturer: syz [ 1291.269657][T17930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.279691][ T6105] usb 8-1: SerialNumber: syz [ 1291.286957][ T31] audit: type=1326 audit(1766155056.492:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1291.322389][ T6105] hub 8-1:1.0: bad descriptor, ignoring hub [ 1291.329090][ T6105] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1291.337275][ T31] audit: type=1326 audit(1766155056.492:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1291.360138][ T31] audit: type=1326 audit(1766155056.492:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1291.390108][ T31] audit: type=1326 audit(1766155056.502:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17917 comm="syz.1.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1291.432550][T17935] syzkaller0: entered promiscuous mode [ 1291.440578][T17935] syzkaller0: entered allmulticast mode [ 1291.452756][T17935] tipc: Enabled bearer , priority 0 [ 1291.470158][T17934] tipc: Resetting bearer [ 1291.502752][T17934] tipc: Disabling bearer [ 1291.525783][ T6105] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1291.542806][T17939] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3292'. [ 1291.577505][ T6105] usb 8-1: USB disconnect, device number 8 [ 1291.597157][ T6105] usblp0: removed [ 1291.609469][ T37] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.619531][T17939] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3292'. [ 1291.638688][ T37] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.663751][ T37] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.682249][ T37] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1292.429261][T17969] tipc: Started in network mode [ 1292.444619][T17969] tipc: Node identity 3eeec33d6531, cluster identity 4711 [ 1292.495533][T17969] tipc: Enabled bearer , priority 0 [ 1292.551560][T17969] tipc: Resetting bearer [ 1292.707605][T17967] tipc: Disabling bearer [ 1293.049823][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.596711][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3316'. [ 1293.842278][T18022] loop3: detected capacity change from 0 to 512 [ 1293.881575][T18022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1293.927854][T18024] tipc: Enabled bearer , priority 0 [ 1293.943998][T18022] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3320: invalid indirect mapped block 4294967295 (level 0) [ 1293.965797][T18024] tipc: Resetting bearer [ 1294.000086][T18022] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3320: invalid indirect mapped block 4294967295 (level 1) [ 1294.049787][T18022] EXT4-fs (loop3): 1 orphan inode deleted [ 1294.057274][T18022] EXT4-fs (loop3): 1 truncate cleaned up [ 1294.060928][T18023] tipc: Disabling bearer [ 1294.066808][T18022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.100857][T18022] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1294.250200][T17350] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.464849][T18043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.544852][T18051] netlink: 133536 bytes leftover after parsing attributes in process `syz.7.3333'. [ 1294.963275][T18063] tipc: Enabled bearer , priority 0 [ 1294.975488][T18063] tipc: Resetting bearer [ 1295.009987][T18061] tipc: Disabling bearer [ 1295.360870][T12226] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.391496][T18076] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1295.398788][T18076] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1295.485113][T18076] vhci_hcd vhci_hcd.0: Device attached [ 1295.518287][T18078] vhci_hcd: connection closed [ 1295.529719][ T6084] vhci_hcd vhci_hcd.5: stop threads [ 1295.546695][T18082] 9p: Bad value for 'rfdno' [ 1295.576523][ T6084] vhci_hcd vhci_hcd.5: release socket [ 1295.597294][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1295.605220][ T6084] vhci_hcd vhci_hcd.5: disconnect device [ 1295.611310][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1295.612110][T18082] loop1: detected capacity change from 0 to 512 [ 1295.631605][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1295.645121][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1295.652849][ T5963] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1295.664399][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1295.727085][T18082] EXT4-fs: Ignoring removed bh option [ 1295.760610][T18082] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1296.191992][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 1296.192015][ T31] audit: type=1326 audit(1766155061.812:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18077 comm="syz.1.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1296.291624][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3346'. [ 1296.294134][T18085] chnl_net:caif_netlink_parms(): no params data found [ 1296.324782][ T31] audit: type=1326 audit(1766155061.842:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18077 comm="syz.1.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1296.386671][T18104] loop1: detected capacity change from 0 to 512 [ 1296.437664][ T31] audit: type=1326 audit(1766155061.852:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18077 comm="syz.1.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1296.469699][T18104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.518520][ T31] audit: type=1326 audit(1766155061.852:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18077 comm="syz.1.3346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x0 [ 1296.534124][T18104] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.997240][T15149] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.092902][T18124] loop7: detected capacity change from 0 to 128 [ 1297.098794][ T6825] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.343668][T18085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.352561][T18085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.374012][T18085] bridge_slave_0: entered allmulticast mode [ 1297.392542][T18085] bridge_slave_0: entered promiscuous mode [ 1297.501833][ T6825] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.539191][T18085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.557055][T18085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.574246][T18085] bridge_slave_1: entered allmulticast mode [ 1297.600409][T18085] bridge_slave_1: entered promiscuous mode [ 1297.696383][ T5845] Bluetooth: hci4: command tx timeout [ 1298.046074][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3373'. [ 1298.102452][ T6825] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.164092][T18085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.266418][T18168] syz_tun (unregistering): left allmulticast mode [ 1298.271684][T18175] loop1: detected capacity change from 0 to 512 [ 1298.308569][T18168] macvlan2 (unregistering): left promiscuous mode [ 1298.315263][T18175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1298.332297][T18168] macvlan2 (unregistering): left allmulticast mode [ 1298.342057][T18168] team0: Port device macvlan2 removed [ 1298.371368][T18175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 1298.379552][T18164] syzkaller0: entered promiscuous mode [ 1298.379581][T18164] syzkaller0: entered allmulticast mode [ 1298.394528][T18085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.414643][T18175] System zones: 1-12 [ 1298.423100][T18175] EXT4-fs (loop1): 1 truncate cleaned up [ 1298.453043][T18175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.519268][ T31] audit: type=1800 audit(1766155064.143:749): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3374" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1298.597806][ T31] audit: type=1326 audit(1766155064.223:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1298.647107][ T31] audit: type=1326 audit(1766155064.243:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1298.676198][ T31] audit: type=1326 audit(1766155064.243:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1298.740522][ T6825] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.815037][ T31] audit: type=1326 audit(1766155064.243:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1298.886127][ T31] audit: type=1326 audit(1766155064.253:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436198f749 code=0x7ffc0000 [ 1298.953959][T18085] team0: Port device team_slave_0 added [ 1299.010721][T18085] team0: Port device team_slave_1 added [ 1299.204762][T18085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.221810][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.262012][T18085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.411138][T18085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.426732][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.470707][T18085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.484289][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 1299.496052][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 1299.549459][T18203] netlink: 'syz.3.3384': attribute type 20 has an invalid length. [ 1299.633750][ T6825] bridge_slave_1: left allmulticast mode [ 1299.656103][ T6825] bridge_slave_1: left promiscuous mode [ 1299.664593][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.672225][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 1299.682866][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 1299.694356][T18203] netlink: 'syz.3.3384': attribute type 20 has an invalid length. [ 1299.705440][ T6825] bridge_slave_0: left allmulticast mode [ 1299.736270][ T6825] bridge_slave_0: left promiscuous mode [ 1299.742196][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.776202][ T5845] Bluetooth: hci4: command tx timeout [ 1300.517035][T15149] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.111885][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.124978][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1301.135619][ T6825] bond0 (unregistering): Released all slaves [ 1301.168864][ T3976] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.264414][T18224] syzkaller0: entered promiscuous mode [ 1301.306071][T18224] syzkaller0: entered allmulticast mode [ 1301.396196][T18085] hsr_slave_0: entered promiscuous mode [ 1301.409644][T18085] hsr_slave_1: entered promiscuous mode [ 1301.453349][T18085] debugfs: 'hsr0' already exists in 'hsr' [ 1301.460802][T18085] Cannot create hsr debugfs directory [ 1301.467102][ T3976] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.496028][ T3976] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.517581][ T3976] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.555454][T18241] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3397'. [ 1301.714956][ T6825] tipc: Left network mode [ 1301.866273][ T5845] Bluetooth: hci4: command tx timeout [ 1302.228316][T18253] overlayfs: failed to resolve './file0': -2 [ 1302.854628][ T6825] hsr_slave_0: left promiscuous mode [ 1302.872318][ T6825] hsr_slave_1: left promiscuous mode [ 1302.879192][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.894681][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.903744][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.923222][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.271222][ T6825] veth1_macvtap: left promiscuous mode [ 1303.286627][ T6825] veth0_macvtap: left promiscuous mode [ 1303.302975][ T6825] veth1_vlan: left promiscuous mode [ 1303.313934][ T6825] veth0_vlan: left promiscuous mode [ 1303.351777][T18272] netlink: 'syz.7.3407': attribute type 10 has an invalid length. [ 1303.385753][T18272] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3407'. [ 