last executing test programs: 57.042065197s ago: executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4a7a5ac44bc48337607985e55fbfbcc246567c44de23b7fcb6738e038408387a52", 0x21}, {&(0x7f0000000300)="41b527cc49159a41ab335f3c5ac0f90700000011224a76773da22896a72a601c810000fc7d531cf7f7ac1cb841ff00000100000001830725708695ee8f50df524666bddd0e1c39b52ee31838c15736f93727094edbdd36f4b4000000000d3b4d68c5bd1a21ee1f445468076fb1301e0fa4ae", 0x72}, {&(0x7f0000000200)="71d5ff0c3e", 0x5}], 0x3, &(0x7f00000015c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) 56.646487693s ago: executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.353982545s ago: executing program 4: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 55.964724154s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000240)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000280), 0x1004) r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x4000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x8, 0x13}]}, 0x24}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000700)='GPL\x00'}, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x7f, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0xffffffffffffff47, 0x10, 0x8, 0x0, 0x0}}, 0x64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r8}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) 21.423710145s ago: executing program 1: socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c221}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}}, 0x0) 17.352472128s ago: executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) write$cgroup_subtree(r4, &(0x7f00000006c0)={[{0x2b, 'cpuset'}]}, 0x8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1, @broadcast}, &(0x7f0000000480)=0xc) 16.555495297s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000000000000000"], 0x0}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r4, 0x3, r1, 0x5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff3a}, 0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000016c0), 0x3af4701e) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000dc74585ecc0849004301159a295af4e5390db39f5fdd6f16db7479b7c858ac5dc1a8d3f3822c256b68fe3bba6726657cba7cbaa9e55c0e280508718ad4fece0785379099ec49272c436cf2c105b04b6d96373ad118456ee88a51334be8bfaa28ccad7147f8c08198fe55598cfcaf54de04dc73c162461dad82f79e7193505dbed4ed7bed916747fd991d7e3b85ec9fee941656c155670df85a8a9a00685781844ecd0f590b8fcf131b8068db65c3c7aab110d560fd9dad78", @ANYRES16, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab000000000008000b000000000006001100ffff0000"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c80)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESOCT=r3, @ANYRESDEC=r10, @ANYRES32=r11, @ANYBLOB="3c0030801c00018008000400030000000500020000000000080001000300000014000400d6fde169e030cd8ef08e68ab034e5b7d0500020000000000"], 0x58}}, 0x0) 16.30350306s ago: executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c6e742c73686f72746e616d653d6c6f7765722c636f6465706167653d3836342c636f6465706167653d3836392c726f6469722c696f636861727365743d6b6f69382d72752c636865636b3d6e6f726d616c2c75746638f8091182926d6e0e6876ee3d302c726f6469722c0000000000000000000000008c12313bc02408"], 0x1, 0x26c, &(0x7f0000000340)="$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") creat(&(0x7f0000000040)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xff, "4feda26323b172e0"}) add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d", 0x20, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) 15.52655084s ago: executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a2b0c0000000000000000020000000900020073797a32000000000900010073797a30000000002c000480280001800b0001006f626a726566"], 0x80}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 15.454839785s ago: executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x0, 0x10000}}}}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x9f]}}, {{0x1c, 0x1, {0x6, 0x20, 0x100, 0xfffffffd, 0x2, 0x0, 0x20, 0x2}}, {0x8, 0x2, [0x0, 0x40f]}}, {{0x1c}, {0x4}}]}]}, 0xb0}}, 0x0) 15.153414011s ago: executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c221}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}}, 0x0) 13.821243114s ago: executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000200)=0x9, 0x4) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r3, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240), &(0x7f0000001340)) r5 = gettid() move_pages(r5, 0x7, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000040)=[0x8, 0x1000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/keys\x00', 0x0, 0x0) 13.478318542s ago: executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8480, &(0x7f00000007c0)=ANY=[@ANYBLOB="003bfa193f92d25f4b42889fffb9ed030962f330bd57af2a184d94985188abff7afbe1d5d26f993c3a665e469a9c40dc68da19865fd3ff64a6ccbd409e850d276e4762cb1b89bab181ff538bb6b13eae62c56f9bdc6f", @ANYBLOB="d6f6b926049c252cf75979072d8665c55d4a01222bef6f67b33f0eaf6ed8855e150354b2af2f9b1e8f248d3a56db4cb7a73e8a12aa92f7193d737fddc71da3e5b3bfa13b7c94f5a9b0c530cf401569833c6562f6bf83db27ea0c776db39bf3f19dcea994491d17f93e9d4b67e49cdc624eb4db753090d4345435286cb9c37429a82be5eb81010ac4848070174b7efd02fa4a65595153d259ebfef061bf68bc72190f8c55f2b0a4f0a4f0a3768e74ce94cd5960de38211224acbdc7292bfe204304d99d151e353026a9fa0fa14e19e691f06d6b8fc804a2b96b9ceb7f37"], 0x5, 0x19e, &(0x7f0000000280)="$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") openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x5d, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x24}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x3c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13.256384384s ago: executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000200)=0x9, 0x4) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r3, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = gettid() move_pages(r5, 0x7, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000040)=[0x8, 0x1000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/keys\x00', 0x0, 0x0) 12.934250985s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)="c4", 0x1}], 0x1}}], 0x1, 0x4008001) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) 12.464636532s ago: executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500400000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3}, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x140, &(0x7f0000000340)="$eJzs2r9Kw1AUBvAzCEpHR6dAJQqa/1pXHcXN3SHU3DR4Y0oiSPsC4iQoXAdfQvAJfALJ6KZLB18icturplEhk9fh+y394LTpyblwp2PlWeqxwiLaHF4fTpbzLDV6wU6feSykmX0iMmQoq+rWpm9ePutlRfYPX9Br9W322V2PxcElS3jk624JAAAAAAAAAAAAAAAAAAAAAABaMjsqdAYivWAJj7xatRiNT0LOo7wgWtLUoV6moXa4iAl+J+cTzNU35Fh2ZUrEXi7r7vzvb1RYGwj+2pyvc5YOnWI0tpI0jKM4OvX9oOduue6270yf5TSfaN6rnqisHtzaOpn9dCQ7M2v7Zs9t9s3U+S+sJOLqvPlvX+ePgICA8BFaXp//3/T+mxDRYtB9lPef3c/4sSr+xTj1vj4A/OY9AAD//3cgO3s=") write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) 11.375160021s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009f40)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x9}, {0x9}}}]}]}, 0x60}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max.burst\x00', 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ftruncate(r2, 0x200004) sendfile(r3, r2, 0x0, 0x2639) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file1\x00'}) socket$nl_route(0x10, 0x3, 0x0) poll(0x0, 0x0, 0xffffff81) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000400)) 10.46935217s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4a7a5ac44bc48337607985e55fbfbcc246567c44de23b7fcb6738e038408387a52", 0x21}, {&(0x7f0000000300)="41b527cc49159a41ab335f3c5ac0f90700000011224a76773da22896a72a601c810000fc7d531cf7f7ac1cb841ff00000100000001830725708695ee8f50df524666bddd0e1c39b52ee31838c15736f93727094edbdd36f4b4000000000d3b4d68c5bd1a21ee1f445468076fb1301e0fa4ae", 0x72}, {&(0x7f0000000200)="71d5ff0c3e", 0x5}], 0x3, &(0x7f00000015c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) 10.226326153s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0) 10.225220675s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x83000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x5}], {0x4, 0x7}, [{0x8, 0x1}, {0x8, 0x5}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x6}}, 0x44, 0x0) chdir(&(0x7f00000000c0)='./file0/../file0\x00') r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 10.184048633s ago: executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500400000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3}, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x140, &(0x7f0000000340)="$eJzs2r9Kw1AUBvAzCEpHR6dAJQqa/1pXHcXN3SHU3DR4Y0oiSPsC4iQoXAdfQvAJfALJ6KZLB18icturplEhk9fh+y394LTpyblwp2PlWeqxwiLaHF4fTpbzLDV6wU6feSykmX0iMmQoq+rWpm9ePutlRfYPX9Br9W322V2PxcElS3jk624JAAAAAAAAAAAAAAAAAAAAAABaMjsqdAYivWAJj7xatRiNT0LOo7wgWtLUoV6moXa4iAl+J+cTzNU35Fh2ZUrEXi7r7vzvb1RYGwj+2pyvc5YOnWI0tpI0jKM4OvX9oOduue6270yf5TSfaN6rnqisHtzaOpn9dCQ7M2v7Zs9t9s3U+S+sJOLqvPlvX+ePgICA8BFaXp//3/T+mxDRYtB9lPef3c/4sSr+xTj1vj4A/OY9AAD//3cgO3s=") write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) 5.7437528s ago: executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000200)=0x9, 0x4) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b00f45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd41503f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e00300000000000000b35faae176f98b745eda2967199cc93685bb537e8e487166737089df20618cd4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df08445e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5aed65201cc2c51944da8d7391d5b6b9741aa3b76600cd1aa0afe5f8f46df4c5124caf673374b371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf81109715b67ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87dc0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e0219ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa400d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82b04cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb9b5fe7f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b3bff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b011d193ba8075da1d1da9311a050000ab89524414cae922141f7baf17756c31559907a53581b6ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf0a74680bc9987d5aade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7dc26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f736c5867831c5d6eaa9ef1806fd95bbe00318000000000000259da51ff7517ace7361420a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfad36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405d86c7760282901750b732ec06b0db735222a731195633164704886a0c50a5db0d694028cdf61b9749d5d7bd79969a92114ca804a6365615ceb09ed22e4fc3a7d0e2ee4a5fc10f3d01346481e934e411d0e9d7a9fa515a2219b526d8f3e2b383ef694ff99257fc52c31a3503ce22e503214fa808301b489bb0cd8000000000000159c447fc6f1bf1137f6863aceb90d62dae497fe08f7e627727ad0919a62fe92a33f1e5d390000000000000000004135cb6dda469cd6622e6c36e9f005789e6b827c07b8f4f8d4f15695fe30d32ee6efe22cf8d299239eaa54e5c699a904a0344febb884d1cc94f552f48d84ee3431d817edc4bdb762d62778f30baee4aa428bba55f6cff1b5ba395d461db8ffe6fb89e1058a73bc8564c86497b92330b23cb3befb569cc67f15e349644a2c47924423e2983517074747680306eddd948e5211377575787cfa291ec8796dd7db6968791aea4f5e627b219e99bb9262493bbf04415b22ee398406ec88f6b758f6b240a87dc169f51d3a79fb512afae14fbc5e7808764b8550622c1e3080cdd6b21ce0f0324712343943f5e061df056b3b809c07e1318daf9ed1ebea0f95e302dab0b6bc52ed2aac8b950b448ca3a03d1bd21078c54f5cf86c5563b9bba2805a30574a4123e27d6f281f70ac769c62b49bf7cc73f0c9a2b84534d234d2eb136f8620d3e1147a7b7361618e0064cad6fe32685d143af0d378d54c0a5953c764ae8721bd23cba4701e9f0d7a6e1ba92c87b0384f8ee595d618f7cf5a80a0a2edc2541072e146c1e5a8f7b65c877af04e742cfdcac0641a11d51fd6dc88965691bce388005fbb071451bc260bcf7df8890d9c5c8ef47bc4ff5080a2a771f85b4f3d2a2259196a8423e7a992e9b320a40921f6f74d5b0e94be6c9c059e62ff53e5c2139806cca4545d88a7f7ff366e5d7f08a56609130931b64e3bb70000d38011b924ed9df6aa170c6d845f43c0bcbe3839cd1422944651a5908c76c3f3b4070aa1d896e4adc117698c452c9926442a000e128bb936a99536290f906c088cb10ee7bee50b7b013e4e1ff3481d77c7697738b46deebd9ac6e58b41341dcbfad161e3d529a504821549629ef63f8297bec881eb5edb07ed6c86640fb4128d7931e56bb89f0ce605"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r3, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = gettid() move_pages(r5, 