last executing test programs: 7.545372077s ago: executing program 1 (id=46): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) 7.246943961s ago: executing program 1 (id=47): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0, 0x10}, {0x5, 0x10}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) getsockopt$inet_opts(r1, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3) fcntl$setstatus(r0, 0x4, 0x1400) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x4b45, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r7, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x3ea6034c1c4d2dea) fcntl$setlease(r7, 0x400, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket(0x840000000002, 0x3, 0xff) getsockopt$MRT(r10, 0x0, 0xcf, 0x0, 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x25, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010100, @multicast2}, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x92, 0x9, 0xfb, 0x10, 0x5ef, 0x20a, 0x8574, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x2, 0x2, 0x6e, 0xfa, 0xbf, 0x4, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0xc, 0x2, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x7, 0x5, 0xff}}]}}]}}]}}, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x4000002, 0x4) futex(0x0, 0x4, 0x3, 0x0, 0x0, 0x5) 6.149305803s ago: executing program 2 (id=53): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioperm(0x376, 0x5, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x0, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1}, {}, {0xfffffffe}]}}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f1b", @ANYRES64], 0x22) 5.859812119s ago: executing program 2 (id=56): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) 5.558681335s ago: executing program 1 (id=57): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1}, 0xb7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 5.511793175s ago: executing program 2 (id=58): io_setup(0x5, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0xff, &(0x7f0000000380)) io_pgetevents(r0, 0x400, 0x0, 0x0, 0x0, 0x0) 4.740816234s ago: executing program 3 (id=59): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @mcast1, 0x7df}, 0x63) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f0000000480)) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000010, &(0x7f0000000280)={[{@prjquota}, {}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x143042, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) stat(&(0x7f000000a280)='./file2\x00', &(0x7f000000a2c0)) socket$inet6(0xa, 0x3, 0x6) 4.309140641s ago: executing program 2 (id=61): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fdatasync(0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x3, 0xffffffff, 0x40, 0x800, 0x9, 0xdb}) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000"], 0x0) 3.888625749s ago: executing program 3 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.845178658s ago: executing program 1 (id=65): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x878, 0x400) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0xcc1c3c8a05a019a2, &(0x7f0000ffd000/0x3000)=nil) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x73, 0xa0, 0xc8, 0x20, 0x46d, 0x8c3, 0x2491, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x1, 0x4, 0x10, 0x6, [{{0x9, 0x4, 0x26, 0x0, 0x0, 0xff, 0x1, 0x0, 0x21}}, {{0x9, 0x4, 0xaf, 0x7, 0x0, 0xfa, 0x8d, 0xf2, 0x6}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) r0 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x600) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 3.522979497s ago: executing program 4 (id=67): timer_create(0x3, 0x0, &(0x7f0000000180)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x4, 0x9, 0x3ff}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000680)) 3.385822351s ago: executing program 3 (id=69): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="c0ff6e2007"], 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.149617814s ago: executing program 4 (id=72): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r1, 0x0) 2.000100455s ago: executing program 3 (id=73): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@fat=@codepage={'codepage', 0x3d, '874'}}, {@nodots}, {@dots}, {@nodots}, {}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@tz_utc}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@fat=@usefree}, {@nodots}, {@nodots}, {@dots}]}, 0xf9, 0x1d0, &(0x7f00000004c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.750644436s ago: executing program 4 (id=74): socket$inet(0x2, 0x3, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2be, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x5, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x6, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0xfffffffb, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fa, 0x10001, 0x3, 0x9, 0x54, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0x7ffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 1.532195887s ago: executing program 3 (id=75): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x2d}, {0x6, 0x2}]}, 0x10) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) 1.270754523s ago: executing program 4 (id=77): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a40)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xefff}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x8, 0xc2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x25, 0x1}]}}}}}}}}, 0x0) 1.244006354s ago: executing program 3 (id=78): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f17608060001080006040001aaaaaaaaaaaa0a0101"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022402c17f0c000905020200020200"], 0x0) chdir(&(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x13b) 1.227006591s ago: executing program 0 (id=79): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x2, 0xc8, "cba83d72e8a7aaa4"}}}, 0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 1.079653291s ago: executing program 0 (id=80): ioperm(0x4, 0x8, 0x5) semget(0x1, 0x0, 0x71a) 953.456592ms ago: executing program 0 (id=81): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x45, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x7, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x2e, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0x0, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xef, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x1, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0xfffffffd, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x10000, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b6e, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x5, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x7, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xfffd, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 