1303.945802][ T5845] Bluetooth: hci4: command tx timeout [ 1304.201660][T18288] overlayfs: failed to resolve './file1': -2 [ 1304.552922][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 1304.649521][ T6825] team0 (unregistering): Port device team_slave_0 removed [ 1304.662296][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.670858][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.506350][T18299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1305.514265][T18299] IPv6: NLM_F_CREATE should be set when creating new route [ 1305.726840][T18272] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1305.733668][T18272] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.780843][T18272] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1306.227143][T18308] tipc: Enabled bearer , priority 0 [ 1306.354584][T18307] tipc: Disabling bearer [ 1306.562768][ T6825] IPVS: stop unused estimator thread 0... [ 1306.692339][T18324] overlayfs: failed to resolve './file1': -2 [ 1306.755719][ T6364] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1306.935591][ T6364] usb 2-1: device descriptor read/64, error -71 [ 1307.129158][T18085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1307.152725][T18085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1307.200179][T18085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1307.217482][ T6364] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1307.233771][T18085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1307.355631][ T6364] usb 2-1: device descriptor read/64, error -71 [ 1307.487284][ T6364] usb usb2-port1: attempt power cycle [ 1307.856667][ T6364] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1308.145122][ T6364] usb 2-1: device descriptor read/8, error -71 [ 1308.510141][ T6364] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1308.646693][ T6364] usb 2-1: device descriptor read/8, error -71 [ 1308.706393][T18360] overlayfs: failed to resolve './file1': -2 [ 1308.799012][T18356] tipc: Started in network mode [ 1308.812589][T18356] tipc: Node identity bedbca166852, cluster identity 4711 [ 1308.833513][T18356] tipc: Enabled bearer , priority 0 [ 1308.846695][ T6364] usb usb2-port1: unable to enumerate USB device [ 1308.847797][T18366] 9pnet_fd: Insufficient options for proto=fd [ 1308.903825][T18355] tipc: Disabling bearer [ 1308.964092][T18085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.002442][T18085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.041681][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.049255][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.115029][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.122422][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.471057][T18386] sch_fq: defrate 0 ignored. [ 1309.775898][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1309.782620][ C0] EXT4-fs (loop9): initial error at time 1766154771: ext4_mb_generate_buddy:1306 [ 1309.791993][ C0] EXT4-fs (loop9): last error at time 1766154771: ext4_mb_generate_buddy:1306 [ 1310.086107][T18394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.093725][T18394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.392934][T18085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.532109][T18409] 9pnet_fd: Insufficient options for proto=fd [ 1311.623061][T18085] veth0_vlan: entered promiscuous mode [ 1311.668253][T18085] veth1_vlan: entered promiscuous mode [ 1311.803012][T18085] veth0_macvtap: entered promiscuous mode [ 1311.888014][T18085] veth1_macvtap: entered promiscuous mode [ 1311.947031][T18446] 9pnet_fd: Insufficient options for proto=fd [ 1311.958967][T18085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.970219][T18423] loop7: detected capacity change from 0 to 32768 [ 1312.001420][T18423] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3463 (18423) [ 1312.023430][T18423] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1312.025872][T18085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.034192][T18423] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1312.080664][ T6360] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.161086][ T6360] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.249961][ T6046] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.317104][ T6046] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.354573][T18423] BTRFS info (device loop7): rebuilding free space tree [ 1312.463969][T18423] BTRFS info (device loop7): disabling free space tree [ 1312.482863][T18423] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1312.567001][T18423] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1312.611764][T18423] BTRFS info (device loop7): setting nodatasum [ 1312.619154][T18423] BTRFS info (device loop7): setting nodatacow [ 1312.649514][T18423] BTRFS info (device loop7): turning off barriers [ 1312.662607][T18423] BTRFS info (device loop7): force clearing of disk cache [ 1312.761577][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.774080][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.837124][T17358] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1312.971289][ T6084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.033796][ T6084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.824975][T18505] 9pnet_fd: Insufficient options for proto=fd [ 1314.457588][T18520] pim6reg9: entered allmulticast mode [ 1314.646887][T18520] syzkaller1: entered promiscuous mode [ 1314.652844][T18520] syzkaller1: entered allmulticast mode [ 1315.651057][T18537] netlink: 'syz.6.3500': attribute type 4 has an invalid length. [ 1315.856890][T18542] 9pnet_fd: Insufficient options for proto=fd [ 1316.733900][T18557] loop6: detected capacity change from 0 to 128 [ 1316.845632][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 1316.845654][ T31] audit: type=1800 audit(1766155082.474:809): pid=18557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3505" name="bus" dev="loop6" ino=1048785 res=0 errno=0 [ 1317.030589][T18565] bio_check_eod: 61 callbacks suppressed [ 1317.030616][T18565] syz.6.3505: attempt to access beyond end of device [ 1317.030616][T18565] loop6: rw=2049, sector=401, nr_sectors = 640 limit=128 [ 1317.490438][T18575] pim6reg9: entered allmulticast mode [ 1317.575373][T18575] syzkaller1: entered promiscuous mode [ 1317.581067][T18575] syzkaller1: entered allmulticast mode [ 1318.200671][T18582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1318.208633][T18582] IPv6: NLM_F_CREATE should be set when creating new route [ 1318.240480][ T6015] kernel read not supported for file /884/coredump_filter (pid: 6015 comm: kworker/1:9) [ 1318.252861][ T5928] kernel write not supported for file /884/coredump_filter (pid: 5928 comm: kworker/1:5) [ 1318.591221][T18598] netlink: 'syz.9.3518': attribute type 9 has an invalid length. [ 1318.638368][T18598] netlink: 58351 bytes leftover after parsing attributes in process `syz.9.3518'. [ 1320.718216][T18655] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3539'. [ 1320.975782][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1321.362883][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'. [ 1321.802210][T18690] syzkaller0: entered promiscuous mode [ 1321.824831][T18690] syzkaller0: entered allmulticast mode [ 1321.866186][T18692] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3554'. [ 1322.688299][T18714] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1322.733634][T18714] hsr_slave_0: left promiscuous mode [ 1322.766938][T18714] hsr_slave_1: left promiscuous mode [ 1324.359228][ T6199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.638366][ T6199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.837741][ T6199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.274657][T18762] pim6reg: entered allmulticast mode [ 1325.798955][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1325.815645][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1325.826279][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1325.836857][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1325.848116][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1326.081121][ T6199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.796096][ T6199] bridge_slave_1: left allmulticast mode [ 1326.822544][ T6199] bridge_slave_1: left promiscuous mode [ 1326.841407][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.876695][ T6199] bridge_slave_0: left allmulticast mode [ 1326.902909][ T6199] bridge_slave_0: left promiscuous mode [ 1326.909014][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.945387][ T5830] Bluetooth: hci1: command tx timeout [ 1328.113794][ T6199] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1328.163401][T18799] No control pipe specified [ 1328.498227][ T6199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.510088][ T6199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.521867][ T6199] bond0 (unregistering): Released all slaves [ 1328.656629][ T6199] tipc: Left network mode [ 1328.902016][T18763] chnl_net:caif_netlink_parms(): no params data found [ 1329.374626][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.382632][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.401418][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1329.420203][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.559725][ T6199] veth1_macvtap: left promiscuous mode [ 1329.573035][ T6199] veth0_macvtap: left promiscuous mode [ 1329.579418][ T6199] veth1_vlan: left promiscuous mode [ 1329.585537][ T6199] veth0_vlan: left promiscuous mode [ 1330.014884][ T5830] Bluetooth: hci1: command tx timeout [ 1331.239539][T18861] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1331.470006][ T6199] team0 (unregistering): Port device team_slave_1 removed [ 1331.546996][ T6199] team0 (unregistering): Port device team_slave_0 removed [ 1332.105666][ T5830] Bluetooth: hci1: command tx timeout [ 1332.834200][ T31] audit: type=1800 audit(1766155098.444:810): pid=18861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3618" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1332.855777][T18861] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1332.877898][T18861] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1332.896609][T18861] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1333.003437][T18763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.053805][T18763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.087155][T18763] bridge_slave_0: entered allmulticast mode [ 1333.106670][T18763] bridge_slave_0: entered promiscuous mode [ 1333.139889][T18763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.163561][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3622'. [ 1333.173862][T18763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.183064][T18763] bridge_slave_1: entered allmulticast mode [ 1333.195243][T18763] bridge_slave_1: entered promiscuous mode [ 1333.202933][T18872] netlink: 'syz.3.3623': attribute type 13 has an invalid length. [ 1333.236325][T18872] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.3623'. [ 1333.439444][T18885] fuse: Bad value for 'group_id' [ 1333.451063][T18885] fuse: Bad value for 'group_id' [ 1334.174213][ T5830] Bluetooth: hci1: command tx timeout [ 1334.401777][T18763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.476108][T18763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.628599][T18763] team0: Port device team_slave_0 added [ 1334.648149][T18763] team0: Port device team_slave_1 added [ 