0x7, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000040)=[0x8, 0x1000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/keys\x00', 0x0, 0x0) 5.480388399s ago: executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x0, 0x10000}}}}]}, 0x44}}, 0x0) 5.369586076s ago: executing program 1: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c6e742c73686f72746e616d653d6c6f7765722c636f6465706167653d3836342c636f6465706167653d3836392c726f6469722c696f636861727365743d6b6f69382d72752c636865636b3d6e6f726d616c2c75746638f8091182926d6e0e6876ee3d302c726f6469722c0000000000000000000000008c12313bc02408"], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") rename(&(0x7f0000000440)='./bus\x00', &(0x7f0000000180)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xff, "4feda26323b172e0"}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ec", 0x18, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.353048778s ago: executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r0, 0x4008c0d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) fallocate(r2, 0x0, 0x0, 0x40002) fallocate(r1, 0x8, 0x0, 0x42000) 5.344777367s ago: executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a2b0c0000000000000000020000000900020073797a32000000000900010073797a30000000002c000480280001800b0001006f626a726566"], 0x80}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 5.059648772s ago: executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000200)=0x9, 0x4) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r3, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = gettid() move_pages(r5, 0x7, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000040)=[0x8, 0x1000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/keys\x00', 0x0, 0x0) 5.056857s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)="c4", 0x1}], 0x1}}], 0x1, 0x4008001) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) 4.006685345s ago: executing program 2: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002400000006858596b0b0000021907800000000ffffffff000000000405907808b2"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000eaff000800050008000000080004"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000005c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000540)={0x1, &(0x7f00000004c0)=[{0x8000, 0x0, 0x0, 0x100590}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) timer_gettime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0xfff, 0x440) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x223, &(0x7f0000000280)="$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") syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unshare(0x20000400) r5 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) fstat(r5, 0x0) 3.99600574s ago: executing program 5: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c6e742c73686f72746e616d653d6c6f7765722c636f6465706167653d3836342c636f6465706167653d3836392c726f6469722c696f636861727365743d6b6f69382d72752c636865636b3d6e6f726d616c2c75746638f8091182926d6e0e6876ee3d302c726f6469722c0000000000000000000000008c12313bc02408"], 0x1, 0x26c, &(0x7f0000000340)="$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") creat(&(0x7f0000000040)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xff, "4feda26323b172e0"}) add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d", 0x20, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) 1.964323862s ago: executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) shutdown(r0, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r6, &(0x7f00000006c0)={[{0x2b, 'cpuset'}]}, 0x8) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1, @broadcast}, &(0x7f0000000480)=0xc) 1.46035343s ago: executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c221}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}}, 0x0) 1.443378532s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4a7a5ac44bc48337607985e55fbfbcc246567c44de23b7fcb6738e038408387a52", 0x21}, {&(0x7f0000000300)="41b527cc49159a41ab335f3c5ac0f90700000011224a76773da22896a72a601c810000fc7d531cf7f7ac1cb841ff00000100000001830725708695ee8f50df524666bddd0e1c39b52ee31838c15736f93727094edbdd36f4b4000000000d3b4d68c5bd1a21ee1f445468076fb1301e0fa4ae", 0x72}, {&(0x7f0000000200)="71d5ff0c3e", 0x5}], 0x3, &(0x7f00000015c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) 531.051349ms ago: executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0, 0x4, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)={0x0, r2, r1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), 0xffffffffffffffff) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x70, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40008c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0x241, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 65.671558ms ago: executing program 2: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 0s ago: executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) rmdir(0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04"], 0x7) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) chdir(&(0x7f0000000140)='./bus\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. 2024/06/04 16:07:41 fuzzer started 2024/06/04 16:07:42 dialing manager at 10.128.0.169:30002 [ 75.883433][ T5091] cgroup: Unknown subsys name 'net' [ 76.069942][ T5091] cgroup: Unknown subsys name 'rlimit' 2024/06/04 16:07:44 starting 6 executor processes [ 77.387665][ T5094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.455164][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.471967][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.480191][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.499241][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.527564][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.528174][ T5125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.544181][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.551531][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.552281][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.568864][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.570745][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.576592][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.587719][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.599276][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.600207][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.607202][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.620703][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.621202][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.629548][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.639091][ T4484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.644741][ T5130] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.652806][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.663552][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.663677][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.688759][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.688929][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.697846][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.711491][ T4484] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.726717][ T5130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.727737][ T4484] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.743560][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.747486][ T4484] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.758928][ T4484] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.766773][ T5130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.780467][ T4484] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.788607][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.638476][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 80.775024][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 80.803580][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 80.847907][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 81.100993][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.112208][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.120792][ T5112] bridge_slave_0: entered allmulticast mode [ 81.131940][ T5112] bridge_slave_0: entered promiscuous mode [ 81.141503][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 81.161063][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 81.203608][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.210885][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.218951][ T5112] bridge_slave_1: entered allmulticast mode [ 81.226563][ T5112] bridge_slave_1: entered promiscuous mode [ 81.341230][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.353156][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.360763][ T5121] bridge_slave_0: entered allmulticast mode [ 81.368929][ T5121] bridge_slave_0: entered promiscuous mode [ 81.378923][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.386754][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.394018][ T5121] bridge_slave_1: entered allmulticast mode [ 81.401514][ T5121] bridge_slave_1: entered promiscuous mode [ 81.450223][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.591825][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.668256][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.685515][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.700636][ T5126] bridge_slave_0: entered allmulticast mode [ 81.708645][ T5126] bridge_slave_0: entered promiscuous mode [ 81.721555][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.731022][ T4484] Bluetooth: hci3: command tx timeout [ 81.743856][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.799939][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.807374][ T4484] Bluetooth: hci2: command tx timeout [ 81.813516][ T5129] Bluetooth: hci0: command tx timeout [ 81.819199][ T5129] Bluetooth: hci1: command tx timeout [ 81.827215][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.834898][ T5119] bridge_slave_0: entered allmulticast mode [ 81.842807][ T5119] bridge_slave_0: entered promiscuous mode [ 81.874835][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.882056][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.893157][ T5129] Bluetooth: hci4: command tx timeout [ 81.898811][ T5129] Bluetooth: hci5: command tx timeout [ 81.901507][ T5126] bridge_slave_1: entered allmulticast mode [ 81.912767][ T5126] bridge_slave_1: entered promiscuous mode [ 81.975462][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.982652][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.995483][ T5119] bridge_slave_1: entered allmulticast mode [ 82.004742][ T5119] bridge_slave_1: entered promiscuous mode [ 82.068711][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.097010][ T5112] team0: Port