854.699867ms ago: executing program 1 (id=82): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147182, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6842, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 711.238167ms ago: executing program 0 (id=83): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 682.313865ms ago: executing program 4 (id=84): r0 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$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") chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 466.974855ms ago: executing program 0 (id=85): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(0x0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 402.787641ms ago: executing program 2 (id=86): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x1, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4050) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@newtaction={0x158, 0x32, 0xffffffffffffffff, 0x0, 0x25dfdbfd, {}, [{0x144, 0x1, [@m_bpf={0x140, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x1}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_OPS, @TCA_ACT_BPF_FD]}, {0xf7, 0x6, "416b7aae3445fb11463fb79e6cc150263cd1daad3c7e3d9e9d3afdea54cb0e5848aff498f845863f8ed9471a7bdf795ec9b1e5eb3f2fece83a007da01c1013412fb2d8e8d3a385365c3b0153cd95187f4c556e8f4a6dde5bb355b3dbaf996f718d74668cb0f20aa493469e4460dd3f755142b0684882d24b356e3f15a03e9c40f9faf1ef2c922ca6e75e2c7731bf3c01c9231e5a7b8aa8a529a4f63050a31ba4c7b1c10ee8b8d0c1291eb35aa313598d2707723716d1fa321d575028b12704afa09ee5d11e2afabc703f49b77f94e529bffd06f20e3a74fda33da5f1a965b14d8cb5db9ca1b799d67f0fe8c2f2200e2359e39d"}, {0xffffffffffffffe1}, {0xc}}}]}]}, 0x158}}, 0x0) 390.263045ms ago: executing program 4 (id=87): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 214.744582ms ago: executing program 0 (id=88): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "30a523a5faaca2c7", "eef0af34cd87b68b6ac146aa46ff5f4b", "24831f61", "12d85215e2ff19c9"}, 0x28) 76.987022ms ago: executing program 2 (id=89): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2043, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 0s ago: executing program 1 (id=90): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 83.518553][ T5816] cgroup: Unknown subsys name 'net' [ 83.628400][ T5816] cgroup: Unknown subsys name 'cpuset' [ 83.637765][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.310829][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.250587][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.259050][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.267866][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.268396][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.283480][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.291364][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.294239][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.306911][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.315352][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.323223][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.334074][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.352567][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.358144][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.369905][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.379634][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.379844][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.387616][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.395789][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.404453][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.409103][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.418079][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.440640][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.448497][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.456912][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.464735][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.100007][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.172893][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.335286][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.437666][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.449915][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.496897][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.504217][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.511632][ T5827] bridge_slave_0: entered allmulticast mode [ 89.519563][ T5827] bridge_slave_0: entered promiscuous mode [ 89.573893][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.581130][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.588426][ T5839] bridge_slave_0: entered allmulticast mode [ 89.596650][ T5839] bridge_slave_0: entered promiscuous mode [ 89.605003][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.612228][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.622262][ T5827] bridge_slave_1: entered allmulticast mode [ 89.630042][ T5827] bridge_slave_1: entered promiscuous mode [ 89.688867][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.696368][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.703487][ T5839] bridge_slave_1: entered allmulticast mode [ 89.711826][ T5839] bridge_slave_1: entered promiscuous mode [ 89.816530][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.828801][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.836467][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.843656][ T5828] bridge_slave_0: entered allmulticast mode [ 89.852427][ T5828] bridge_slave_0: entered promiscuous mode [ 89.879765][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.891737][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.901215][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.908682][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.916746][ T5828] bridge_slave_1: entered allmulticast mode [ 89.923926][ T5828] bridge_slave_1: entered promiscuous mode [ 89.960417][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.041024][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.049305][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.056763][ T5831] bridge_slave_0: entered allmulticast mode [ 90.063842][ T5831] bridge_slave_0: entered promiscuous mode [ 90.115127][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.125022][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.132618][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.140164][ T5831] bridge_slave_1: entered allmulticast mode [ 90.147495][ T5831] bridge_slave_1: entered promiscuous mode [ 90.170834][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.178382][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.185796][ T5835] bridge_slave_0: entered allmulticast mode [ 90.193248][ T5835] bridge_slave_0: entered promiscuous mode [ 90.203578][ T5839] team0: Port device team_slave_0 added [ 90.212758][ T5827] team0: Port device team_slave_0 added [ 90.221708][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.258382][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.265931][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.273090][ T5835] bridge_slave_1: entered allmulticast mode [ 90.280515][ T5835] bridge_slave_1: entered promiscuous mode [ 90.289296][ T5839] team0: Port device team_slave_1 added [ 90.299227][ T5827] team0: Port device team_slave_1 added [ 90.327701][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.381519][ T5828] team0: Port device team_slave_0 added [ 90.390400][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.404753][ T5836] Bluetooth: hci1: command tx timeout [ 90.404760][ T5832] Bluetooth: hci0: command tx timeout [ 90.456691][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.463681][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.490355][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.490399][ T5836] Bluetooth: hci4: command tx timeout [ 90.521288][ T5828] team0: Port device team_slave_1 added [ 90.558649][ T5831] team0: Port device team_slave_0 added [ 90.564492][ T5836] Bluetooth: hci2: command tx timeout [ 90.566565][ T5832] Bluetooth: hci3: command tx timeout [ 90.575111][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.588809][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.598710][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.607031][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.633393][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.646145][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.653082][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.679054][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.705030][ T5831] team0: Port device team_slave_1 added [ 90.748767][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.755900][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.782391][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.802060][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.809168][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.835105][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.862056][ T5835] team0: Port device team_slave_0 added [ 90.871730][ T5835] team0: Port device team_slave_1 added [ 90.895818][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.902790][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.929132][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.007509][ T5839] hsr_slave_0: entered promiscuous mode [ 91.013830][ T5839] hsr_slave_1: entered promiscuous mode [ 91.021335][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.028486][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.054624][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.081163][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.088246][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.114457][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.138942][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.145953][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.172081][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.208085][ T5827] hsr_slave_0: entered promiscuous mode [ 91.214865][ T5827] hsr_slave_1: entered promiscuous mode [ 91.220938][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.228726][ T5827] Cannot create hsr debugfs directory [ 91.235276][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.242242][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.268813][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.316919][ T5828] hsr_slave_0: entered promiscuous mode [ 91.323178][ T5828] hsr_slave_1: entered promiscuous mode [ 91.329912][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.337860][ T5828] Cannot create hsr debugfs directory [ 91.523538][ T5835] hsr_slave_0: entered promiscuous mode [ 91.531351][ T5835] hsr_slave_1: entered promiscuous mode [ 91.539164][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.547413][ T5835] Cannot create hsr debugfs directory [ 91.579538][ T5831] hsr_slave_0: entered promiscuous mode [ 91.585886][ T5831] hsr_slave_1: entered promiscuous mode [ 91.591899][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.599538][ T5831] Cannot create hsr debugfs directory [ 92.180078][ T978] cfg80211: failed to load regulatory.db [ 92.203755][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.225621][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.248046][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.258471][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.323590][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.337398][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.350487][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.398925][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.469886][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.484349][ T5832] Bluetooth: hci0: command tx timeout [ 92.484425][ T5836] Bluetooth: hci1: command tx timeout [ 92.495823][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.510416][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.538712][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.564618][ T5836] Bluetooth: hci4: command tx timeout [ 92.645044][ T5836] Bluetooth: hci3: command tx timeout [ 92.645390][ T5832] Bluetooth: hci2: command tx timeout [ 92.673506][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.687324][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.698220][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.710866][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.866814][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.891006][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.917757][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.930295][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.959315][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.969357][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.027458][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.066014][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.087380][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.094708][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.109287][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.116443][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.136587][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.143684][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.180440][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.187652][