1334.834529][T18763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.842089][T18763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.891896][T18763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.954995][T18763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.962484][T18763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.112171][T18763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.148454][T18922] netlink: 'syz.7.3640': attribute type 13 has an invalid length. [ 1335.165361][T18922] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.3640'. [ 1336.486688][T18939] bridge_slave_0: left allmulticast mode [ 1336.521514][T18939] bridge_slave_0: left promiscuous mode [ 1336.533275][T18939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.635855][T18939] bridge_slave_1: left allmulticast mode [ 1336.677718][T18939] bridge_slave_1: left promiscuous mode [ 1336.741919][T18939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.853627][T18939] bond0: (slave bond_slave_0): Releasing backup interface [ 1336.892327][T18939] bond0: (slave bond_slave_1): Releasing backup interface [ 1336.948827][T18939] team0: Port device team_slave_0 removed [ 1336.972842][T18939] team0: Port device team_slave_1 removed [ 1336.997700][T18939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.016310][T18939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.041469][T18939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.059444][T18939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.081459][T18939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1337.160907][T18763] hsr_slave_0: entered promiscuous mode [ 1337.195382][T18763] hsr_slave_1: entered promiscuous mode [ 1337.225232][T18763] debugfs: 'hsr0' already exists in 'hsr' [ 1337.233863][T18763] Cannot create hsr debugfs directory [ 1338.085678][ T31] audit: type=1326 audit(1766155103.715:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3184b8f749 code=0x7ffc0000 [ 1338.163956][ T31] audit: type=1326 audit(1766155103.755:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3184b8de97 code=0x7ffc0000 [ 1338.252485][ T31] audit: type=1326 audit(1766155103.755:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3184b8f749 code=0x7ffc0000 [ 1338.316392][ T31] audit: type=1326 audit(1766155103.755:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f3184b8f749 code=0x7ffc0000 [ 1338.344472][T18983] program syz.5.3659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1338.373670][ T31] audit: type=1326 audit(1766155103.755:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3184b8f749 code=0x7ffc0000 [ 1338.638777][T18953] infiniband syz!: set active [ 1338.652425][T18953] infiniband syz!: added team_slave_0 [ 1338.723096][T18953] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1338.729910][T18953] infiniband syz!: Couldn't open port 1 [ 1338.851105][T18953] RDS/IB: syz!: added [ 1338.886703][T18953] smc: adding ib device syz! with port count 1 [ 1338.893425][T18953] smc: ib device syz! port 1 has no pnetid [ 1338.917085][T18998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3665'. [ 1339.167395][T18763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1339.208312][T18763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1339.255953][T18763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1339.558500][T19010] loop3: detected capacity change from 0 to 512 [ 1339.600179][T19010] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1339.657931][T19010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 1339.684332][T19010] System zones: 1-12 [ 1339.707465][T19010] EXT4-fs (loop3): 1 truncate cleaned up [ 1339.735280][T19010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.843764][ T31] audit: type=1800 audit(1766155105.465:816): pid=19010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3670" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1340.231691][T18763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1340.516691][T17350] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.558744][T19029] program syz.6.3673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1341.138777][T18763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.184174][T18763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.209274][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.217477][ T4166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.248757][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.257206][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.041404][T18763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.277670][T18763] veth0_vlan: entered promiscuous mode [ 1342.371333][T18763] veth1_vlan: entered promiscuous mode [ 1342.461267][T18763] veth0_macvtap: entered promiscuous mode [ 1342.518743][T18763] veth1_macvtap: entered promiscuous mode [ 1342.557829][ T5915] kernel read not supported for file /126/coredump_filter (pid: 5915 comm: kworker/1:4) [ 1342.568987][T18763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.576916][ T6015] kernel write not supported for file /126/coredump_filter (pid: 6015 comm: kworker/1:9) [ 1342.607159][T18763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.658724][ T6084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.694384][ T6084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.735040][ T6084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.779882][ T6084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.977074][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.000325][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.220492][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.267194][T19084] syzkaller0: entered promiscuous mode [ 1343.276696][T19084] syzkaller0: entered allmulticast mode [ 1344.193823][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.432011][T19093] No control pipe specified [ 1344.802773][T19098] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1344.841534][T19098] smc: net device hsr0 erased user defined pnetid SYZ2 [ 1345.854444][T19099] loop6: detected capacity change from 0 to 512 [ 1345.885475][T19099] EXT4-fs: Ignoring removed oldalloc option [ 1345.937057][T19099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1346.158369][ T6022] kernel read not supported for file /9/coredump_filter (pid: 6022 comm: kworker/1:11) [ 1346.168757][ T5928] kernel write not supported for file /9/coredump_filter (pid: 5928 comm: kworker/1:5) [ 1347.144560][T19133] loop0: detected capacity change from 0 to 128 [ 1347.187702][T19135] bridge0: entered promiscuous mode [ 1347.207542][T19135] bridge0: port 3(macvtap1) entered blocking state [ 1347.241789][T19135] bridge0: port 3(macvtap1) entered disabled state [ 1347.266158][T19135] macvtap1: entered allmulticast mode [ 1347.271682][T19135] bridge0: entered allmulticast mode [ 1347.316559][T19135] macvtap1: left allmulticast mode [ 1347.321746][T19135] bridge0: left allmulticast mode [ 1347.357168][T19135] bridge0: left promiscuous mode [ 1348.995025][ T6105] kernel read not supported for file /291/coredump_filter (pid: 6105 comm: kworker/0:11) [ 1349.005638][ T6463] kernel write not supported for file /291/coredump_filter (pid: 6463 comm: kworker/0:15) [ 1349.226147][T19158] 9p: Bad value for 'wfdno' [ 1349.315853][T19161] fuse: Unknown parameter 'grou00000000000000000000' [ 1349.906599][T19172] loop7: detected capacity change from 0 to 128 [ 1349.964727][T19175] program syz.3.3725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1350.553883][ T6463] kernel read not supported for file /1027/coredump_filter (pid: 6463 comm: kworker/0:15) [ 1350.564279][ T5878] kernel write not supported for file /1027/coredump_filter (pid: 5878 comm: kworker/0:3) [ 1350.858464][T19202] 9p: Bad value for 'wfdno' [ 1353.389550][T19224] pim6reg: entered allmulticast mode [ 1354.095933][ T6105] kernel read not supported for file /318/coredump_filter (pid: 6105 comm: kworker/0:11) [ 1354.107422][ T6463] kernel write not supported for file /318/coredump_filter (pid: 6463 comm: kworker/0:15) [ 1354.361956][T18085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.773694][T19262] netlink: 'syz.7.3749': attribute type 39 has an invalid length. [ 1356.250655][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1356.569245][T19284] hsr_slave_1 (unregistering): left promiscuous mode [ 1356.580180][ T5928] kernel read not supported for file /1043/coredump_filter (pid: 5928 comm: kworker/1:5) [ 1357.006235][T19300] netlink: 'syz.3.3763': attribute type 39 has an invalid length. [ 1357.017732][T19271] loop0: detected capacity change from 0 to 32768 [ 1357.181370][T19271] JBD2: Ignoring recovery information on journal [ 1357.449378][T19271] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1357.734643][T18763] ocfs2: Unmounting device (7,0) on (node local) [ 1358.584264][ T6105] kernel read not supported for file /28/coredump_filter (pid: 6105 comm: kworker/0:11) [ 1358.599039][ T5878] kernel write not supported for file /28/coredump_filter (pid: 5878 comm: kworker/0:3) [ 1359.567246][ T31] audit: type=1326 audit(1766155125.196:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1359.663262][ T31] audit: type=1326 audit(1766155125.196:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1359.754347][ T31] audit: type=1326 audit(1766155125.196:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1359.875982][ T31] audit: type=1326 audit(1766155125.196:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1359.908631][ T31] audit: type=1326 audit(1766155125.196:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1359.935984][ T31] audit: type=1326 audit(1766155125.196:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1359.966425][ T31] audit: type=1326 audit(1766155125.196:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1360.124125][ T31] audit: type=1326 audit(1766155125.196:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1360.523208][T19360] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3783'. [ 1360.808280][T19366] ref_ctr increment failed for inode: 0x6a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807344bd40 [ 1361.688878][T19404] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3802'. [ 1364.798063][T19456] bond0: entered promiscuous mode [ 1364.835181][T19456] bond_slave_0: entered promiscuous mode [ 1364.858161][T19456] bond_slave_1: entered promiscuous mode [ 1364.879071][T19456] batadv0: entered promiscuous mode [ 1364.891620][T19456] debugfs: 'hsr1' already exists in 'hsr' [ 1364.907617][T19456] Cannot create hsr debugfs directory [ 1364.918716][T19456] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1364.952433][T19456] bond0: left promiscuous mode [ 1364.957646][T19456] bond_slave_0: left promiscuous mode [ 1364.969842][T19456] bond_slave_1: left promiscuous mode [ 1365.009878][T19456] batadv0: left promiscuous mode [ 1365.373062][T19454] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.749447][T19454] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.076657][T19454] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.109426][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.329842][T19454] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.694909][ T3976] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.782968][ T66] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.830563][ T66] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.921075][ T66] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.042683][T19530] fuse: Bad value for 'fd' [ 1367.209975][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3851'. [ 1367.485937][T19537] loop3: detected capacity change from 0 to 512 [ 