device team_slave_0 added [ 82.108840][ T5112] team0: Port device team_slave_1 added [ 82.180042][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.207287][ T5121] team0: Port device team_slave_0 added [ 82.228838][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.236282][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.243904][ T5116] bridge_slave_0: entered allmulticast mode [ 82.251187][ T5116] bridge_slave_0: entered promiscuous mode [ 82.264973][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.278971][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.289442][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.297761][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.306207][ T5124] bridge_slave_0: entered allmulticast mode [ 82.313967][ T5124] bridge_slave_0: entered promiscuous mode [ 82.342346][ T5126] team0: Port device team_slave_0 added [ 82.352748][ T5121] team0: Port device team_slave_1 added [ 82.375373][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.382662][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.391222][ T5116] bridge_slave_1: entered allmulticast mode [ 82.398844][ T5116] bridge_slave_1: entered promiscuous mode [ 82.420923][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.428404][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.436314][ T5124] bridge_slave_1: entered allmulticast mode [ 82.444122][ T5124] bridge_slave_1: entered promiscuous mode [ 82.452810][ T5126] team0: Port device team_slave_1 added [ 82.480136][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.487240][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.513275][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.528207][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.535309][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.561914][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.675932][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.683589][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.710005][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.740508][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.754473][ T5119] team0: Port device team_slave_0 added [ 82.763986][ T5119] team0: Port device team_slave_1 added [ 82.774265][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.816324][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.823608][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.850380][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.864838][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.909578][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.919811][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.932950][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.959763][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.983247][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.990279][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.018333][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.071240][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.078357][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.104749][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.194803][ T5112] hsr_slave_0: entered promiscuous mode [ 83.201690][ T5112] hsr_slave_1: entered promiscuous mode [ 83.223426][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.230445][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.256821][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.299640][ T5124] team0: Port device team_slave_0 added [ 83.327536][ T5116] team0: Port device team_slave_0 added [ 83.388027][ T5124] team0: Port device team_slave_1 added [ 83.401808][ T5121] hsr_slave_0: entered promiscuous mode [ 83.409281][ T5121] hsr_slave_1: entered promiscuous mode [ 83.415972][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.424465][ T5121] Cannot create hsr debugfs directory [ 83.432194][ T5116] team0: Port device team_slave_1 added [ 83.478620][ T5126] hsr_slave_0: entered promiscuous mode [ 83.487910][ T5126] hsr_slave_1: entered promiscuous mode [ 83.495832][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.504113][ T5126] Cannot create hsr debugfs directory [ 83.531564][ T5119] hsr_slave_0: entered promiscuous mode [ 83.540460][ T5119] hsr_slave_1: entered promiscuous mode [ 83.547058][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.554953][ T5119] Cannot create hsr debugfs directory [ 83.581056][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.588199][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.615330][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.700955][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.708492][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.735520][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.777661][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.789031][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.812993][ T5129] Bluetooth: hci3: command tx timeout [ 83.821051][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.883011][ T53] Bluetooth: hci1: command tx timeout [ 83.884402][ T4484] Bluetooth: hci0: command tx timeout [ 83.894640][ T5129] Bluetooth: hci2: command tx timeout [ 83.950692][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.957934][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.963125][ T5129] Bluetooth: hci5: command tx timeout [ 83.984685][ T4484] Bluetooth: hci4: command tx timeout [ 84.002026][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.171033][ T5116] hsr_slave_0: entered promiscuous mode [ 84.178325][ T5116] hsr_slave_1: entered promiscuous mode [ 84.185013][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.192586][ T5116] Cannot create hsr debugfs directory [ 84.241873][ T5124] hsr_slave_0: entered promiscuous mode [ 84.248747][ T5124] hsr_slave_1: entered promiscuous mode [ 84.255934][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.263829][ T5124] Cannot create hsr debugfs directory [ 84.752653][ T5121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.765589][ T5121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.790470][ T5121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.815820][ T5121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.906773][ T5112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.934035][ T5112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.958897][ T5112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.970856][ T5112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.129476][ T5126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.148256][ T5126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.177166][ T5126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.206315][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.215186][ T5126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.322772][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.345413][ T5119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.356793][ T5119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.370410][ T5119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.410036][ T5119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.474047][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.481484][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.507372][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.546785][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.554005][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.594784][ T5116] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.607439][ T5116] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.619332][ T5116] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.660567][ T5116] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.757049][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.796430][ T5124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.836896][ T5124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.854904][ T5124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.882119][ T5124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.889151][ T4484] Bluetooth: hci3: command tx timeout [ 85.906284][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.913536][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.963599][ T5129] Bluetooth: hci0: command tx timeout [ 85.964145][ T53] Bluetooth: hci1: command tx timeout [ 85.969130][ T4484] Bluetooth: hci2: command tx timeout [ 85.981135][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.988381][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.043271][ T4484] Bluetooth: hci4: command tx timeout [ 86.043967][ T53] Bluetooth: hci5: command tx timeout [ 86.178688][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.266559][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.341427][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.348720][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.375263][ T9] cfg80211: failed to load regulatory.db [ 86.424971][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.447197][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.454419][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.509127][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.565686][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.628385][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.667266][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.749538][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.756804][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.819800][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.827237][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.840664][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.847900][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.896640][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.903960][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.123041][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.230664][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.274795][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.289370][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.296649][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.410507][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.417814][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.637297][ T5112] veth0_vlan: entered promiscuous mode [ 87.652817][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.690956][ T5121] veth0_vlan: entered promiscuous mode [ 87.729413][ T5112] veth1_vlan: entered promiscuous mode [ 87.787999][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.837193][ T5121] veth1_vlan: entered promiscuous mode [ 87.927552][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.963958][ T53] Bluetooth: hci3: command tx timeout [ 88.008695][ T5112] veth0_macvtap: entered promiscuous mode [ 88.043628][ T53] Bluetooth: hci1: command tx timeout [ 88.053596][ T53] Bluetooth: hci2: command tx timeout [ 88.055686][ T4484] Bluetooth: hci0: command tx timeout [ 88.087503][ T5112] veth1_macvtap: entered promiscuous mode [ 88.123568][ T4484] Bluetooth: hci5: command tx timeout [ 88.123962][ T53] Bluetooth: hci4: command tx timeout [ 88.165110][ T5126] veth0_vlan: entered promiscuous mode [ 88.183888][ T5121] veth0_macvtap: entered promiscuous mode [ 88.262819][ T5121] veth1_macvtap: entered promiscuous mode [ 88.282397][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.305916][ T5126] veth1_vlan: entered promiscuous mode [ 