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.227118][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.251070][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.306005][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.339308][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.377166][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.384376][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.395121][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.402253][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.411410][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.418549][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.450162][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.480935][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.488091][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.640145][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.748749][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.831174][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.838425][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.901149][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.909354][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.187179][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.221966][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.422599][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.477668][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.510264][ T5839] veth0_vlan: entered promiscuous mode [ 94.564907][ T5832] Bluetooth: hci0: command tx timeout [ 94.570372][ T5832] Bluetooth: hci1: command tx timeout [ 94.596942][ T5839] veth1_vlan: entered promiscuous mode [ 94.630689][ T5827] veth0_vlan: entered promiscuous mode [ 94.645171][ T5832] Bluetooth: hci4: command tx timeout [ 94.686640][ T5827] veth1_vlan: entered promiscuous mode [ 94.712443][ T5828] veth0_vlan: entered promiscuous mode [ 94.725355][ T5832] Bluetooth: hci2: command tx timeout [ 94.726961][ T5836] Bluetooth: hci3: command tx timeout [ 94.737936][ T5828] veth1_vlan: entered promiscuous mode [ 94.793366][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.898879][ T5839] veth0_macvtap: entered promiscuous mode [ 94.930919][ T5828] veth0_macvtap: entered promiscuous mode [ 94.948242][ T5839] veth1_macvtap: entered promiscuous mode [ 94.967795][ T5827] veth0_macvtap: entered promiscuous mode [ 94.996130][ T5828] veth1_macvtap: entered promiscuous mode [ 95.017274][ T5831] veth0_vlan: entered promiscuous mode [ 95.029039][ T5827] veth1_macvtap: entered promiscuous mode [ 95.058894][ T5831] veth1_vlan: entered promiscuous mode [ 95.070592][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.084782][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.118013][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.128155][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.137853][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.165038][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.176789][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.186656][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.245759][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.258084][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.270017][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.279552][ T5835] veth0_vlan: entered promiscuous mode [ 95.295080][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.318885][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.338833][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.351558][ T5835] veth1_vlan: entered promiscuous mode [ 95.368742][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.401999][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.412039][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.427667][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.472959][ T5831] veth0_macvtap: entered promiscuous mode [ 95.488778][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.511914][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.516692][ T5831] veth1_macvtap: entered promiscuous mode [ 95.611775][ T5835] veth0_macvtap: entered promiscuous mode [ 95.620292][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.625239][ T5835] veth1_macvtap: entered promiscuous mode [ 95.639282][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.676925][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.702779][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.719644][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.783367][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.806030][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.806305][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.823701][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.832427][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.837067][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.901570][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.911363][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.945381][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.948600][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.955851][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.005785][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.056840][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.090047][ T5953] loop1: detected capacity change from 0 to 512 [ 96.101540][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.118600][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.129765][ T5953] EXT4-fs: Ignoring removed bh option [ 96.171071][ T5953] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 96.225160][ T5953] EXT4-fs (loop1): 1 truncate cleaned up [ 96.231440][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233225][ T5953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.356351][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.385931][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.511388][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.559955][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.629002][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.638567][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.648608][ T5836] Bluetooth: hci1: command tx timeout [ 96.657546][ T5836] Bluetooth: hci0: command tx timeout [ 96.724210][ T5836] Bluetooth: hci4: command tx timeout [ 96.804445][ T5836] Bluetooth: hci2: command tx timeout [ 96.819306][ T5836] Bluetooth: hci3: command tx timeout [ 97.495089][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.551126][ T978] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.561357][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.566402][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.705332][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 