1367.519636][T19537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1367.544617][T19537] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1368.161996][T19537] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.3854: Allocating blocks 41-42 which overlap fs metadata [ 1368.256625][T19537] Quota error (device loop3): write_blk: dquota write failed [ 1368.277749][T19537] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1368.289003][T19537] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.3854: Allocating blocks 41-42 which overlap fs metadata [ 1368.324590][T19537] Quota error (device loop3): write_blk: dquota write failed [ 1368.347661][T19537] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1368.371426][T19537] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3854: Failed to acquire dquot type 1 [ 1368.405541][T19537] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1368.452715][T19537] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3854: corrupted inode contents [ 1368.488773][T19537] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.3854: mark_inode_dirty error [ 1368.507798][T19537] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3854: corrupted inode contents [ 1368.539747][T19537] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3854: mark_inode_dirty error [ 1368.583301][T19537] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3854: corrupted inode contents [ 1368.644552][T19537] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1368.683572][T19537] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3854: corrupted inode contents [ 1368.750364][T19537] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.3854: mark_inode_dirty error [ 1368.809857][T19537] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1368.856375][T19537] EXT4-fs (loop3): 1 truncate cleaned up [ 1368.869632][T19537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1369.115533][T19573] mkiss: ax0: crc mode is auto. [ 1369.155788][T17350] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.739221][T19596] bridge0: entered promiscuous mode [ 1369.760688][T19596] bridge0: port 1(macvtap1) entered blocking state [ 1369.774075][T19596] bridge0: port 1(macvtap1) entered disabled state [ 1369.791706][T19596] macvtap1: entered allmulticast mode [ 1369.801547][T19596] bridge0: entered allmulticast mode [ 1369.835829][T19596] macvtap1: left allmulticast mode [ 1369.841027][T19596] bridge0: left allmulticast mode [ 1369.888303][T19596] bridge0: left promiscuous mode [ 1370.835934][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3873'. [ 1370.870510][T19599] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3873'. [ 1372.090355][T19645] mkiss: ax0: crc mode is auto. [ 1373.517733][T19675] loop3: detected capacity change from 0 to 1024 [ 1373.624546][T19675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1374.152097][ T5963] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1374.354107][T17350] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.433200][T19693] syzkaller0: entered promiscuous mode [ 1374.455372][T19693] syzkaller0: entered allmulticast mode [ 1374.540232][T19693] tipc: Started in network mode [ 1374.557706][T19693] tipc: Node identity 62109bd2b5d2, cluster identity 4711 [ 1374.617735][ T5963] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1374.632052][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.640630][ T5963] usb 7-1: Product: syz [ 1374.645394][T19693] tipc: Enabled bearer , priority 0 [ 1374.671880][ T5963] usb 7-1: Manufacturer: syz [ 1374.681750][ T5963] usb 7-1: SerialNumber: syz [ 1374.746176][T19692] tipc: Resetting bearer [ 1375.853053][T19692] tipc: Disabling bearer [ 1375.951766][ T5963] rtl8150 7-1:1.0: couldn't reset the device [ 1375.967687][ T5963] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1376.018733][T19700] pim6reg: entered allmulticast mode [ 1376.100618][ T6006] tipc: Node number set to 3619855314 [ 1376.130980][T19704] mkiss: ax0: crc mode is auto. [ 1377.102708][ T5963] usb 7-1: USB disconnect, device number 11 [ 1377.343671][ T31] audit: type=1326 audit(1766155142.967:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1377.569977][ T31] audit: type=1326 audit(1766155143.047:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1377.773833][ T31] audit: type=1326 audit(1766155143.047:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1377.902992][ T31] audit: type=1326 audit(1766155143.047:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1378.001653][ T31] audit: type=1326 audit(1766155143.057:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1378.170967][T19767] syzkaller0: entered promiscuous mode [ 1378.201096][T19767] syzkaller0: entered allmulticast mode [ 1378.257800][T19763] tipc: Enabled bearer , priority 0 [ 1378.301834][ T31] audit: type=1326 audit(1766155143.057:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1378.324443][ T31] audit: type=1326 audit(1766155143.067:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1378.447797][ T31] audit: type=1326 audit(1766155143.067:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1378.975874][T19761] tipc: Resetting bearer [ 1378.982426][ T31] audit: type=1326 audit(1766155143.067:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1379.011604][ T31] audit: type=1326 audit(1766155143.067:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19747 comm="syz.0.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7578f749 code=0x7ffc0000 [ 1379.239675][T19761] tipc: Disabling bearer [ 1379.349667][T19771] pim6reg: entered allmulticast mode [ 1379.661027][T19785] mkiss: ax0: crc mode is auto. [ 1380.818780][T19812] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3944'. [ 1381.250841][T19822] syzkaller0: entered promiscuous mode [ 1381.285050][T19822] syzkaller0: entered allmulticast mode [ 1381.357897][T19822] tipc: Enabled bearer , priority 0 [ 1381.523538][T19830] pim6reg9: entered allmulticast mode [ 1382.142136][T19821] tipc: Resetting bearer [ 1382.296907][T19821] tipc: Disabling bearer [ 1382.715414][T19845] loop7: detected capacity change from 0 to 2048 [ 1382.777503][T19845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1382.873948][T19856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3961'. [ 1383.098778][ T6071] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.514008][T19845] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1383.549102][T19845] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1383.576666][T19845] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1383.576666][T19845] [ 1383.588768][T19845] EXT4-fs (loop7): Total free blocks count 0 [ 1383.596147][T19845] EXT4-fs (loop7): Free/Dirty block details [ 1383.603515][T19845] EXT4-fs (loop7): free_blocks=2415919104 [ 1383.609435][T19845] EXT4-fs (loop7): dirty_blocks=5808 [ 1383.616046][T19862] program syz.3.3966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1383.666252][T19845] EXT4-fs (loop7): Block reservation details [ 1383.716959][T19845] EXT4-fs (loop7): i_reserved_data_blocks=363 [ 1383.858920][T19871] loop0: detected capacity change from 0 to 512 [ 1383.927386][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1383.940163][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1383.953319][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1383.963693][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1383.989254][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1384.024006][ T6071] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.125789][T19880] netlink: 'syz.9.3972': attribute type 9 has an invalid length. [ 1384.158110][ T6320] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 1384.171256][T19880] netlink: 58351 bytes leftover after parsing attributes in process `syz.9.3972'. [ 1384.291647][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1384.291668][ T31] audit: type=1326 audit(1766155149.927:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19881 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1384.384202][ T6071] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.398359][ T31] audit: type=1326 audit(1766155149.947:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19881 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1384.413540][T19884] loop0: detected capacity change from 0 to 2048 [ 1384.484003][ T31] audit: type=1326 audit(1766155149.947:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19881 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f924a58df90 code=0x7ffc0000 [ 1384.585689][T19884] loop0: p1 < > p3 p4 [ 1384.591210][T19884] loop0: partition table partially beyond EOD, truncated [ 1384.604453][ T31] audit: type=1326 audit(1766155149.957:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19881 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1384.650458][ T31] audit: type=1326 audit(1766155149.957:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19881 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1384.676785][T19884] loop0: p3 start 458752 is beyond EOD, truncated [ 1384.678663][ T6071] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.718586][T19884] loop0: p4 start 268435456 is beyond EOD, truncated [ 1384.743309][ T31] audit: type=1326 audit(1766155149.977:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19881 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1384.841360][ T5915] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1384.864742][ T31] audit: type=1326 audit(1766155149.977:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19881 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1384.984217][ T31] audit: type=1326 audit(1766155149.977:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19881 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1385.053874][ T5915] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1385.081153][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.105352][ T5915] usb 6-1: Product: syz [ 1385.115841][ T5915] usb 6-1: Manufacturer: syz [ 1385.120484][ T5915] usb 6-1: SerialNumber: syz [ 1385.173915][T19906] loop7: detected capacity change from 0 to 512 [ 1385.199411][T19906] journal_path: Lookup failure for './file0' [ 1385.250984][T19906] EXT4-fs: error: could not find journal device path [ 1385.646426][T19916] loop3: detected capacity change from 0 to 2048 [ 1385.689996][T19916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1386.026202][ T5830] Bluetooth: hci2: command tx timeout [ 1386.370051][ T5915] rtl8150 6-1:1.0: couldn't reset the device [ 1386.382583][ T5915] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1386.441852][T19916] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1386.472260][T19916] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1386.486788][T19916] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1386.486788][T19916] [ 1386.497265][T19916] EXT4-fs (loop3): Total free blocks count 0 [ 1386.524168][T19916] EXT4-fs (loop3): Free/Dirty block details [ 1386.530437][T19916] EXT4-fs (loop3): free_blocks=2415919104 [ 1386.561169][T19916] EXT4-fs (loop3): dirty_blocks=2832 [ 1386.566702][T19916] EXT4-fs (loop3): Block reservation details [ 1386.590126][T19916] EXT4-fs (loop3): i_reserved_data_blocks=177 [ 1386.783567][ T137] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 766 with error 28 [ 1387.076336][ T6071] bond0 (unregistering): Released all slaves [ 1387.211360][T19933] netlink: 'syz.3.3988': attribute type 9 has an invalid length. [ 1387.219146][T19933] netlink: 58351 bytes leftover after parsing attributes in process `syz.3.3988'. [ 1387.236956][T19874] chnl_net:caif_netlink_parms(): no