88.359824][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.399358][ T5119] veth0_vlan: entered promiscuous mode [ 88.411228][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.423977][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.435803][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.475368][ T5112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.488196][ T5112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.498044][ T5112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.506863][ T5112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.526465][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.537174][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.549962][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.611323][ T5126] veth0_macvtap: entered promiscuous mode [ 88.628672][ T5121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.638905][ T5121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.648075][ T5121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.657811][ T5121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.688597][ T5116] veth0_vlan: entered promiscuous mode [ 88.702430][ T5119] veth1_vlan: entered promiscuous mode [ 88.727509][ T5126] veth1_macvtap: entered promiscuous mode [ 88.789928][ T5116] veth1_vlan: entered promiscuous mode [ 88.802041][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.912096][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.929531][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.939867][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.950542][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.962792][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.974920][ T4061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.984710][ T4061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.030642][ T5119] veth0_macvtap: entered promiscuous mode [ 89.045490][ T5119] veth1_macvtap: entered promiscuous mode [ 89.057527][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.069863][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.079869][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.090948][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.105147][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.142825][ T5126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.153309][ T5126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162006][ T5126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.175308][ T5126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.266091][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.279709][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.308508][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.316928][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.332654][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.344306][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.355052][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.366180][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.378956][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.389801][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.404937][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.420408][ T5116] veth0_macvtap: entered promiscuous mode [ 89.471572][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.486104][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.498287][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.510738][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.521394][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.534172][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.547729][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.588742][ T5116] veth1_macvtap: entered promiscuous mode [ 89.620204][ T5119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.629355][ T5119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.640990][ T5119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.655461][ T5119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.693993][ T5174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.702121][ T5174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.786026][ T5124] veth0_vlan: entered promiscuous mode [ 89.816973][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.837600][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.864602][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.875720][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.887872][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.913521][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.928265][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.946941][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.985980][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.252088][ T5124] veth1_vlan: entered promiscuous mode [ 90.261916][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.139183][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.166577][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.177547][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.187659][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.198658][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.208774][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.220399][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.230685][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.241404][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.265441][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.284190][ T5224] geneve2: entered allmulticast mode [ 91.342186][ T5220] loop2: detected capacity change from 0 to 32768 [ 91.382186][ T5220] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5220) [ 91.414654][ T5116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.459104][ T5116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.492029][ T5220] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.513282][ T5220] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 91.532251][ T5116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.551925][ T5220] BTRFS info (device loop2): using free-space-tree [ 91.553452][ T5116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.666403][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.702476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.904751][ T5124] veth0_macvtap: entered promiscuous mode [ 91.942088][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.987459][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.019225][ T5124] veth1_macvtap: entered promiscuous mode [ 92.108666][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 92.195677][ T5112] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.216920][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.228133][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.290309][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.342650][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.352639][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.385225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.451482][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.523010][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.563064][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.390534][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.427076][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.441345][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.459579][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.479396][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.491456][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.516800][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.583258][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.744373][ T5256] geneve2: entered allmulticast mode [ 94.602252][ T5261] geneve2: entered allmulticast mode [ 94.684220][ T5174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.829135][ T5174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.860515][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.872988][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.882915][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.893584][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.905085][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.915578][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.925718][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.942933][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.952762][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.965241][ T5269] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.983563][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.997238][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.014500][ T5124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.029905][ T5124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.039443][ T5124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.051517][ T5272] loop3: detected capacity change from 0 to 16 [ 95.068735][ T5124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.079595][ T5272] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 95.410439][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.556881][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.140883][ T5283] loop3: detected capacity change from 0 to 764 [ 96.286042][ T5283] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 96.394273][ T5283] Symlink component flag not implemented [ 96.429746][ T5288] loop2: detected capacity change from 0 to 764 [ 96.485432][ T5283] Symlink component flag not implemented [ 96.539786][ T5288] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 96.584077][ T5283] Symlink component flag not implemented (128) [ 96.701731][ T5288] Symlink component flag not implemented [ 96.709941][ T5283] Symlink component flag not implemented (122) [ 96.771637][ T5288] Symlink component flag not implemented [ 96.860661][ T5296] Symlink component flag not implemented (128) [ 97.048586][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.146107][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.197780][ T5296] Symlink component flag not implemented (122) [ 98.144409][ T5302] geneve2: entered allmulticast mode [ 98.452999][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.460895][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.943955][ T53] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 103.395219][ T53] Bluetooth: hci5: Injecting HCI hardware error event [ 103.414183][ T53] Bluetooth: hci5: hardware error 0x00 [ 103.840849][ T5320] geneve2: entered allmulticast mode [ 103.893126][ T5324] geneve2: entered allmulticast mode [ 106.699607][ T53] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 107.269939][ T5341] geneve2: entered allmulticast mode [ 107.311559][ T29] audit: type=1326 audit(1717517293.977:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214d27cf69 code=0x0 [ 107.716056][ T5360] loop2: detected capacity change from 0 to 24 [ 107.724181][ T5360] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 107.735800][ T5360] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 107.878877][ T5363] loop0: detected capacity change from 0 to 24 [ 107.886694][ T5363] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 107.907886][ T5363] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 108.285543][ T5306] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 109.232387][ T5366] geneve2: entered allmulticast mode [ 109.815158][ T5179] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.004460][ T5385] Zero length message leads to an empty skb [ 110.016449][ T5373] geneve2: entered allmulticast mode [ 110.584234][ T5179] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.873078][ T5179] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.888745][ T5179] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 110.897903][ T5179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.212013][ T5179] usb 3-1: config 0 descriptor?? [ 111.226457][ T5179] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 111.603165][ T5103] usb 3-1: USB disconnect, device number 2 [ 111.649464][ T5398] geneve2: entered allmulticast mode [ 111.929125][ T5401] loop0: detected capacity change from 0 to 4096 [ 111.965114][ T5406] loop1: detected capacity change from 0 to 24 [ 111.972960][ T5406] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 111.985964][ T5406] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 112.077222][ T5401] NILFS (loop0): invalid segment: Checksum error in segment payload [ 112.154518][ T5401] NILFS (loop0): trying rollback from an earlier position [ 112.282003][ T5391] loop4: detected capacity change from 0 to 32768 [ 112.331955][ T5401] NILFS (loop0): recovery complete [ 112.350758][ T5391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5391) [ 112.443553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.513053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.524373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 112.569942][ T5414] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.584843][ T5391] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.402638][ T5413] fuse: Invalid rootmode [ 113.477241][ T5391] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 113.514194][ T5391] BTRFS info (device loop4): using free-space-tree [ 113.538613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.543301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.580745][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 113.595860][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 113.635670][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 113.678782][ T5401] overlayfs: upper fs does not support tmpfile. [ 113.688372][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 113.885201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.947170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.023044][ T5420] syz-executor.1[5420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.023232][ T5420] syz-executor.1[5420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.089962][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 114.379873][ T5401] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.398380][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 114.399150][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 114.418349][ T5401] overlayfs: failed to set xattr on upper [ 114.456309][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 114.457040][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 114.573019][ T5401] overlayfs: ...falling back to redirect_dir=nofollow. [ 114.591601][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 114.592303][ T5391] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 114.633441][ T5391] BTRFS error (device loop4): open_ctree failed [ 114.646539][ T5401] overlayfs: ...falling back to index=off. [ 114.748512][ T5401] overlayfs: ...falling back to uuid=null. [ 116.100894][ T5454] loop3: detected capacity change from 0 to 24 [ 116.123809][ T5454] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 116.258309][ T5454] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 117.037628][ T29] audit: type=1800 audit(1717517303.717:3): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1967 res=0 errno=0 [ 117.639866][ T5477] loop3: detected capacity change from 0 to 24 [ 117.649312][ T5477] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 117.852751][ T53] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 117.861561][ T53] Bluetooth: hci4: Injecting HCI hardware error event [ 117.870551][ T53] Bluetooth: hci4: hardware error 0x00 [ 118.479310][ T5103] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.518932][ T5477] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 118.766466][ T5103] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.795260][ T5103] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.854138][ T5103] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 118.869315][ T5483] fuse: Bad value for 'rootmode' [ 118.949215][ T5103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.987901][ T5488] loop0: detected capacity change from 0 to 8 [ 119.006662][ T5103] usb 5-1: config 0 descriptor?? [ 119.056420][ T5103] appletouch 5-1:0.0: Could not find int-in endpoint [ 119.315346][ T5103] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 120.183710][ T5103] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 120.199348][ T5488] SQUASHFS error: lzo decompression failed, data probably corrupt [ 120.205082][ T5103] usb 5-1: USB disconnect, device number 2 [ 120.219155][ T5487] loop2: detected capacity change from 0 to 4096 [ 120.303199][ T5488] SQUASHFS error: Failed to read block 0x91: -5 [ 120.323922][ T5488] SQUASHFS error: Unable to read metadata cache entry [8f] [ 120.365225][ T5488] SQUASHFS error: Unable to read inode 0x11f [ 120.385500][ T5487] NILFS (loop2): invalid segment: Checksum error in segment payload [ 120.418313][ T5487] NILFS (loop2): trying rollback from an earlier position [ 120.491411][ T5487] NILFS (loop2): recovery complete [ 120.523054][ T53] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 120.545709][ T5496] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.738682][ T5487] overlayfs: upper fs does not support tmpfile. [ 120.793601][ T5487] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.296937][ T5508] syz-executor.3[5508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.297677][ T5508] syz-executor.3[5508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.506247][ T5487] overlayfs: failed to set xattr on upper [ 123.608545][ T5487] overlayfs: ...falling back to redirect_dir=nofollow. [ 123.673340][ T5487] overlayfs: ...falling back to index=off. [ 123.682517][ T5487] overlayfs: ...falling back to uuid=null. [ 124.586519][ T5527] loop0: detected capacity change from 0 to 24 [ 124.595188][ T5527] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 125.735211][ T5527] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 126.703651][ T5536] loop1: detected capacity change from 0 to 24 [ 126.718331][ T5536] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 126.932273][ T5536] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 127.003275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 127.022888][ T5537] fuse: Bad value for 'rootmode' [ 127.093519][ T29] audit: type=1800 audit(1717517313.777:4): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=1961 res=0 errno=0 [ 127.157995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.294350][ T5346] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.333709][ T5545] loop0: detected capacity change from 0 to 8 [ 127.428619][ T5545] SQUASHFS error: lzo decompression failed, data probably corrupt [ 127.481727][ T5545] SQUASHFS error: Failed to read block 0x91: -5 [ 127.495244][ T5549] loop1: detected capacity change from 0 to 8 [ 127.515251][ T5550] loop2: detected capacity change from 0 to 16 [ 127.532993][ T5545] SQUASHFS error: Unable to read metadata cache entry [8f] [ 127.551758][ T5550] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 127.570241][ T5545] SQUASHFS error: Unable to read inode 0x11f [ 127.663228][ T5553] loop3: detected capacity change from 0 to 1024 [ 127.769091][ T5554] overlay: filesystem on ./file0 is read-only [ 127.778106][ T5553] hfsplus: failed to load root directory [ 127.873563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 128.942868][ C0] sched: RT throttling activated [ 130.400745][ T5553] loop3: detected capacity change from 0 to 4096 [ 130.532288][ T5553] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 130.627230][ C1] net_ratelimit: 2 callbacks suppressed [ 130.627250][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 130.784674][ T5572] loop4: detected capacity change from 0 to 4096 [ 130.892469][ T5572] NILFS (loop4): invalid segment: Checksum error in segment payload [ 130.933070][ T5572] NILFS (loop4): trying rollback from an earlier position [ 130.951600][ T5553] ntfs3: loop3: Failed to load $MFT (-2). [ 130.982020][ T5572] NILFS (loop4): recovery complete [ 131.486570][ T5583] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.551838][ T5584] geneve2: entered allmulticast mode [ 131.928751][ T5572] overlayfs: upper fs does not support tmpfile. [ 131.995292][ T5572] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.042743][ T5593] loop2: detected capacity change from 0 to 16 [ 132.054509][ T5593] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 132.087948][ T5572] overlayfs: failed to set xattr on upper [ 132.126896][ T5594] fuse: Bad value for 'rootmode' [ 132.135644][ T5572] overlayfs: ...falling back to redirect_dir=nofollow. [ 132.142510][ T5572] overlayfs: ...falling back to index=off. [ 132.211757][ T5572] overlayfs: ...falling back to uuid=null. [ 132.450849][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.454090][ T5598] loop1: detected capacity change from 0 to 8 [ 132.458664][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.847611][ T5601] loop3: detected capacity change from 0 to 24 [ 132.851836][ T5601] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 134.818053][ T5601] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 134.885689][ T5598] SQUASHFS error: lzo decompression failed, data probably corrupt [ 134.885762][ T5598] SQUASHFS error: Failed to read block 0x91: -5 [ 134.885781][ T5598] SQUASHFS error: Unable to read metadata cache entry [8f] [ 134.885799][ T5598] SQUASHFS error: Unable to read inode 0x11f [ 136.068630][ T29] audit: type=1800 audit(1717517322.747:5): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1968 res=0 errno=0 [ 136.490694][ T5624] loop4: detected capacity change from 0 to 8 [ 136.521172][ T5627] loop3: detected capacity change from 0 to 1024 [ 136.586405][ T5627] hfsplus: failed to load root directory [ 137.762918][ T5635] geneve2: entered allmulticast mode [ 138.917498][ T5641] overlay: filesystem on ./file0 is read-only [ 139.165500][ T5627] loop3: detected capacity change from 0 to 4096 [ 139.196504][ T5627] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 139.274884][ T5646] fuse: Unknown parameter 'use00000000000000000000' [ 139.328036][ T5627] ntfs3: loop3: Failed to load $MFT (-2). [ 139.789362][ T5650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.799549][ T5650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.579384][ T5656] loop1: detected capacity change from 0 to 8 [ 140.602147][ T5656] SQUASHFS error: lzo decompression failed, data probably corrupt [ 140.630256][ T5657] loop4: detected capacity change from 0 to 16 [ 140.642615][ T5656] SQUASHFS error: Failed to read block 0x91: -5 [ 140.704272][ T5657] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 140.712969][ T5656] SQUASHFS error: Unable to read metadata cache entry [8f] [ 140.757293][ T5656] SQUASHFS error: Unable to read inode 0x11f [ 141.149931][ T5661] loop5: detected capacity change from 0 to 24 [ 141.157673][ T5661] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 141.190640][ T5661] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 