97.737224][ T978] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 97.751889][ T978] usb 4-1: config 0 has no interface number 0 [ 97.769441][ T5965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.771374][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.779459][ T978] usb 4-1: config 0 interface 184 has no altsetting 0 [ 97.849668][ T978] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 97.893165][ T978] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 97.932377][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.953103][ T978] usb 4-1: Product: syz [ 97.995870][ T978] usb 4-1: Manufacturer: syz [ 98.000535][ T978] usb 4-1: SerialNumber: syz [ 98.006366][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.100656][ T978] usb 4-1: config 0 descriptor?? [ 98.196569][ T5969] loop1: detected capacity change from 0 to 256 [ 98.258328][ T978] smsc75xx v1.0.0 [ 98.520420][ T5969] ======================================================= [ 98.520420][ T5969] WARNING: The mand mount option has been deprecated and [ 98.520420][ T5969] and is ignored by this kernel. Remove the mand [ 98.520420][ T5969] option from the mount to silence this warning. [ 98.520420][ T5969] ======================================================= [ 98.648114][ T5969] exfat: Unknown parameter 'ioscard}K¼éÚT¸' [ 99.103373][ T5977] loop0: detected capacity change from 0 to 2048 [ 99.397810][ T978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 99.413930][ T978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.525218][ T48] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.699224][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 99.889408][ T48] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.110111][ T48] usb 2-1: config 0 has no interface number 0 [ 100.151889][ T48] usb 2-1: config 0 interface 2 has no altsetting 0 [ 100.206328][ T48] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 100.206952][ T978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 100.226699][ T978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 100.236350][ T978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 100.251900][ T978] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 100.276315][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.287376][ T978] usb 4-1: USB disconnect, device number 2 [ 100.311226][ T48] usb 2-1: Product: syz [ 100.321394][ T48] usb 2-1: Manufacturer: syz [ 100.338796][ T48] usb 2-1: SerialNumber: syz [ 100.838512][ T48] usb 2-1: config 0 descriptor?? [ 100.927882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 101.038110][ T5996] loop0: detected capacity change from 0 to 256 [ 101.069111][ T48] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.199701][ T5999] loop0: detected capacity change from 0 to 512 [ 101.265249][ T6001] loop2: detected capacity change from 0 to 8 [ 101.271229][ T5998] loop3: detected capacity change from 0 to 1024 [ 101.292691][ T5983] loop1: detected capacity change from 0 to 512 [ 101.317058][ T5999] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.349270][ T6001] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.350701][ T5983] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.366673][ T5999] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 101.386698][ T6001] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.431654][ T5983] Quota error (device loop1): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 101.445971][ T5983] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.465041][ T30] audit: type=1800 audit(1750896204.749:2): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 101.554341][ T5983] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 101.620681][ T5983] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11: bg 0: block 248: padding at end of block bitmap is not set [ 101.636028][ T48] usb 2-1: invalid MIDI in EP 0 [ 101.740053][ T5983] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 101.828727][ T30] audit: type=1800 audit(1750896204.829:3): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 101.856832][ T5983] EXT4-fs (loop1): 1 orphan inode deleted [ 101.864998][ T5983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.075657][ T48] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 102.088202][ T5836] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 102.096907][ T5836] Bluetooth: hci3: Injecting HCI hardware error event [ 102.104880][ T5836] Bluetooth: hci3: hardware error 0x00 [ 102.269334][ T9] usb 2-1: USB disconnect, device number 2 [ 102.346930][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.560931][ T6019] loop2: detected capacity change from 0 to 128 [ 102.591491][ T6019] FAT-fs (loop2): Directory bread(block 414) failed [ 102.600608][ T6019] FAT-fs (loop2): Directory bread(block 415) failed [ 102.617673][ T6019] FAT-fs (loop2): Directory bread(block 416) failed [ 102.631909][ T6019] FAT-fs (loop2): Directory bread(block 417) failed [ 102.765049][ T6019] FAT-fs (loop2): Directory bread(block 418) failed [ 103.365077][ T6019] FAT-fs (loop2): Directory bread(block 419) failed [ 103.417659][ T6019] FAT-fs (loop2): Directory bread(block 420) failed [ 103.457921][ T6019] FAT-fs (loop2): Directory bread(block 421) failed [ 103.579177][ T6025] loop0: detected capacity change from 0 to 1024 [ 103.596249][ T6025] hfsplus: failed to load catalog file [ 103.673254][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.910352][ T6028] FAT-fs (loop2): Directory bread(block 414) failed [ 103.917935][ T6028] FAT-fs (loop2): Directory bread(block 415) failed [ 104.315227][ T6033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24'. [ 104.405556][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 104.444762][ T5951] kernel write not supported for file [eventfd] (pid: 5951 comm: kworker/0:5) [ 104.460354][ T6032] loop0: detected capacity change from 0 to 2048 [ 104.570676][ T6032] EXT4-fs: Mount option(s) incompatible with ext2 [ 104.731960][ T6039] loop2: detected capacity change from 0 to 1024 [ 104.790264][ T6039] EXT4-fs: Ignoring removed nobh option [ 104.810614][ T6039] EXT4-fs: Ignoring removed bh option [ 105.025873][ T6043] loop3: detected capacity change from 0 to 512 [ 105.046264][ T6043] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 105.063194][ T6043] EXT4-fs (loop3): invalid journal inode [ 105.069681][ T6043] EXT4-fs (loop3): can't get journal size [ 105.086998][ T6039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.126705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 105.256404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.267988][ T6053] loop0: detected capacity change from 0 to 128 [ 105.308504][ T6043] EXT4-fs (loop3): 1 