params data found [ 1387.589046][T19944] loop3: detected capacity change from 0 to 512 [ 1387.604932][T19944] journal_path: Lookup failure for './file0' [ 1387.612211][T19944] EXT4-fs: error: could not find journal device path [ 1387.971583][T19955] loop3: detected capacity change from 0 to 2048 [ 1388.092872][ T5830] Bluetooth: hci2: command tx timeout [ 1388.203305][T19955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1388.327595][T17350] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1388.391853][T19966] netlink: 'syz.7.4002': attribute type 9 has an invalid length. [ 1388.400182][T19966] netlink: 58351 bytes leftover after parsing attributes in process `syz.7.4002'. [ 1388.733080][T19968] bond0: (slave bond_slave_1): Releasing backup interface [ 1388.800121][T19874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.822488][T19874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.829968][T19874] bridge_slave_0: entered allmulticast mode [ 1388.902053][T19874] bridge_slave_0: entered promiscuous mode [ 1388.952712][ T6071] hsr_slave_0: left promiscuous mode [ 1388.973259][ T6071] hsr_slave_1: left promiscuous mode [ 1389.028683][ T6071] veth1_macvtap: left promiscuous mode [ 1389.042666][ T6071] veth0_macvtap: left promiscuous mode [ 1389.048501][ T6071] veth1_vlan: left promiscuous mode [ 1389.066861][ T6071] veth0_vlan: left promiscuous mode [ 1389.181506][T19983] loop3: detected capacity change from 0 to 512 [ 1389.188956][T19983] journal_path: Lookup failure for './file0' [ 1389.195643][T19983] EXT4-fs: error: could not find journal device path [ 1389.224891][ T6071] pim6reg9 (unregistering): left allmulticast mode [ 1390.171179][ T5830] Bluetooth: hci2: command tx timeout [ 1390.641024][T19874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.649586][T19874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.670284][T19874] bridge_slave_1: entered allmulticast mode [ 1390.679628][T19874] bridge_slave_1: entered promiscuous mode [ 1391.034876][T19999] netlink: 'syz.3.4015': attribute type 9 has an invalid length. [ 1391.043027][T19999] netlink: 58351 bytes leftover after parsing attributes in process `syz.3.4015'. [ 1391.794420][T19874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.822090][T19874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.052796][ T6105] usb 6-1: USB disconnect, device number 26 [ 1392.118218][T19874] team0: Port device team_slave_0 added [ 1392.146060][T19874] team0: Port device team_slave_1 added [ 1392.250894][ T5845] Bluetooth: hci2: command tx timeout [ 1392.317516][T19874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.370968][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.670043][T19874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.693049][T19874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.710724][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.753394][T19874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.808083][T20033] netlink: 'syz.5.4027': attribute type 9 has an invalid length. [ 1392.829123][T20033] netlink: 58351 bytes leftover after parsing attributes in process `syz.5.4027'. [ 1393.102124][T19874] hsr_slave_0: entered promiscuous mode [ 1393.109131][T19874] hsr_slave_1: entered promiscuous mode [ 1393.156980][T19874] debugfs: 'hsr0' already exists in 'hsr' [ 1393.172497][T19874] Cannot create hsr debugfs directory [ 1393.398281][T20049] bond0: (slave bond_slave_1): Releasing backup interface [ 1393.550874][ T5835] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1393.735538][ T5835] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1393.789046][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.821447][ T5835] usb 6-1: Product: syz [ 1393.825784][ T5835] usb 6-1: Manufacturer: syz [ 1393.830393][ T5835] usb 6-1: SerialNumber: syz [ 1393.853031][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 1394.087279][T20067] program syz.7.4038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1394.170921][T20071] loop3: detected capacity change from 0 to 128 [ 1394.688330][T20079] netlink: 'syz.9.4040': attribute type 9 has an invalid length. [ 1394.714399][T20079] netlink: 58351 bytes leftover after parsing attributes in process `syz.9.4040'. [ 1395.325064][ T5835] rtl8150 6-1:1.0: couldn't reset the device [ 1395.331970][ T5835] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1395.443381][T19874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.675380][ T5835] usb 6-1: USB disconnect, device number 27 [ 1395.764117][T19874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.767623][T20111] program syz.3.4050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1396.182230][T19874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.185686][T19874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.313061][T20129] netlink: 'syz.7.4054': attribute type 9 has an invalid length. [ 1397.329599][T20129] netlink: 58351 bytes leftover after parsing attributes in process `syz.7.4054'. [ 1397.845413][T20152] program syz.5.4062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1397.857410][T19874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1397.925108][T19874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1397.967145][T19874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1398.050258][T19874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1399.281337][T20180] netlink: 'syz.0.4071': attribute type 9 has an invalid length. [ 1399.289152][T20180] netlink: 58351 bytes leftover after parsing attributes in process `syz.0.4071'. [ 1399.319728][T19874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.454624][T19874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.491205][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.498535][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.552550][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.560344][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.186437][T20203] program syz.9.4079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1400.492937][T20214] bond0: (slave bond_slave_1): Releasing backup interface [ 1400.582657][T20218] netlink: 'syz.5.4085': attribute type 9 has an invalid length. [ 1400.607397][T20218] netlink: 58351 bytes leftover after parsing attributes in process `syz.5.4085'. [ 1400.638619][T19874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.685386][T20250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4097'. [ 1401.873804][T20250] bridge1: port 1(veth3) entered blocking state [ 1401.880726][T20250] bridge1: port 1(veth3) entered disabled state [ 1401.888908][T20250] veth3: entered allmulticast mode [ 1401.927556][T20250] veth3: entered promiscuous mode [ 1401.948800][T20252] bond0: (slave bond_slave_1): Releasing backup interface [ 1402.006205][T20253] bridge1: port 2(veth5) entered blocking state [ 1402.012929][T20253] bridge1: port 2(veth5) entered disabled state [ 1402.019850][T20253] veth5: entered allmulticast mode [ 1402.028229][T20253] veth5: entered promiscuous mode [ 1402.038844][T20255] netlink: 'syz.5.4100': attribute type 9 has an invalid length. [ 1402.058988][T20255] netlink: 58351 bytes leftover after parsing attributes in process `syz.5.4100'. [ 1402.149416][T20256] vlan2: entered allmulticast mode [ 1402.176181][T20256] veth0_to_bond: entered allmulticast mode [ 1402.183436][T20256] bridge1: port 3(vlan2) entered blocking state [ 1402.189816][T20256] bridge1: port 3(vlan2) entered disabled state [ 1402.240469][T20256] vlan2: entered promiscuous mode [ 1402.252071][T20256] veth0_to_bond: entered promiscuous mode [ 1402.462155][T19874] veth0_vlan: entered promiscuous mode [ 1402.511373][T19874] veth1_vlan: entered promiscuous mode [ 1402.588566][T20273] syzkaller0: entered promiscuous mode [ 1402.595777][T20273] syzkaller0: entered allmulticast mode [ 1402.692944][T19874] veth0_macvtap: entered promiscuous mode [ 1402.706466][T20282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1402.716124][T19874] veth1_macvtap: entered promiscuous mode [ 1402.784755][T19874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.832322][T19874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.873513][ T6156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.914158][ T6156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.925836][ T6006] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1402.953207][ T6156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.970614][ T6156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.098617][T20293] netlink: 'syz.0.4116': attribute type 9 has an invalid length. [ 1403.130014][T20293] netlink: 58351 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1403.144143][ T6006] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1403.171254][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.179401][ T6006] usb 10-1: Product: syz [ 1403.214787][ T6006] usb 10-1: Manufacturer: syz [ 1403.227176][ T6006] usb 10-1: SerialNumber: syz [ 1403.308149][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.358124][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.472010][T20301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4119'. [ 1403.654436][T20305] loop0: detected capacity change from 0 to 128 [ 1403.661214][ T6006] rtl8150 10-1:1.0: couldn't reset the device [ 1403.668214][ T6006] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 1403.703974][ T6006] usb 10-1: USB disconnect, device number 14 [ 1403.761900][T20305] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1403.803559][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.822235][T20308] bridge1: port 1(veth3) entered blocking state [ 1403.830694][T20305] FAT-fs (loop0): Filesystem has been set read-only [ 1403.837779][T20305] syz.0.4121: attempt to access beyond end of device [ 1403.837779][T20305] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 1403.855293][T20308] bridge1: port 1(veth3) entered disabled state [ 1403.870266][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.880404][T20305] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1403.880436][T20308] veth3: entered allmulticast mode [ 1403.888709][T20305] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1403.922188][T20305] syz.0.4121: attempt to access beyond end of device [ 1403.922188][T20305] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 1403.924126][T20308] veth3: entered promiscuous mode [ 1403.944786][ T31] audit: type=1800 audit(1766155169.568:848): pid=20305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4121" name="file2" dev="loop0" ino=1048792 res=0 errno=0 [ 1404.056636][T20301] bridge1: port 2(veth5) entered blocking state [ 1404.075827][T20301] bridge1: port 2(veth5) entered disabled state [ 1404.093047][T20301] veth5: entered allmulticast mode [ 1404.115663][T20301] veth5: entered promiscuous mode [ 1404.365093][T20317] syzkaller0: entered promiscuous mode [ 1404.401314][T20317] syzkaller0: entered allmulticast mode [ 1405.037974][T20333] netlink: 'syz.0.4129': attribute type 9 has an invalid length. [ 1405.060433][T20333] netlink: 58351 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1405.083888][T20331] tipc: Enabled bearer , priority 0 [ 1405.100275][T20330] syzkaller0: entered promiscuous mode [ 1405.105810][T20330] syzkaller0: entered allmulticast mode [ 1405.194303][T20329] tipc: Resetting bearer [ 1405.315480][T20329] tipc: Disabling bearer [ 1405.739633][T20344] tipc: Enabling of bearer rejected, failed to enable media [ 1406.254578][T20359] fuse: Unknown parameter 'grou00000000000000000000' [ 1406.641858][T20367] IPv6: Can't replace route, no