142.461343][ T53] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 142.471148][ T53] Bluetooth: hci1: Injecting HCI hardware error event [ 142.480809][ T53] Bluetooth: hci1: hardware error 0x00 [ 142.589784][ T5668] geneve2: entered allmulticast mode [ 143.428193][ T29] audit: type=1800 audit(1717517330.107:6): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1957 res=0 errno=0 [ 143.528362][ T5687] loop3: detected capacity change from 0 to 8 [ 144.584717][ T5696] geneve2: entered allmulticast mode [ 144.843421][ T53] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 144.851263][ T5702] overlay: filesystem on ./file0 is read-only [ 144.909109][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.368399][ T5710] loop4: detected capacity change from 0 to 256 [ 148.027129][ T5714] loop5: detected capacity change from 0 to 8 [ 148.124217][ T5714] SQUASHFS error: lzo decompression failed, data probably corrupt [ 148.223799][ T5710] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 148.290345][ T5714] SQUASHFS error: Failed to read block 0x91: -5 [ 148.305592][ T5714] SQUASHFS error: Unable to read metadata cache entry [8f] [ 148.378278][ T5727] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.403071][ T5714] SQUASHFS error: Unable to read inode 0x11f [ 149.552183][ T5735] geneve2: entered allmulticast mode [ 150.761410][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 153.568323][ T5768] geneve2: entered allmulticast mode [ 153.876015][ T5774] loop1: detected capacity change from 0 to 256 [ 153.918038][ T5776] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.950752][ T5774] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 155.982052][ T5783] geneve2: entered allmulticast mode [ 159.366507][ T5823] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.777768][ T5829] loop2: detected capacity change from 0 to 256 [ 160.630273][ T5829] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 161.429625][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.231410][ T4484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.251651][ T4484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.261702][ T4484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.284617][ T4484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.325026][ T4484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.355148][ T4484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.758815][ T3850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.254266][ T3850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.265511][ T5870] loop4: detected capacity change from 0 to 8 [ 164.302254][ T5866] loop1: detected capacity change from 0 to 4096 [ 164.303848][ T5870] SQUASHFS error: lzo decompression failed, data probably corrupt [ 164.333710][ T5870] SQUASHFS error: Failed to read block 0x91: -5 [ 164.340141][ T5870] SQUASHFS error: Unable to read metadata cache entry [8f] [ 164.348871][ T5870] SQUASHFS error: Unable to read inode 0x11f [ 164.466028][ T3850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.632121][ T5875] loop2: detected capacity change from 0 to 256 [ 164.822774][ T5875] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 164.944692][ T3850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.130589][ T5878] overlay: ./file0 is not a directory [ 165.378233][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.483100][ T53] Bluetooth: hci3: command tx timeout [ 165.528035][ T5889] loop5: detected capacity change from 0 to 16 [ 165.613419][ T5889] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 166.945243][ T3850] bridge_slave_1: left allmulticast mode [ 166.967153][ T5911] loop5: detected capacity change from 0 to 8 [ 166.970841][ T3850] bridge_slave_1: left promiscuous mode [ 167.034490][ T3850] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.045968][ T5911] SQUASHFS error: lzo decompression failed, data probably corrupt [ 167.056440][ T5911] SQUASHFS error: Failed to read block 0x91: -5 [ 167.105979][ T5911] SQUASHFS error: Unable to read metadata cache entry [8f] [ 167.139505][ T5911] SQUASHFS error: Unable to read inode 0x11f [ 167.190936][ T3850] bridge_slave_0: left allmulticast mode [ 167.425800][ T3850] bridge_slave_0: left promiscuous mode [ 167.456950][ T3850] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.563163][ T53] Bluetooth: hci3: command tx timeout [ 168.582638][ T5931] loop4: detected capacity change from 0 to 24 [ 168.593610][ T5931] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 168.800738][ T5931] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 169.116222][ T5933] loop1: detected capacity change from 0 to 256 [ 169.223921][ T5933] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 169.517437][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.654904][ T53] Bluetooth: hci3: command tx timeout [ 170.308128][ T5949] syz-executor.1[5949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.308323][ T5949] syz-executor.1[5949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.326303][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.347487][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.669640][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.700839][ T29] audit: type=1326 audit(1717517357.377:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde5a67cf69 code=0x0 [ 171.471468][ T5959] loop1: detected capacity change from 0 to 256 [ 171.722955][ T53] Bluetooth: hci3: command tx timeout [ 171.761268][ T3850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.797517][ T3850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.815189][ T3850] bond0 (unregistering): Released all slaves [ 171.869952][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 172.028206][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 172.619191][ T5991] loop5: detected capacity change from 0 to 256 [ 172.668682][ T5991] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 172.821319][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.839420][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.865141][ T5854] bridge_slave_0: entered allmulticast mode [ 172.923936][ T5854] bridge_slave_0: entered promiscuous mode [ 173.123907][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.143545][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.180288][ T5854] bridge_slave_1: entered allmulticast mode [ 173.463567][ T5854] bridge_slave_1: entered promiscuous mode [ 173.813661][ T6002] syz-executor.2[6002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.813853][ T6002] syz-executor.2[6002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.865848][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.889583][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.909694][ T3850] hsr_slave_0: left promiscuous mode [ 175.972988][ T3850] hsr_slave_1: left promiscuous mode [ 176.029465][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.048212][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.207940][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.289715][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.595772][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.605698][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.352742][ T3850] veth1_macvtap: left promiscuous mode [ 177.371558][ T3850] veth0_macvtap: left promiscuous mode [ 177.379767][ T3850] veth1_vlan: left promiscuous mode [ 177.413424][ T3850] veth0_vlan: left promiscuous mode [ 177.897620][ T4484] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.907618][ T4484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.916937][ T4484] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.967535][ T4484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.985713][ T4484] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.995600][ T4484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.759747][ T6051] loop1: detected capacity change from 0 to 256 [ 178.779980][ T6050] fuse: Unknown parameter 'user_id00000000000000000000' [ 178.792305][ T6051] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 179.358032][ T6055] syz-executor.1[6055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.358798][ T6055] syz-executor.1[6055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.393826][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.415310][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.043010][ T4484] Bluetooth: hci2: command tx timeout [ 180.395044][ T3850] team0 (unregistering): Port device team_slave_1 removed [ 180.446472][ T29] audit: type=1800 audit(1717517367.107:8): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1963 res=0 errno=0 [ 180.531524][ T3850] team0 (unregistering): Port device team_slave_0 removed [ 180.847244][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.857072][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.051403][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.083794][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.123058][ T4484] Bluetooth: hci2: command tx timeout [ 182.340329][ T5854] team0: Port device team_slave_0 added [ 182.396962][ T5854] team0: Port device team_slave_1 added [ 182.596612][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.627142][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.674794][ T6083] loop2: detected capacity change from 0 to 256 [ 182.730874][ T6083] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 182.764266][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.831143][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.892027][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.989297][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.053078][ T6092] syz-executor.3[6092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.053274][ T6092] syz-executor.3[6092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.069999][ T6092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.091171][ T6092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.890347][ T6094] fuse: Unknown parameter 'user_id00000000000000000000' [ 184.213178][ T4484] Bluetooth: hci2: command tx timeout [ 184.324287][ T5854] hsr_slave_0: entered promiscuous mode [ 184.390849][ T5854] hsr_slave_1: entered promiscuous mode [ 184.423430][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.431272][ T5854] Cannot create hsr debugfs directory [ 185.297342][ T6138] loop5: detected capacity change from 0 to 256 [ 185.468581][ T6138] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 185.956587][ T3850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.353924][ T4484] Bluetooth: hci2: command tx timeout [ 186.896184][ T6146] fuse: Unknown parameter 'user_id00000000000000000000' [ 187.247580][ T6033] chnl_net:caif_netlink_parms(): no params data found [ 187.416399][ T3850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.625748][ T3850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.857821][ T3850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.081100][ T6178] loop2: detected capacity change from 0 to 256 [ 188.128676][ T6178] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 188.193803][ T6178] overlayfs: failed to resolve './file2': -2 [ 188.604329][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.611705][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.656658][ T6191] loop1: detected capacity change from 0 to 24 [ 190.664446][ T6191] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 191.021217][ T6033] bridge_slave_0: entered allmulticast mode [ 191.032121][ T6191] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 191.044253][ T6033] bridge_slave_0: entered promiscuous mode [ 191.165855][ T3850] bridge_slave_1: left allmulticast mode [ 191.171577][ T3850] bridge_slave_1: left promiscuous mode [ 191.273374][ T3850] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.324906][ T3850] bridge_slave_0: left allmulticast mode [ 191.330759][ T3850] bridge_slave_0: left promiscuous mode [ 191.339166][ T3850] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.545063][ T6207] fuse: Bad value for 'fd' [ 193.637774][ T3850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.658943][ T3850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.675232][ T3850] bond0 (unregistering): Released all slaves [ 193.712265][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.781948][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.803485][ T6033] bridge_slave_1: entered allmulticast mode [ 193.866862][ T6033] bridge_slave_1: entered promiscuous mode [ 193.891514][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.900074][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.174249][ T6228] loop1: detected capacity change from 0 to 256 [ 194.271634][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.311698][ T6228] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 194.360895][ T6228] overlayfs: failed to resolve './file2': -2 [ 195.016547][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.879101][ T3850] hsr_slave_0: left promiscuous mode [ 195.891048][ T3850] hsr_slave_1: left promiscuous mode [ 195.910558][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.919193][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.955081][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.962529][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.100370][ T3850] veth1_macvtap: left promiscuous mode [ 196.122623][ T3850] veth0_macvtap: left promiscuous mode [ 196.133921][ T3850] veth1_vlan: left promiscuous mode [ 196.159539][ T3850] veth0_vlan: left promiscuous mode [ 196.909882][ T6259] loop5: detected capacity change from 0 to 256 [ 196.948530][ T6259] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 197.018082][ T6259] overlayfs: failed to resolve './file2': -2 [ 197.237630][ T3850] team0 (unregistering): Port device team_slave_1 removed [ 197.288257][ T3850] team0 (unregistering): Port device team_slave_0 removed [ 197.722499][ T6033] team0: Port device team_slave_0 added [ 197.729419][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.764512][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.791584][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.804200][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.850430][ T6033] team0: Port device team_slave_1 added [ 198.356671][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.408765][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.657451][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 198.666911][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 200.384860][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.457314][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.505795][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.561606][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.574312][ T6278] loop3: detected capacity change from 0 to 24 [ 200.654484][ T6278] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 200.794834][ T6278] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 200.991468][ T6033] hsr_slave_0: entered promiscuous mode [ 201.070864][ T6033] hsr_slave_1: entered promiscuous mode [ 201.183614][ T6033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.218272][ T6033] Cannot create hsr debugfs directory [ 202.579890][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.806192][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.920879][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.928140][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.058027][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.065284][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.367603][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.378245][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.614327][ T6313] loop5: detected capacity change from 0 to 1024 [ 204.654077][ T6033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.745808][ T6313] hfsplus: failed to load root directory [ 204.766872][ T6033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.832462][ T6033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.897218][ T6033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.356714][ T6313] loop5: detected capacity change from 0 to 4096 [ 205.438904][ T6313] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 205.498040][ T6313] ntfs3: loop5: Failed to load $MFT (-2). [ 205.519440][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.897128][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.052097][ T5854] veth0_vlan: entered promiscuous mode [ 206.205514][ T4484] Bluetooth: hci0: command 0x0406 tx timeout [ 206.262002][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.354213][ T5854] veth1_vlan: entered promiscuous mode [ 207.056586][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.063868][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.173940][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.181206][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.422689][ T5854] veth0_macvtap: entered promiscuous mode [ 207.521212][ T5854] veth1_macvtap: entered promiscuous mode [ 207.669409][ T6348] loop2: detected capacity change from 0 to 256 [ 207.686298][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.717975][ T6348] FAT-fs (loop2): Unrecognized mount option "nt" or missing value [ 207.735303][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.758994][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.781598][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.812134][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.840909][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.853492][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.864063][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.875937][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.967841][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.979276][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.990212][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.030714][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.067648][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.095335][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.111235][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.182931][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.212937][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.270363][ T6353] geneve2: entered allmulticast mode [ 208.350741][ T6033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.417004][ T6033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.517955][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.573026][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.597355][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.639974][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.760474][ T6362] loop3: detected capacity change from 0 to 4096 [ 209.121020][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.161245][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.330290][ T5103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.370509][ T5103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.550793][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.933018][ T5181] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 210.151191][ T5181] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.226364][ T5181] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.259475][ T5181] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 210.275786][ T5181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.329012][ T5181] usb 1-1: config 0 descriptor?? [ 210.354519][ T5181] appletouch 1-1:0.0: Could not find int-in endpoint [ 210.405227][ T5181] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 210.457585][ T5181] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 210.561795][ T5181] usb 1-1: USB disconnect, device number 2 [ 211.070190][ T6033] veth0_vlan: entered promiscuous mode [ 211.138446][ T6033] veth1_vlan: entered promiscuous mode [ 211.330962][ T6033] veth0_macvtap: entered promiscuous mode [ 211.390106][ T6033] veth1_macvtap: entered promiscuous mode [ 211.439672][ T6389] loop0: detected capacity change from 0 to 16 [ 211.467676][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.473167][ T6389] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 211.505270][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.506809][ T6394] loop5: detected capacity change from 0 to 8 [ 211.540488][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.575147][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.603483][ T6394] SQUASHFS error: lzo decompression failed, data probably corrupt [ 211.622979][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.683182][ T6394] SQUASHFS error: Failed to read block 0x91: -5 [ 211.691388][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.933062][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.987565][ T6394] SQUASHFS error: Unable to read metadata cache entry [8f] [ 212.001814][ T6401] loop3: detected capacity change from 0 to 24 [ 212.009576][ T6401] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 212.030261][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.048790][ T6401] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 212.076691][ T6394] SQUASHFS error: Unable to read inode 0x11f [ 212.091073][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.133913][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.202434][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.281611][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.305490][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.320995][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.348753][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.378370][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.398198][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.418880][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.602501][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.652845][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.709359][ T6409] loop2: detected capacity change from 0 to 4096 [ 212.719030][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.748773][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.777487][ T6414] loop1: detected capacity change from 0 to 256 [ 212.779202][ T6414] FAT-fs (loop1): Unrecognized mount option "nt" or missing value [ 212.789087][ T6033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.821005][ T6033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.830178][ T6033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.842450][ T6033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.134023][ T781] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 213.150521][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.195585][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.315956][ T3850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.354950][ T3850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.371866][ T781] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.440906][ T781] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.530698][ T781] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 213.598699][ T781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.662227][ T781] usb 6-1: config 0 descriptor?? [ 213.701936][ T781] appletouch 6-1:0.0: Could not find int-in endpoint [ 213.767155][ T781] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 213.812536][ T781] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 214.102944][ T53] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 215.211662][ T928] usb 6-1: USB disconnect, device number 2 [ 215.485964][ T6434] geneve2: entered allmulticast mode [ 215.625971][ T6440] loop3: detected capacity change from 0 to 8 [ 215.638718][ T6441] syz-executor.4[6441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.638905][ T6441] syz-executor.4[6441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.658242][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.680812][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.760027][ T6440] SQUASHFS error: lzo decompression failed, data probably corrupt [ 215.805811][ T6440] SQUASHFS error: Failed to read block 0x91: -5 [ 215.848545][ T6440] SQUASHFS error: Unable to read metadata cache entry [8f] [ 215.873173][ T6440] SQUASHFS error: Unable to read inode 0x11f [ 216.944565][ T6459] loop3: detected capacity change from 0 to 24 [ 216.952235][ T6459] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 216.961666][ T6459] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 217.853356][ T29] audit: type=1800 audit(1717517404.527:9): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1959 res=0 errno=0 [ 218.133183][ T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 218.143271][ T53] Bluetooth: hci0: Injecting HCI hardware error event [ 218.154436][ T4484] Bluetooth: hci0: hardware error 0x00 [ 219.658056][ T6475] loop1: detected capacity change from 0 to 24 [ 219.667781][ T6475] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 223.160013][ T4484] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 223.168458][ T4484] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 223.177266][ T4484] Bluetooth: hci2: Injecting HCI hardware error event [ 223.188770][ T4484] Bluetooth: hci2: hardware error 0x00 [ 223.275774][ T6475] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 223.784436][ T6489] loop1: detected capacity change from 0 to 256 [ 223.801673][ T6489] FAT-fs (loop1): Unrecognized mount option "nt" or missing value [ 224.183936][ T6493] syz-executor.5[6493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.184143][ T6493] syz-executor.5[6493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.199671][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 224.220954][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 225.084551][ T6508] loop5: detected capacity change from 0 to 256 [ 225.108698][ T6508] FAT-fs (loop5): Unrecognized mount option "nt" or missing value [ 225.121320][ T29] audit: type=1326 audit(1717517411.777:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06b987cf69 code=0x0 [ 225.444747][ T4484] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 225.459115][ T6510] loop2: detected capacity change from 0 to 256 [ 229.364028][ T6530] syz-executor.5[6530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.365125][ T6530] syz-executor.5[6530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.408175][ T6529] geneve2: entered allmulticast mode [ 229.799540][ T6033] ------------[ cut here ]------------ [ 229.805063][ T6033] DEBUG_LOCKS_WARN_ON(1) [ 229.805146][ T6033] WARNING: CPU: 0 PID: 6033 at kernel/locking/lockdep.c:232 __lock_acquire+0x573/0x1fd0 [ 229.819195][ T6033] Modules linked in: [ 229.823084][ T6033] CPU: 0 PID: 6033 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 229.833515][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 229.843627][ T6033] RIP: 0010:__lock_acquire+0x573/0x1fd0 [ 229.849243][ T6033] Code: 00 00 83 3d ee 17 3b 0e 00 75 23 90 48 c7 c7 20 b9 ca 8b 48 c7 c6 c0 bb ca 8b e8 78 e4 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 229.868892][ T6033] RSP: 0018:ffffc900098779f0 EFLAGS: 00010046 [ 229.868922][ T6033] RAX: c5f7dc50b1df6700 RBX: 0000000000000cf0 RCX: ffff88805f2eda00 [ 229.868943][ T6033] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.891281][ T6033] RBP: 0000000000000000 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 229.899293][ T6033] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: 0000000000000001 [ 229.907289][ T6033] R13: ffff88805f2eda00 R14: 0000000000000000 R15: ffff88805f2ee500 [ 229.915266][ T6033] FS: 00005555737a0480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 229.924199][ T6033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.930790][ T6033] CR2: 0000001b32c39000 CR3: 0000000057d04000 CR4: 0000000000350ef0 [ 229.938769][ T6033] Call Trace: [ 229.942132][ T6033] [ 229.945062][ T6033] ? __warn+0x163/0x4e0 [ 229.949227][ T6033] ? __lock_acquire+0x573/0x1fd0 [ 229.954176][ T6033] ? report_bug+0x2b3/0x500 [ 229.958704][ T6033] ? __lock_acquire+0x573/0x1fd0 [ 229.963650][ T6033] ? handle_bug+0x3e/0x70 [ 229.967980][ T6033] ? exc_invalid_op+0x1a/0x50 [ 229.972657][ T6033] ? asm_exc_invalid_op+0x1a/0x20 [ 229.977684][ T6033] ? __warn_printk+0x292/0x360 [ 229.982454][ T6033] ? __lock_acquire+0x573/0x1fd0 [ 229.987423][ T6033] lock_acquire+0x1ed/0x550 [ 229.991924][ T6033] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 229.997492][ T6033] ? __pfx_lock_acquire+0x10/0x10 [ 230.002519][ T6033] ? rcu_note_context_switch+0xc7c/0xff0 [ 230.008168][ T6033] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.014512][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.020144][ T6033] ? remove_wait_queue+0x33/0x130 [ 230.025168][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.030811][ T6033] _raw_spin_lock_nested+0x31/0x40 [ 230.035928][ T6033] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 230.041478][ T6033] raw_spin_rq_lock_nested+0xb0/0x140 [ 230.046864][ T6033] __schedule+0x357/0x4a20 [ 230.051290][ T6033] ? __pfx_child_wait_callback+0x10/0x10 [ 230.056942][ T6033] ? hrtimer_nanosleep+0x387/0x470 [ 230.062060][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.067708][ T6033] ? __pfx___schedule+0x10/0x10 [ 230.072589][ T6033] ? __pfx___x64_sys_wait4+0x10/0x10 [ 230.077882][ T6033] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.083874][ T6033] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.090204][ T6033] schedule+0x14b/0x320 [ 230.094372][ T6033] syscall_exit_to_user_mode+0x13e/0x370 [ 230.100009][ T6033] do_syscall_64+0x100/0x230 [ 230.104605][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.110243][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.116139][ T6033] RIP: 0033:0x7f1719679997 [ 230.120551][ T6033] Code: 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 25 a4 02 00 8b 44 [ 230.140164][ T6033] RSP: 002b:00007ffe3cabb400 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 230.148623][ T6033] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00007f1719679997 [ 230.156595][ T6033] RDX: 0000000040000001 RSI: 00007ffe3cabb48c RDI: 00000000ffffffff [ 230.164569][ T6033] RBP: 00007ffe3cabb48c R08: 0000000000000000 R09: 7fffffffffffffff [ 230.172546][ T6033] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 230.180516][ T6033] R13: 0000000000037c20 R14: 0000000000036ec1 R15: 000000000000001b [ 230.188501][ T6033] [ 230.191521][ T6033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.198792][ T6033] CPU: 0 PID: 6033 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 230.209206][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 230.219302][ T6033] Call Trace: [ 230.222574][ T6033] [ 230.225530][ T6033] dump_stack_lvl+0x241/0x360 [ 230.230211][ T6033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.235416][ T6033] ? __pfx__printk+0x10/0x10 [ 230.240004][ T6033] ? _printk+0xd5/0x120 [ 230.244163][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.249806][ T6033] ? vscnprintf+0x5d/0x90 [ 230.254146][ T6033] panic+0x349/0x860 [ 230.258044][ T6033] ? __warn+0x172/0x4e0 [ 230.262211][ T6033] ? __pfx_panic+0x10/0x10 [ 230.266627][ T6033] ? show_trace_log_lvl+0x4e6/0x520 [ 230.271941][ T6033] __warn+0x346/0x4e0 [ 230.275941][ T6033] ? __lock_acquire+0x573/0x1fd0 [ 230.280880][ T6033] report_bug+0x2b3/0x500 [ 230.285211][ T6033] ? __lock_acquire+0x573/0x1fd0 [ 230.290153][ T6033] handle_bug+0x3e/0x70 [ 230.294310][ T6033] exc_invalid_op+0x1a/0x50 [ 230.298819][ T6033] asm_exc_invalid_op+0x1a/0x20 [ 230.303675][ T6033] RIP: 0010:__lock_acquire+0x573/0x1fd0 [ 230.309223][ T6033] Code: 00 00 83 3d ee 17 3b 0e 00 75 23 90 48 c7 c7 20 b9 ca 8b 48 c7 c6 c0 bb ca 8b e8 78 e4 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 230.328830][ T6033] RSP: 0018:ffffc900098779f0 EFLAGS: 00010046 [ 230.334901][ T6033] RAX: c5f7dc50b1df6700 RBX: 0000000000000cf0 RCX: ffff88805f2eda00 [ 230.342952][ T6033] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.350915][ T6033] RBP: 0000000000000000 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 230.358881][ T6033] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: 0000000000000001 [ 230.366849][ T6033] R13: ffff88805f2eda00 R14: 0000000000000000 R15: ffff88805f2ee500 [ 230.374927][ T6033] ? __warn_printk+0x292/0x360 [ 230.379744][ T6033] lock_acquire+0x1ed/0x550 [ 230.384249][ T6033] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 230.389813][ T6033] ? __pfx_lock_acquire+0x10/0x10 [ 230.394837][ T6033] ? rcu_note_context_switch+0xc7c/0xff0 [ 230.400478][ T6033] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.406843][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.412483][ T6033] ? remove_wait_queue+0x33/0x130 [ 230.417515][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.423167][ T6033] _raw_spin_lock_nested+0x31/0x40 [ 230.428289][ T6033] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 230.433849][ T6033] raw_spin_rq_lock_nested+0xb0/0x140 [ 230.439237][ T6033] __schedule+0x357/0x4a20 [ 230.443664][ T6033] ? __pfx_child_wait_callback+0x10/0x10 [ 230.449309][ T6033] ? hrtimer_nanosleep+0x387/0x470 [ 230.454437][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.460071][ T6033] ? __pfx___schedule+0x10/0x10 [ 230.464925][ T6033] ? __pfx___x64_sys_wait4+0x10/0x10 [ 230.470213][ T6033] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.476195][ T6033] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.482529][ T6033] schedule+0x14b/0x320 [ 230.486687][ T6033] syscall_exit_to_user_mode+0x13e/0x370 [ 230.492315][ T6033] do_syscall_64+0x100/0x230 [ 230.496906][ T6033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.502547][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.508444][ T6033] RIP: 0033:0x7f1719679997 [ 230.512862][ T6033] Code: 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 25 a4 02 00 8b 44 [ 230.532467][ T6033] RSP: 002b:00007ffe3cabb400 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 230.540881][ T6033] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00007f1719679997 [ 230.548849][ T6033] RDX: 0000000040000001 RSI: 00007ffe3cabb48c RDI: 00000000ffffffff [ 230.556822][ T6033] RBP: 00007ffe3cabb48c R08: 0000000000000000 R09: 7fffffffffffffff [ 230.564791][ T6033] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 230.572751][ T6033] R13: 0000000000037c20 R14: 0000000000036ec1 R15: 000000000000001b [ 230.580771][ T6033] [ 230.584073][ T6033] Kernel Offset: disabled [ 230.588393][ T6033] Rebooting in 86400 seconds..