truncate cleaned up [ 105.359536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.385591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.394478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 105.396242][ T6043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.444594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.461223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.666740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.769447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.841702][ T6053] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 105.859628][ T6053] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.246725][ T6039] syz.2.28 (6039) used greatest stack depth: 19904 bytes left [ 106.372581][ T5827] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.432738][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.639369][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.674408][ T6056] loop0: detected capacity change from 0 to 1024 [ 106.779403][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.903077][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.324820][ T6069] syz.4.36 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 107.499509][ T6069] ptrace attach of "./syz-executor exec"[6073] was attempted by "./syz-executor exec"[6069] [ 110.079293][ T6078] loop0: detected capacity change from 0 to 512 [ 110.192313][ T6078] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.256913][ T6078] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.304612][ T6078] EXT4-fs (loop0): blocks per group (3008) and clusters per group (32768) inconsistent [ 110.502496][ T6085] loop2: detected capacity change from 0 to 128 [ 110.735397][ T6090] loop0: detected capacity change from 0 to 128 [ 110.777287][ T6091] syz.2.43: attempt to access beyond end of device [ 110.777287][ T6091] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 110.802845][ T6090] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 110.858566][ T6090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.875450][ T6091] syz.2.43: attempt to access beyond end of device [ 110.875450][ T6091] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 110.965681][ T6091] syz.2.43: attempt to access beyond end of device [ 110.965681][ T6091] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 111.004490][ T6091] syz.2.43: attempt to access beyond end of device [ 111.004490][ T6091] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 111.047461][ T6091] syz.2.43: attempt to access beyond end of device [ 111.047461][ T6091] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 111.063892][ T6091] syz.2.43: attempt to access beyond end of device [ 111.063892][ T6091] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 111.146178][ T6091] syz.2.43: attempt to access beyond end of device [ 111.146178][ T6091] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 111.199945][ T6091] syz.2.43: attempt to access beyond end of device [ 111.199945][ T6091] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 111.283210][ T6095] 9pnet_fd: Insufficient options for proto=fd [ 111.544140][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.714530][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 111.732660][ T10] usb 2-1: config 3 has an invalid interface number: 99 but max is 0 [ 111.767923][ T10] usb 2-1: config 3 has no interface number 0 [ 111.799134][ T10] usb 2-1: config 3 interface 99 has no altsetting 0 [ 111.838592][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=85.74 [ 111.854028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.862757][ T10] usb 2-1: Product: syz [ 111.869394][ T10] usb 2-1: Manufacturer: syz [ 111.875096][ T10] usb 2-1: SerialNumber: syz [ 112.133610][ T6109] input: syz1 as /devices/virtual/input/input5 [ 112.167063][ T10] usb 2-1: USB disconnect, device number 3 [ 113.847557][ T30] audit: type=1326 audit(1750896217.169:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e38e929 code=0x7ffc0000 [ 113.891464][ T6140] loop3: detected capacity change from 0 to 2048 [ 113.920395][ T6140] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 113.958437][ T30] audit: type=1326 audit(1750896217.169:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e38e929 code=0x7ffc0000 [ 114.072047][ T30] audit: type=1326 audit(1750896217.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f393e38e929 code=0x7ffc0000 [ 114.177969][ T30] audit: type=1326 audit(1750896217.169:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f393e38e963 code=0x7ffc0000 [ 114.269302][ T30] audit: type=1326 audit(1750896217.239:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f393e38d3df code=0x7ffc0000 [ 114.319328][ T6147] loop4: detected capacity change from 0 to 256 [ 114.325978][ T30] audit: type=1326 audit(1750896217.399:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f393e38e9b7 code=0x7ffc0000 [ 114.374120][ T48] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.426206][ T30] audit: type=1326 audit(1750896217.419:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f393e38d290 code=0x7ffc0000 [ 114.452643][ T6147] loop4: detected capacity change from 0 to 512 [ 114.478986][ T30] audit: type=1326 audit(1750896217.419:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f393e38d58a code=0x7ffc0000 [ 114.526198][ T6147] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.555623][ T6147] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 114.578368][ T30] audit: type=1326 audit(1750896217.519:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e38e929 code=0x7ffc0000 [ 114.611166][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.627372][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.637518][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.674578][ T30] audit: type=1326 audit(1750896217.519:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e38e929 code=0x7ffc0000 [ 114.705222][ T48] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.743477][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.773036][ T48] usb 3-1: config 0 descriptor?? [ 114.886311][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.274259][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 115.285409][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.297291][ T10] usb 2-1: config 1 has an invalid interface number: 38 but max is 1 [ 115.309287][ T10] usb 2-1: config 1 has an invalid interface number: 175 but max is 1 [ 115.312657][ T48] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 115.336053][ T10] usb 2-1: config 1 has no interface number 0 [ 115.391845][ T10] usb 2-1: config 1 has no interface number 1 [ 116.295076][ T10] usb 2-1: config 1 interface 175 has no altsetting 0 [ 116.335687][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=24.91 [ 116.408319][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.430340][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.466952][ T10] usb 2-1: Product: syz [ 116.495731][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.514257][ T10] usb 2-1: Manufacturer: syz [ 116.518988][ T10] usb 2-1: SerialNumber: syz [ 116.570916][ T6178] loop3: detected capacity change from 0 to 256 [ 116.849269][ T10] usb 2-1: Found UVC 0.00 device syz (046d:08c3) [ 116.881719][ T10] usb 2-1: No valid video chain found. [ 116.908366][ T10] usb 2-1: USB disconnect, device number 4 [ 117.217508][ T6191] loop3: detected capacity change from 0 to 512 [ 117.255900][ T6189] loop4: detected capacity change from 0 to 1024 [ 117.270129][ T6189] EXT4-fs: Ignoring removed nobh option [ 117.278369][ T6189] EXT4-fs: Ignoring removed bh option [ 117.376741][ T6189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.399711][ T6191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 117.421253][ T6191] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.549248][ T6189] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 117.627150][ T6203] loop1: detected capacity change from 0 to 2048 [ 117.677375][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.700713][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.762194][ T6203] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 117.801914][ T6209] loop4: detected capacity change from 0 to 256 [ 117.817050][ T6210] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 117.832295][ T6209] exfat: Invalid uid '0x00000000ffffffff' [ 117.838219][ T926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.848070][ T6203] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 117.870958][ T6210] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.870958][ T6210] [ 117.890834][ T6203] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.890834][ T6203] [ 117.942171][ T6203] EXT4-fs (loop1): Total free blocks count 0 [ 117.963532][ T6210] EXT4-fs (loop1): Total free blocks count 0 [ 117.984279][ T6203] EXT4-fs (loop1): Free/Dirty block details [ 118.013824][ T6203] EXT4-fs (loop1): free_blocks=2415919504 [ 118.014110][ T926] usb 4-1: Using ep0 maxpacket: 32 [ 118.025622][ T6210] EXT4-fs (loop1): Free/Dirty block details [ 118.055391][ T926] usb 4-1: config index 0 descriptor too short (expected 548, got 36) [ 118.072581][ T6216] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 118.084469][ T926] usb 4-1: config 127 has too many interfaces: 193, using maximum allowed: 32 [ 118.095471][ T6215] netlink: 272 bytes leftover after parsing attributes in process `syz.2.86'. [ 118.110441][ T926] usb 4-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 118.135170][ T48] usb 3-1: USB disconnect, device number 2 [ 118.164770][ T6217] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 118.170187][ T6216] team0: Port device dummy0 added [ 118.182056][ T926] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 118.243549][ T926] usb 4-1: config 127 has 0 interfaces, different from the descriptor's value: 193 [ 118.301008][ T926] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 118.320312][ T6217] [ 118.322703][ T6217] ====================================================== [ 118.329738][ T6217] WARNING: possible circular locking dependency detected [ 118.329803][ T926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.336771][ T6217] 6.16.0-rc3-next-20250625-syzkaller #0 Not tainted [ 118.336787][ T6217] ------------------------------------------------------ [ 118.336794][ T6217] syz.4.87/6217 is trying to acquire lock: [ 118.336805][ T6217] ffff888033a68e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 118.336873][ T6217] [ 118.336873][ T6217] but task is already holding lock: [ 118.336880][ T6217] ffff8880327bad20 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 118.348970][ T926] usb 4-1: Product: syz [ 118.351470][ T6217] [ 118.351470][ T6217] which lock already depends on the new lock. [ 118.351470][ T6217] [ 118.351481][ T6217] [ 118.351481][ T6217] the existing dependency chain (in reverse order) is: [ 118.351488][ T6217] [ 118.351488][ T6217] -> #1 (&dev_instance_lock_key [ 118.358584][ T926] usb 4-1: Manufacturer: syz [ 118.364345][ T6217] #3){+.+.}-{4:4}: [ 118.364379][ T6217] lock_acquire+0x120/0x360 [ 118.364406][ T6217] __mutex_lock+0x182/0xe80 [ 118.364431][ T6217] dev_set_mtu+0x10e/0x260 [ 118.364448][ T6217] team_add_slave+0x8b8/0x2840 [ 118.364468][ T6217] do_set_master+0x530/0x6d0 [ 118.364485][ T6217] do_setlink+0xcf0/0x41c0 [ 118.364499][ T6217] rtnl_newlink+0x160b/0x1c70 [ 118.364523][ T6217] rtnetlink_rcv_msg+0x7cc/0xb70 [ 118.364548][ T6217] netlink_rcv_skb+0x208/0x470 [ 118.364572][ T6217] netlink_unicast+0x75b/0x8d0 [ 118.364594][ T6217] netlink_sendmsg+0x805/0xb30 [ 118.364618][ T6217] __sock_sendmsg+0x219/0x270 [ 118.364638][ T6217] ____sys_sendmsg+0x505/0x830 [ 118.364656][ T6217] ___sys_sendmsg+0x21f/0x2a0 [ 118.364673][ T6217] __x64_sys_sendmsg+0x19b/0x260 [ 118.364692][ T6217] do_syscall_64+0xfa/0x3b0 [ 118.364718][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.364737][ T6217] [ 118.364737][ T6217] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 118.364776][ T6217] validate_chain+0xb9b/0x2140 [ 118.364803][ T6217] __lock_acquire+0xab9/0xd20 [ 118.364825][ T6217] lock_acquire+0x120/0x360 [ 118.364846][ T6217] __mutex_lock+0x182/0xe80 [ 118.364872][ T6217] team_device_event+0x182/0xa20 [ 118.364899][ T6217] notifier_call_chain+0x1b6/0x3e0 [ 118.364926][ T6217] __dev_notify_flags+0x18d/0x2e0 [ 118.364944][ T6217] netif_change_flags+0xe8/0x1a0 [ 118.364962][ T6217] do_setlink+0xc55/0x41c0 [ 118.364979][ T6217] rtnl_newlink+0x160b/0x1c70 [ 118.365007][ T6217] rtnetlink_rcv_msg+0x7cc/0xb70 [ 118.365034][ T6217] netlink_rcv_skb+0x208/0x470 [ 118.365059][ T6217] netlink_unicast+0x75b/0x8d0 [ 118.365083][ T6217] netlink_sendmsg+0x805/0xb30 [ 118.365110][ T6217] __sock_sendmsg+0x219/0x270 [ 118.376757][ T926] usb 4-1: SerialNumber: syz [ 118.382393][ T6217] ____sys_sendmsg+0x505/0x830 [ 118.617511][ T6217] ___sys_sendmsg+0x21f/0x2a0 [ 118.622734][ T6217] __x64_sys_sendmsg+0x19b/0x260 [ 118.628197][ T6217] do_syscall_64+0xfa/0x3b0 [ 118.633230][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.639646][ T6217] [ 118.639646][ T6217] other info that might help us debug this: [ 118.639646][ T6217] [ 118.650313][ T6217] Possible unsafe locking scenario: [ 118.650313][ T6217] [ 118.657758][ T6217] CPU0 CPU1 [ 118.663150][ T6217] ---- ---- [ 118.668518][ T6217] lock(&dev_instance_lock_key#3); [ 118.673736][ T6217] lock(team->team_lock_key#5); [ 118.681208][ T6217] lock(&dev_instance_lock_key#3); [ 118.688940][ T6217] lock(team->team_lock_key#5); [ 118.693891][ T6217] [ 118.693891][ T6217] *** DEADLOCK *** [ 118.693891][ T6217] [ 118.702029][ T6217] 2 locks held by syz.4.87/6217: [ 118.706963][ T6217] #0: ffffffff8f517e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 118.716032][ T6217] #1: ffff8880327bad20 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 118.726154][ T6217] [ 118.726154][ T6217] stack backtrace: [ 118.732054][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.4.87 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 118.732077][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.732087][ T6217] Call Trace: [ 118.732095][ T6217] [ 118.732103][ T6217] dump_stack_lvl+0x189/0x250 [ 118.732134][ T6217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.732157][ T6217] ? __pfx__printk+0x10/0x10 [ 118.732174][ T6217] ? print_lock_name+0xde/0x100 [ 118.732190][ T6217] print_circular_bug+0x2ee/0x310 [ 118.732216][ T6217] check_noncircular+0x134/0x160 [ 118.732242][ T6217] validate_chain+0xb9b/0x2140 [ 118.732266][ T6217] ? __lock_acquire+0xab9/0xd20 [ 118.732288][ T6217] __lock_acquire+0xab9/0xd20 [ 118.732309][ T6217] ? team_device_event+0x182/0xa20 [ 118.732330][ T6217] lock_acquire+0x120/0x360 [ 118.732348][ T6217] ? team_device_event+0x182/0xa20 [ 118.732371][ T6217] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 118.732394][ T6217] __mutex_lock+0x182/0xe80 [ 118.732416][ T6217] ? team_device_event+0x182/0xa20 [ 118.732440][ T6217] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 118.732456][ T6217] ? team_device_event+0x182/0xa20 [ 118.732478][ T6217] ? __pfx___mutex_lock+0x10/0x10 [ 118.732499][ T6217] ? __timer_delete_sync+0x218/0x2d0 [ 118.732514][ T6217] ? __neigh_ifdown+0x238/0x470 [ 118.732540][ T6217] team_device_event+0x182/0xa20 [ 118.732563][ T6217] notifier_call_chain+0x1b6/0x3e0 [ 118.732588][ T6217] __dev_notify_flags+0x18d/0x2e0 [ 118.732604][ T6217] ? __pfx___dev_notify_flags+0x10/0x10 [ 118.732618][ T6217] ? __dev_change_flags+0x4cc/0x6d0 [ 118.732634][ T6217] ? __pfx___dev_change_flags+0x10/0x10 [ 118.732652][ T6217] netif_change_flags+0xe8/0x1a0 [ 118.732669][ T6217] do_setlink+0xc55/0x41c0 [ 118.732684][ T6217] ? trace_sched_exit_tp+0x38/0x120 [ 118.732712][ T6217] ? __pfx_do_setlink+0x10/0x10 [ 118.732727][ T6217] ? __lock_acquire+0xab9/0xd20 [ 118.732747][ T6217] ? do_raw_spin_lock+0x121/0x290 [ 118.732765][ T6217] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 118.732784][ T6217] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.732806][ T6217] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 118.732825][ T6217] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.732846][ T6217] ? rcu_is_watching+0x15/0xb0 [ 118.732868][ T6217] ? __mutex_lock+0xa6d/0xe80 [ 118.732889][ T6217] ? __mutex_lock+0x51b/0xe80 [ 118.732912][ T6217] ? rtnl_newlink+0x8db/0x1c70 [ 118.732935][ T6217] ? __pfx___mutex_lock+0x10/0x10 [ 118.732959][ T6217] ? ns_capable+0x8a/0xf0 [ 118.732980][ T6217] ? rtnl_link_get_net_capable+0x16a/0x350 [ 118.732996][ T6217] rtnl_newlink+0x160b/0x1c70 [ 118.733017][ T6217] ? netlink_sendmsg+0x805/0xb30 [ 118.733044][ T6217] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.733073][ T6217] ? kasan_quarantine_put+0xdd/0x220 [ 118.733093][ T6217] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.733115][ T6217] ? nlmon_xmit+0xb0/0x100 [ 118.733131][ T6217] ? kmem_cache_free+0x18f/0x400 [ 118.733154][ T6217] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.733174][ T6217] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.733195][ T6217] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.733215][ T6217] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 118.733237][ T6217] ? __dev_queue_xmit+0x27e/0x3a70 [ 118.733259][ T6217] ? __lock_acquire+0xab9/0xd20 [ 118.733285][ T6217] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.733306][ T6217] rtnetlink_rcv_msg+0x7cc/0xb70 [ 118.733330][ T6217] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 118.733351][ T6217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.733372][ T6217] ? ref_tracker_free+0x63a/0x7d0 [ 118.733393][ T6217] ? __copy_skb_header+0xa7/0x550 [ 118.733410][ T6217] ? __pfx_ref_tracker_free+0x10/0x10 [ 118.733431][ T6217] ? __skb_clone+0x63/0x7a0 [ 118.733450][ T6217] netlink_rcv_skb+0x208/0x470 [ 118.733473][ T6217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.733495][ T6217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.733521][ T6217] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.733543][ T6217] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.733567][ T6217] netlink_unicast+0x75b/0x8d0 [ 118.733590][ T6217] netlink_sendmsg+0x805/0xb30 [ 118.733616][ T6217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.733640][ T6217] ? aa_sock_msg_perm+0xf1/0x1d0 [ 118.733663][ T6217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.733680][ T6217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.733709][ T6217] __sock_sendmsg+0x219/0x270 [ 118.733730][ T6217] ____sys_sendmsg+0x505/0x830 [ 118.733748][ T6217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.733766][ T6217] ? import_iovec+0x74/0xa0 [ 118.733787][ T6217] ___sys_sendmsg+0x21f/0x2a0 [ 118.733803][ T6217] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.733830][ T6217] ? __fget_files+0x2a/0x420 [ 118.733844][ T6217] ? __fget_files+0x3a0/0x420 [ 118.733860][ T6217] __x64_sys_sendmsg+0x19b/0x260 [ 118.733877][ T6217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.733896][ T6217] ? rcu_is_watching+0x15/0xb0 [ 118.733918][ T6217] ? do_syscall_64+0xbe/0x3b0 [ 118.733942][ T6217] do_syscall_64+0xfa/0x3b0 [ 118.733964][ T6217] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.733985][ T6217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.734003][ T6217] ? clear_bhb_loop+0x60/0xb0 [ 118.734022][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.734040][ T6217] RIP: 0033:0x7febb918e929 [ 118.734058][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.734073][ T6217] RSP: 002b:00007febba0bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.734091][ T6217] RAX: ffffffffffffffda RBX: 00007febb93b6080 RCX: 00007febb918e929 [ 118.734103][ T6217] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 118.734112][ T6217] RBP: 00007febb9210b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.734122][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.734131][ T6217] R13: 0000000000000000 R14: 00007febb93b6080 R15: 00007ffd9b1d1428 [ 118.734146][ T6217] [ 119.344127][ T6217] team0: Port device dummy0 removed [ 119.355391][ T6217] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.376303][ T926] usb 4-1: USB disconnect, device number 3 [ 119.448929][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 119.955734][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.