match found [ 1406.812960][T20375] syzkaller0: entered promiscuous mode [ 1406.834056][T20375] syzkaller0: entered allmulticast mode [ 1406.975104][T20379] tipc: Enabled bearer , priority 0 [ 1407.009367][T20374] tipc: Resetting bearer [ 1407.071285][T20371] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.142921][T20374] tipc: Disabling bearer [ 1407.211400][T20383] loop4: detected capacity change from 0 to 1024 [ 1407.285195][T20383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1407.485367][T19874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.598541][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.644570][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.865138][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.897434][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.053629][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.080341][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.218077][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1408.240751][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1408.257345][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1408.267439][T20398] tipc: Enabling of bearer rejected, failed to enable media [ 1408.279383][T20395] syzkaller0: entered promiscuous mode [ 1408.285539][T20395] syzkaller0: entered allmulticast mode [ 1408.292906][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1408.308427][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1408.403765][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.430292][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.743638][T20412] 9p: Bad value for 'wfdno' [ 1408.904768][T12262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.147176][T20414] syzkaller0: entered promiscuous mode [ 1409.167894][T20414] syzkaller0: entered allmulticast mode [ 1409.289970][T20414] tipc: Started in network mode [ 1409.300302][T20414] tipc: Node identity 4ecdcee43321, cluster identity 4711 [ 1409.319185][T20414] tipc: Enabled bearer , priority 0 [ 1409.490234][T20413] tipc: Resetting bearer [ 1409.626726][T20413] tipc: Disabling bearer [ 1409.826195][ T12] bridge_slave_1: left allmulticast mode [ 1409.858165][ T12] bridge_slave_1: left promiscuous mode [ 1409.872654][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1409.880210][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.897786][ T12] bridge_slave_0: left allmulticast mode [ 1409.904218][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1409.909905][ T12] bridge_slave_0: left promiscuous mode [ 1409.917677][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1409.926620][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1409.937392][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1409.938296][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.411358][ T5845] Bluetooth: hci4: command tx timeout [ 1410.873070][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1410.884940][ T12] bond0 (unregistering): Released all slaves [ 1410.916593][T20428] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1411.024592][ T12] tipc: Left network mode [ 1411.273883][T20440] 9p: Bad value for 'wfdno' [ 1411.447891][T20400] chnl_net:caif_netlink_parms(): no params data found [ 1411.617685][T20449] bridge0: entered promiscuous mode [ 1411.669984][T20449] macsec1: entered promiscuous mode [ 1411.698281][T20449] bridge0: port 3(macsec1) entered blocking state [ 1411.720246][T20449] bridge0: port 3(macsec1) entered disabled state [ 1411.727094][T20449] macsec1: entered allmulticast mode [ 1411.743375][T20449] bridge0: entered allmulticast mode [ 1411.801578][T20449] macsec1: left allmulticast mode [ 1411.813311][T20449] bridge0: left allmulticast mode [ 1411.844761][T20449] bridge0: left promiscuous mode [ 1412.009757][ T5845] Bluetooth: hci5: command tx timeout [ 1412.500377][ T5845] Bluetooth: hci4: command tx timeout [ 1412.541592][T20458] syzkaller0: entered promiscuous mode [ 1412.550306][T20458] syzkaller0: entered allmulticast mode [ 1412.604412][T20468] syzkaller0: entered promiscuous mode [ 1412.631948][T20468] syzkaller0: entered allmulticast mode [ 1412.860680][T20471] tipc: Enabled bearer , priority 0 [ 1412.962293][T20467] tipc: Resetting bearer [ 1413.040740][T20467] tipc: Disabling bearer [ 1413.067505][T20400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.089718][T20400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.110027][T20400] bridge_slave_0: entered allmulticast mode [ 1413.136642][T20400] bridge_slave_0: entered promiscuous mode [ 1413.170956][T20400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.194347][T20400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.208470][T20400] bridge_slave_1: entered allmulticast mode [ 1413.228315][T20400] bridge_slave_1: entered promiscuous mode [ 1413.259558][ T12] hsr_slave_0: left promiscuous mode [ 1413.287234][ T12] hsr_slave_1: left promiscuous mode [ 1413.301608][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.317766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.333988][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.341825][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.377943][ T12] veth1_macvtap: left promiscuous mode [ 1413.384016][ T12] veth0_macvtap: left promiscuous mode [ 1413.390195][ T12] veth1_vlan: left promiscuous mode [ 1413.395598][ T12] veth0_vlan: left promiscuous mode [ 1413.743471][ T12] pim6reg9 (unregistering): left allmulticast mode [ 1414.094292][ T5845] Bluetooth: hci5: command tx timeout [ 1414.230488][T20491] 9p: Bad value for 'wfdno' [ 1414.508649][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4189'. [ 1414.582847][ T5845] Bluetooth: hci4: command tx timeout [ 1415.526282][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1415.730411][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1416.171459][ T5845] Bluetooth: hci5: command tx timeout [ 1416.652096][ T5845] Bluetooth: hci4: command tx timeout [ 1417.042090][T20495] hsr_slave_1 (unregistering): left promiscuous mode [ 1417.074512][T20400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.121038][T20400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.310268][T20400] team0: Port device team_slave_0 added [ 1417.499661][T20400] team0: Port device team_slave_1 added [ 1417.527155][T20518] syzkaller0: entered promiscuous mode [ 1417.532238][ T31] audit: type=1326 audit(1766155183.169:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1417.533432][T20518] syzkaller0: entered allmulticast mode [ 1417.577826][ T31] audit: type=1326 audit(1766155183.189:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1417.591252][T20524] netlink: 'syz.3.4196': attribute type 1 has an invalid length. [ 1417.602300][ T31] audit: type=1326 audit(1766155183.189:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1417.633014][T20516] tipc: Enabled bearer , priority 0 [ 1417.696841][ T31] audit: type=1326 audit(1766155183.189:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1417.720474][T20514] tipc: Resetting bearer [ 1417.794650][ T31] audit: type=1326 audit(1766155183.189:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1417.859305][ T31] audit: type=1326 audit(1766155183.189:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1417.890594][T20514] tipc: Disabling bearer [ 1417.915937][ T31] audit: type=1326 audit(1766155183.189:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1417.982699][ T31] audit: type=1326 audit(1766155183.189:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1418.025307][T20400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.039249][T20400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.066929][ T31] audit: type=1326 audit(1766155183.189:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1418.093223][T20400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.103921][ T31] audit: type=1326 audit(1766155183.189:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1418.117556][T20531] 9p: Bad value for 'wfdno' [ 1418.135961][T20400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.144483][T20400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.197941][T20400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.249320][ T5845] Bluetooth: hci5: command tx timeout [ 1418.268582][T20427] chnl_net:caif_netlink_parms(): no params data found [ 1418.496643][T20524] loop3: detected capacity change from 0 to 32768 [ 1418.549039][T20400] hsr_slave_0: entered promiscuous mode [ 1418.573392][T20400] hsr_slave_1: entered promiscuous mode [ 1418.689252][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.023741][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4203'. [ 1419.170972][T20545] hsr_slave_1 (unregistering): left promiscuous mode [ 1419.220043][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.436513][T20547] syzkaller0: entered promiscuous mode [ 1419.453865][T20547] syzkaller0: entered allmulticast mode [ 1419.491874][T20556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1419.601411][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.656070][T20563] 9p: Bad value for 'wfdno' [ 1419.698221][T20427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.736016][T20427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.759567][T20427] bridge_slave_0: entered allmulticast mode [ 1419.773526][T20427] bridge_slave_0: entered promiscuous mode [ 1419.903145][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.966829][T20427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.977201][T20567] mkiss: ax0: crc mode is auto. [ 1420.004786][T20427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.032981][T20427] bridge_slave_1: entered allmulticast mode [ 1420.062421][T20427] bridge_slave_1: entered promiscuous mode [ 1420.255724][T20564] loop0: detected capacity change from 0 to 32768 [ 1420.293715][T20427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.307630][T20427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.312099][T20564] Dev loop0: unable to read RDB block 8 [ 1420.323272][T20564] loop0: unable to read partition table [ 1420.334163][T20564] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1420.487937][T20427] team0: Port device team_slave_0 added [ 1420.705609][T20427] team0: Port device team_slave_1 added [ 1420.796671][ T6015] IPVS: starting estimator thread 0... [ 1420.804741][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4215'. [ 1420.847215][ T12] team0: left allmulticast mode [ 1420.852965][ T12] team_slave_0: left allmulticast mode [ 1420.861286][ T12] team_slave_1: left allmulticast mode [ 1420.867378][ T12] team0: left promiscuous mode [ 1420.877514][ T12] team_slave_0: left promiscuous mode [ 1420.883967][ T12] team_slave_1: left promiscuous mode [ 1420.890408][ T12] bridge0: port 3(team0) entered disabled state [ 1420.909459][T20589] IPVS: using max 24 ests per chain, 57600 per kthread [ 1420.922875][ T12] bridge_slave_1: left allmulticast mode [ 1420.928713][ T12] bridge_slave_1: left promiscuous mode [ 1420.939103][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.963572][ T12] bridge_slave_0: left allmulticast mode [ 1420.969666][ T12] bridge_slave_0: left promiscuous mode [ 1420.975559][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.316016][ T12] gretap0 (unregistering): left promiscuous mode [ 1421.586658][T20605] 9p: Bad value for 'wfdno' [ 1421.669103][ T12] bond0 (unregistering): left promiscuous mode [ 1421.675296][ T12] bond_slave_0: left promiscuous mode [ 1421.681392][ T12] bond_slave_1: left promiscuous mode [ 1421.693378][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.705680][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.716392][ T12] bond0 (unregistering): Released all slaves [ 1421.910499][ T12] bond1 (unregistering): Released all slaves [ 1421.990426][T20588] hsr_slave_1 (unregistering): left promiscuous mode [ 1422.016082][T20427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.028706][T20427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.056832][T20427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.164550][ T12] tipc: Left network mode [ 1422.165402][T20427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.185649][T20427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.277463][T20427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.847710][T20623] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4227'. [ 1422.874408][T20427] hsr_slave_0: entered promiscuous mode [ 1422.882344][T20427] hsr_slave_1: entered promiscuous mode [ 1422.888772][T20427] debugfs: 'hsr0' already exists in 'hsr' [ 1422.897101][T20427] Cannot create hsr debugfs directory [ 1423.130543][T20639] 9p: Bad value for 'wfdno' [ 1423.218861][T20635] mkiss: ax0: crc mode is auto. [ 1423.326116][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4233'. [ 1423.363250][ T12] hsr_slave_0: left promiscuous mode [ 1423.373721][ T12] hsr_slave_1: left promiscuous mode [ 1423.383322][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.391011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.400291][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.410156][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.425866][ T12] veth1_macvtap: left promiscuous mode [ 1423.469170][ T12] veth0_macvtap: left promiscuous mode [ 1423.648581][ T12] pim6reg (unregistering): left allmulticast mode [ 1424.159927][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1424.231594][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1425.025536][T20400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1425.121011][T20400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1425.197465][T20400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1425.253053][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4240'. [ 1425.302626][T20400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1425.522747][T20671] 9p: Bad value for 'wfdno' [ 1425.571745][T20667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4242'. [ 1425.595061][T20674] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.610989][T20674] binder: 20673:20674 ioctl 4018620d 200000004a80 returned -16 [ 1425.631256][T20659] syz.7.4240 (20659) used greatest stack depth: 16696 bytes left [ 1425.807530][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4246'. [ 1425.986074][T20400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.079814][T20690] loop0: detected capacity change from 0 to 512 [ 1426.087388][T20400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.100683][T20690] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1426.134237][T20690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.4250: corrupted inode contents [ 1426.157296][T20427] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1426.204806][T20690] EXT4-fs (loop0): Remounting filesystem read-only [ 1426.225048][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.232280][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.259084][T20690] EXT4-fs (loop0): 1 orphan inode deleted [ 1426.262483][T20427] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1426.267112][T20690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1426.302199][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.313591][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.331523][T18763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.347756][T20427] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1426.355371][T20427] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1426.487649][T20704] 9p: Bad value for 'wfdno' [ 1426.507877][T20702] loop7: detected capacity change from 0 to 4096 [ 1426.559758][T20702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1426.593933][T20702] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1426.644345][T20718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1427.015047][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4262'. [ 1427.204569][ T31] kauditd_printk_skb: 221 callbacks suppressed [ 1427.204592][ T31] audit: type=1326 audit(1766155192.840:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.294413][ T31] audit: type=1326 audit(1766155192.880:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.333034][T20735] netlink: 'syz.3.4263': attribute type 1 has an invalid length. [ 1427.363536][T20427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.428886][ T31] audit: type=1326 audit(1766155192.880:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.435355][T20427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.510388][ T31] audit: type=1326 audit(1766155192.880:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.555209][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.565271][ T31] audit: type=1326 audit(1766155192.880:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.581288][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.595619][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.634463][T20741] 9p: Bad value for 'source' [ 1427.648305][ T31] audit: type=1326 audit(1766155192.880:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.677983][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.685249][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.690153][T17358] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.745596][ T31] audit: type=1326 audit(1766155192.880:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.802491][ T31] audit: type=1326 audit(1766155192.880:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.828394][ T31] audit: type=1326 audit(1766155192.880:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1427.914718][T20400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.926957][ T31] audit: type=1326 audit(1766155192.880:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.3.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924a58f749 code=0x7ffc0000 [ 1428.038082][T20746] binder: 20744:20746 ioctl c0306201 0 returned -14 [ 1428.128334][T20400] veth0_vlan: entered promiscuous mode [ 1428.205923][T20400] veth1_vlan: entered promiscuous mode [ 1428.338335][T20400] veth0_macvtap: entered promiscuous mode [ 1428.376173][T20400] veth1_macvtap: entered promiscuous mode [ 1428.473333][T20400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.528577][T20400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.672278][ T6156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.690001][ T6156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.699187][ T6156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.708052][ T6156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.722671][T20761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4273'. [ 1428.869091][T20427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.124735][ T6320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.175158][ T6320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.178913][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4276'. [ 1429.354038][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.398723][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.757589][T20781] 9p: Bad value for 'source' [ 1429.879704][T20784] fuse: Unknown parameter 'group_i00000000000000000000' [ 1429.997307][T20427] veth0_vlan: entered promiscuous mode [ 1430.017174][T20427] veth1_vlan: entered promiscuous mode [ 1430.104653][T20427] veth0_macvtap: entered promiscuous mode [ 1430.117829][T20427] veth1_macvtap: entered promiscuous mode [ 1430.148342][T20427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.183019][T20427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.234603][T15596] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.253182][T15596] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.290937][T15596] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.302480][T15596] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.538111][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.559676][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.590333][T20798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4283'. [ 1430.643153][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.676783][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.844026][T20802] loop0: detected capacity change from 0 to 512 [ 1430.865170][T20808] 9p: Bad value for 'source' [ 1430.910873][T20802] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.4286: error while reading EA inode 32 err=-116 [ 1431.004609][T20802] EXT4-fs (loop0): Remounting filesystem read-only [ 1431.043542][T20802] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 1431.060231][T20802] EXT4-fs (loop0): 1 orphan inode deleted [ 1431.068235][T20802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.306153][T20817] fuse: Unknown parameter 'group_i00000000000000000000' [ 1432.247572][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1432.402592][T20837] tipc: New replicast peer: 255.255.255.83 [ 1432.438947][T20837] tipc: Enabled bearer , priority 10 [ 1433.161158][T18763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.327513][T20881] fuse: Bad value for 'fd' [ 1433.498225][T20850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1433.508241][T20850] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1433.556262][T20850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1433.563377][T20850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1433.567036][ T6364] tipc: Node number set to 2112671460 [ 1433.604208][T20850] ------------[ cut here ]------------ [ 1433.610516][T20850] refcount_t: underflow; use-after-free. [ 1433.616326][T20850] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#0: syz.3.4306/20850 [ 1433.626539][T20850] Modules linked in: [ 1433.631405][T20850] CPU: 0 UID: 0 PID: 20850 Comm: syz.3.4306 Tainted: G L syzkaller #0 PREEMPT(full) [ 1433.643783][T20850] Tainted: [L]=SOFTLOCKUP [ 1433.648227][T20850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1433.659919][T20850] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 1433.666054][T20850] Code: b4 68 fd 0a 67 48 0f b9 3a eb 4a e8 88 a0 32 fd 48 8d 3d b1 68 fd 0a 67 48 0f b9 3a eb 37 e8 75 a0 32 fd 48 8d 3d ae 68 fd 0a <67> 48 0f b9 3a eb 24 e8 62 a0 32 fd 48 8d 3d ab 68 fd 0a 67 48 0f [ 1433.685910][T20850] RSP: 0018:ffffc90004977078 EFLAGS: 00010287 [ 1433.692407][T20850] RAX: ffffffff848f11db RBX: 0000000000000003 RCX: 0000000000080000 [ 1433.700657][T20850] RDX: ffffc9000f459000 RSI: 00000000000114ed RDI: ffffffff8f8c7a90 [ 1433.708733][T20850] RBP: 0000000000000000 R08: ffff888029eadb80 R09: 0000000000000005 [ 1433.716828][T20850] R10: 0000000000000004 R11: 0000000000000002 R12: ffff8880525f9400 [ 1433.724932][T20850] R13: ffff888053a58060 R14: ffff888053a58078 R15: dffffc0000000000 [ 1433.733123][T20850] FS: 00007f924b47b6c0(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 1433.742351][T20850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1433.750057][T20850] CR2: 000000110c2edd50 CR3: 00000000875db000 CR4: 0000000000350ef0 [ 1433.758068][T20850] Call Trace: [ 1433.762345][T20850] [ 1433.765303][T20850] klist_dec_and_del+0x3c7/0x3d0 [ 1433.770682][T20850] klist_remove+0x1bd/0x340 [ 1433.775233][T20850] ? __pfx_klist_children_put+0x10/0x10 [ 1433.781749][T20850] ? __pfx_klist_remove+0x10/0x10 [ 1433.787651][T20850] ? kobject_move+0x5a6/0x6e0 [ 1433.792479][T20850] ? __pfx_kobject_move+0x10/0x10 [ 1433.797584][T20850] ? do_raw_spin_unlock+0x122/0x240 [ 1433.802926][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1433.808760][T20850] ? get_device_parent+0x366/0x3a0 [ 1433.813906][T20850] device_move+0x193/0x730 [ 1433.818443][T20850] hci_conn_del_sysfs+0xb8/0x1a0 [ 1433.823561][T20850] hci_conn_del+0xc36/0x1240 [ 1433.828495][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1433.834151][T20850] ? hci_abort_conn_sync+0x24e/0xe30 [ 1433.839726][T20850] hci_abort_conn_sync+0x658/0xe30 [ 1433.844870][T20850] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1433.852626][T20850] ? hci_disconnect_all_sync+0x2e/0x350 [ 1433.858218][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1433.865862][T20850] ? hci_disconnect_all_sync+0x2e/0x350 [ 1433.871631][T20850] ? hci_disconnect_all_sync+0x2e/0x350 [ 1433.877289][T20850] hci_disconnect_all_sync+0x1b5/0x350 [ 1433.882861][T20850] hci_suspend_sync+0x3fc/0xc90 [ 1433.887751][T20850] ? __pfx___mutex_lock+0x10/0x10 [ 1433.892907][T20850] ? enable_work+0x21a/0x2b0 [ 1433.898099][T20850] ? __pfx_hci_suspend_sync+0x10/0x10 [ 1433.904088][T20850] ? mgmt_pending_find+0x152/0x170 [ 1433.909277][T20850] ? __cancel_work_sync+0x5c/0x110 [ 1433.914425][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1433.920260][T20850] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 1433.925928][T20850] hci_suspend_dev+0x28d/0x530 [ 1433.932941][T20850] ? __pfx_hci_suspend_dev+0x10/0x10 [ 1433.939488][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1433.945161][T20850] hci_suspend_notifier+0xf2/0x2f0 [ 1433.951610][T20850] notifier_call_chain+0x19d/0x3a0 [ 1433.956796][T20850] blocking_notifier_call_chain_robust+0x85/0x100 [ 1433.964489][T20850] pm_notifier_call_chain_robust+0x2c/0x60 [ 1433.970627][T20850] snapshot_open+0x19c/0x280 [ 1433.975238][T20850] ? __pfx_snapshot_open+0x10/0x10 [ 1433.980465][T20850] misc_open+0x2d5/0x350 [ 1433.984907][T20850] chrdev_open+0x4cc/0x5e0 [ 1433.989536][T20850] ? __pfx_chrdev_open+0x10/0x10 [ 1433.994503][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.000264][T20850] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1434.006753][T20850] ? __pfx_chrdev_open+0x10/0x10 [ 1434.012578][T20850] do_dentry_open+0x7ce/0x1420 [ 1434.017486][T20850] vfs_open+0x3b/0x340 [ 1434.022171][T20850] ? path_openat+0x33f3/0x3dd0 [ 1434.027031][T20850] path_openat+0x340e/0x3dd0 [ 1434.031682][T20850] ? __pfx_stack_trace_save+0x10/0x10 [ 1434.037075][T20850] ? stack_depot_save_flags+0x40/0x850 [ 1434.042700][T20850] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1434.048460][T20850] ? getname_flags+0xb8/0x540 [ 1434.054597][T20850] ? __pfx_path_openat+0x10/0x10 [ 1434.060986][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.066724][T20850] ? __lock_acquire+0x6b6/0x2cf0 [ 1434.071815][T20850] do_filp_open+0x1fa/0x410 [ 1434.076393][T20850] ? __pfx_do_filp_open+0x10/0x10 [ 1434.081614][T20850] ? _raw_spin_unlock+0x28/0x50 [ 1434.086504][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.093162][T20850] ? alloc_fd+0x64c/0x6c0 [ 1434.097740][T20850] do_sys_openat2+0x121/0x200 [ 1434.103010][T20850] ? __pfx_do_sys_openat2+0x10/0x10 [ 1434.108563][T20850] ? exc_page_fault+0x82/0x100 [ 1434.113403][T20850] __x64_sys_openat+0x138/0x170 [ 1434.118399][T20850] do_syscall_64+0xfa/0xf80 [ 1434.122946][T20850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.129176][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.134908][T20850] ? exc_page_fault+0xab/0x100 [ 1434.139751][T20850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.145664][T20850] RIP: 0033:0x7f924a58f749 [ 1434.150189][T20850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.170992][T20850] RSP: 002b:00007f924b47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1434.180634][T20850] RAX: ffffffffffffffda RBX: 00007f924a7e5fa0 RCX: 00007f924a58f749 [ 1434.188811][T20850] RDX: 0000000000040080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1434.196794][T20850] RBP: 00007f924a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1434.204894][T20850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1434.212996][T20850] R13: 00007f924a7e6038 R14: 00007f924a7e5fa0 R15: 00007ffc572e66d8 [ 1434.221100][T20850] [ 1434.224132][T20850] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1434.231414][T20850] CPU: 0 UID: 0 PID: 20850 Comm: syz.3.4306 Tainted: G L syzkaller #0 PREEMPT(full) [ 1434.242538][T20850] Tainted: [L]=SOFTLOCKUP [ 1434.246953][T20850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1434.257025][T20850] Call Trace: [ 1434.260320][T20850] [ 1434.263348][T20850] dump_stack_lvl+0x99/0x250 [ 1434.267948][T20850] ? __asan_memcpy+0x40/0x70 [ 1434.272640][T20850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1434.277842][T20850] ? __pfx__printk+0x10/0x10 [ 1434.282456][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.288102][T20850] vpanic+0x237/0x6d0 [ 1434.292100][T20850] ? __pfx_vpanic+0x10/0x10 [ 1434.296607][T20850] ? is_bpf_text_address+0x292/0x2b0 [ 1434.301910][T20850] ? is_bpf_text_address+0x26/0x2b0 [ 1434.307160][T20850] panic+0xb9/0xc0 [ 1434.310915][T20850] ? __pfx_panic+0x10/0x10 [ 1434.315609][T20850] __warn+0x317/0x4b0 [ 1434.319613][T20850] ? refcount_warn_saturate+0xb2/0x110 [ 1434.325121][T20850] ? refcount_warn_saturate+0xb2/0x110 [ 1434.330594][T20850] __report_bug+0x288/0x500 [ 1434.335109][T20850] ? __pfx_stack_trace_save+0x10/0x10 [ 1434.340661][T20850] ? refcount_warn_saturate+0xb2/0x110 [ 1434.346145][T20850] ? __pfx___report_bug+0x10/0x10 [ 1434.351195][T20850] ? irqentry_exit+0x5dd/0x660 [ 1434.355968][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.362395][T20850] report_bug_entry+0x19a/0x290 [ 1434.367261][T20850] ? refcount_warn_saturate+0xb2/0x110 [ 1434.372725][T20850] ? refcount_warn_saturate+0xb7/0x110 [ 1434.378194][T20850] handle_bug+0xca/0x200 [ 1434.382453][T20850] exc_invalid_op+0x1a/0x50 [ 1434.386973][T20850] asm_exc_invalid_op+0x1a/0x20 [ 1434.392048][T20850] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 1434.398247][T20850] Code: b4 68 fd 0a 67 48 0f b9 3a eb 4a e8 88 a0 32 fd 48 8d 3d b1 68 fd 0a 67 48 0f b9 3a eb 37 e8 75 a0 32 fd 48 8d 3d ae 68 fd 0a <67> 48 0f b9 3a eb 24 e8 62 a0 32 fd 48 8d 3d ab 68 fd 0a 67 48 0f [ 1434.418223][T20850] RSP: 0018:ffffc90004977078 EFLAGS: 00010287 [ 1434.424308][T20850] RAX: ffffffff848f11db RBX: 0000000000000003 RCX: 0000000000080000 [ 1434.432288][T20850] RDX: ffffc9000f459000 RSI: 00000000000114ed RDI: ffffffff8f8c7a90 [ 1434.440274][T20850] RBP: 0000000000000000 R08: ffff888029eadb80 R09: 0000000000000005 [ 1434.448368][T20850] R10: 0000000000000004 R11: 0000000000000002 R12: ffff8880525f9400 [ 1434.456881][T20850] R13: ffff888053a58060 R14: ffff888053a58078 R15: dffffc0000000000 [ 1434.465099][T20850] ? refcount_warn_saturate+0xab/0x110 [ 1434.470595][T20850] ? refcount_warn_saturate+0xab/0x110 [ 1434.476097][T20850] klist_dec_and_del+0x3c7/0x3d0 [ 1434.481146][T20850] klist_remove+0x1bd/0x340 [ 1434.485661][T20850] ? __pfx_klist_children_put+0x10/0x10 [ 1434.491327][T20850] ? __pfx_klist_remove+0x10/0x10 [ 1434.496469][T20850] ? kobject_move+0x5a6/0x6e0 [ 1434.501157][T20850] ? __pfx_kobject_move+0x10/0x10 [ 1434.506183][T20850] ? do_raw_spin_unlock+0x122/0x240 [ 1434.511480][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.517119][T20850] ? get_device_parent+0x366/0x3a0 [ 1434.522247][T20850] device_move+0x193/0x730 [ 1434.526672][T20850] hci_conn_del_sysfs+0xb8/0x1a0 [ 1434.531614][T20850] hci_conn_del+0xc36/0x1240 [ 1434.536212][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.541851][T20850] ? hci_abort_conn_sync+0x24e/0xe30 [ 1434.547233][T20850] hci_abort_conn_sync+0x658/0xe30 [ 1434.552365][T20850] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1434.558030][T20850] ? hci_disconnect_all_sync+0x2e/0x350 [ 1434.563633][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.569287][T20850] ? hci_disconnect_all_sync+0x2e/0x350 [ 1434.574851][T20850] ? hci_disconnect_all_sync+0x2e/0x350 [ 1434.580410][T20850] hci_disconnect_all_sync+0x1b5/0x350 [ 1434.585899][T20850] hci_suspend_sync+0x3fc/0xc90 [ 1434.590877][T20850] ? __pfx___mutex_lock+0x10/0x10 [ 1434.595930][T20850] ? enable_work+0x21a/0x2b0 [ 1434.600902][T20850] ? __pfx_hci_suspend_sync+0x10/0x10 [ 1434.606315][T20850] ? mgmt_pending_find+0x152/0x170 [ 1434.611529][T20850] ? __cancel_work_sync+0x5c/0x110 [ 1434.616948][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.622684][T20850] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 1434.628324][T20850] hci_suspend_dev+0x28d/0x530 [ 1434.633111][T20850] ? __pfx_hci_suspend_dev+0x10/0x10 [ 1434.638420][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.644120][T20850] hci_suspend_notifier+0xf2/0x2f0 [ 1434.649254][T20850] notifier_call_chain+0x19d/0x3a0 [ 1434.654383][T20850] blocking_notifier_call_chain_robust+0x85/0x100 [ 1434.660813][T20850] pm_notifier_call_chain_robust+0x2c/0x60 [ 1434.666720][T20850] snapshot_open+0x19c/0x280 [ 1434.671326][T20850] ? __pfx_snapshot_open+0x10/0x10 [ 1434.676541][T20850] misc_open+0x2d5/0x350 [ 1434.680803][T20850] chrdev_open+0x4cc/0x5e0 [ 1434.685232][T20850] ? __pfx_chrdev_open+0x10/0x10 [ 1434.690180][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.695820][T20850] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1434.702185][T20850] ? __pfx_chrdev_open+0x10/0x10 [ 1434.707233][T20850] do_dentry_open+0x7ce/0x1420 [ 1434.712037][T20850] vfs_open+0x3b/0x340 [ 1434.716123][T20850] ? path_openat+0x33f3/0x3dd0 [ 1434.720888][T20850] path_openat+0x340e/0x3dd0 [ 1434.725488][T20850] ? __pfx_stack_trace_save+0x10/0x10 [ 1434.730877][T20850] ? stack_depot_save_flags+0x40/0x850 [ 1434.736367][T20850] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1434.742158][T20850] ? getname_flags+0xb8/0x540 [ 1434.746849][T20850] ? __pfx_path_openat+0x10/0x10 [ 1434.751796][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.757444][T20850] ? __lock_acquire+0x6b6/0x2cf0 [ 1434.762406][T20850] do_filp_open+0x1fa/0x410 [ 1434.767170][T20850] ? __pfx_do_filp_open+0x10/0x10 [ 1434.772236][T20850] ? _raw_spin_unlock+0x28/0x50 [ 1434.777097][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.782732][T20850] ? alloc_fd+0x64c/0x6c0 [ 1434.787202][T20850] do_sys_openat2+0x121/0x200 [ 1434.791907][T20850] ? __pfx_do_sys_openat2+0x10/0x10 [ 1434.797128][T20850] ? exc_page_fault+0x82/0x100 [ 1434.801906][T20850] __x64_sys_openat+0x138/0x170 [ 1434.806766][T20850] do_syscall_64+0xfa/0xf80 [ 1434.811270][T20850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.817329][T20850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1434.822959][T20850] ? exc_page_fault+0xab/0x100 [ 1434.827723][T20850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.833611][T20850] RIP: 0033:0x7f924a58f749 [ 1434.838027][T20850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.858084][T20850] RSP: 002b:00007f924b47b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1434.866953][T20850] RAX: ffffffffffffffda RBX: 00007f924a7e5fa0 RCX: 00007f924a58f749 [ 1434.874928][T20850] RDX: 0000000000040080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1434.882945][T20850] RBP: 00007f924a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1434.891053][T20850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1434.899129][T20850] R13: 00007f924a7e6038 R14: 00007f924a7e5fa0 R15: 00007ffc572e66d8 [ 1434.907220][T20850] [ 1434.910918][T20850] Kernel Offset: disabled [ 1434.915770][T20850] Rebooting in 86400 seconds..