last executing test programs: 31m55.093196191s ago: executing program 32 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x202200, 0x0) r2 = open_tree(r1, &(0x7f00000001c0)='./file0/file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 31m33.385581061s ago: executing program 33 (id=202): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1], 0xfc, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x400000, 0x8000, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="aef2274aaa3571a2f64d4b425e82cc530437d5e8ec036e82837dbc2aa4b8afe833a341bedccccb72d33cc1a3d7063e57d74b579be6be9808e4eec720496335e176424ca94919153fa9d1b8a824a8aaa7f695ed92f9a730b42fed46b1f0be01eefe4dccc11cc7342d03eb81b955a7775db5037357909b5e362a256050cb03b2631d0aeb07d033f4710181432a5af194a814a792b8af68725b453164fdb89f67b1d249d02830bf40bdc17ca9da26f8cd992a34a3cfd7d0794845817b7df920216c1594773aed966964f74288164091dd3d375bbc5cd7e7922c3ba5a45975c20d96383ea037f18b478534d2c3617aafc13bf6190754b1575ad930894969b70771bed2f3b543f00487c3c42512845266b9ca8db1cfae189fda8103e464c55e367c0f8094a76547b7e4e64fc2bf533f3c2b22b11df6497a5f8f08bdc02d8f3d3f57c4330b909f16ee8d669fb473ca1d63cf0dd8c46efa31a3158f35d4011acf331aa79c4c381cb67f702e8eccabd2fe716af9bc2db4096568c0f663f4db02e3895dd12b341762a4d58df7f884d713418354e7f1f918c3760f197c472cd45aae7a6e020f5beb480910b0ebaf6d5056fad8d12abb5527abd7fe2d054dbc98a8062816a885b4f4787668e38609afd1849413881d166004c85b34e0044fadefb5f07d9257bfb42dc247a829b42ad6310cc244f79938ec2148705150c1523b3f4d60c65e280a183a2cceaf2fac6f83baa33d6530b8ad96496a1d250d6cf15f6ebb459c7795b5739a8135a8d83dd29147b3c98e8da3fd45a77b3876f5e6d1bd919c2abdda94f19d68eedef09a8f60f046067a3d63f245df430259ddbee316d721894b0df57e00ff0f192fa3450cdd81175f9d9b861fdf723524202402f3ac4af74f8aae5a9d9dfdeb91d530db93322498b20821e1341c83d0fe213cde72e5c0a420767765cb293da262dd8b4fc34d00d5f80258226498fcede4f039c5e0d9f61e4014fbc6cf78881743720c2b31f1ce76ed507e85cbabf80b8514d49e0eac69009c874777a5280167d5fb50a5e28692d74aa68426a7fe516ddd2ab9046fe58ed3eaac2af6cae309145207b00f123dfb1665462d60885dade812fd47f8742eeb00b3c45fd1464c24d13601878904ae7a75af4c22daaff072cf7168c8d513e277ebbd75d724c5e29d7c99077ffb2ab9951f0c4bebf8d1adf9f21a4539c9ca18a959fd0eebfc36e6fb223306e0a08209295c73f005d7832fd0ad27b9092448f14146759619aa07b387d77ddc050b51b56c9e368bb6d00bba934765f0643998535fb4d6f260e51440ac23e7ecaea37d26598ac28445853d8f9838d305f31b84984e1ba42b1d00bfb1d119a363606853ac84c81db27ef582fc2c917cab33028f26ccd05977ad50b100c35bb05aa1cb9792837d421fdc2e689f40c5dee415cded0f5aec85c415873502e99a76eddaa5b3dc35e4cec27d54b2200ab4eb5035b65ccfd6a31d8d5cd6e63d51265f7ae0ce0224ff6f95c74c7ce8a650ed2c6ae28bd8b29d2f662cdf7999641e341719927cffea1483ad026c705db203e5edea57414e66f8e37fd3aa1303eae825c0ca74e5384dd24c97623fa3a9cc520400000000000077e4a10f689a8cf6c951e3cf9147f7da39f5100323bda84c5b020ff3d2ebdd0f4709c8f3664ac2a9238226568bf3998999662e1456532af383af7cc4aa92b95547e3d6cf79c3853c9eb268764b00f805afaeb840b23de031e7f539c86654159da3d453cb0d1c9380e8be66ad86c634b3be7fd97a58e26c35d1c17cec3813b15737a4f3b984a758a641a2a26933d81bede453efdee6792031f0ce8ab0b2bb7fa9fb76f9ca884ccd3a374d27f87c66a72b45c4f39b132881de49d63a3319ef7a6c249cf7dc3ef1a4e90e25e87d10c4126a89e7d6eb538677ead1fb5ed01e02628ebefe2fd7f9375366c656ec9dfa6a7f497c5d29ad333270b1d2fa2308c2e814234e8610f63485f0ce9d6667c7e219fa0c582631c3ea178bfec63bbaaba4a52a6ec5f66ae727e99f45c9f4098feffca5722e5355b3ec37f8bb9b3dc75f1f550c43e297751a108c392616b6b65c652d9be3b1bad3dba6fdf356eac56b729b94f13a4c2445d1eab9f1670964d23ed3b709813cd9600a9c18d727c74eafcbe71f1a9468947139606c221958b8ae2a8fb63a0ae2f928383ec137f0de15a89684b7706908897e0cdfa52bf14a9432eb1906670471182978c00b49facbb4f95bfa0b8c73fc9e3ba1ecc5294439f931dbffb081fee966bbd30aa690e4afec0afd4afed36c570fabeb738889618448e93976d1de98728dc0ac2cab575e1bb2a72154573955ed99eb86831970c2d7317503d6c50d1493e44e5c731c2b40bbcad04a53bacb983cbe53103d837baa32dd554d28a4903ef173f9d758849ca32bb7df61d13d639d55ae27ffc7ef21e1e15c083c4557a3df8f7afab4beb959698c560fcba9f71012c853ca3b7633f3bda7ce95fdb9926f2a2f5c28688f92064c691958a42ab0c7518a04cdc6545fc1fba9eea43abf80a8b4fb97a8c88c8b60a5c9d57d58bc490c81edb8c9a2fcc4fed5a2478cf3967cbd2018c1c9304abfd712e7845c983f2ea40bd9c5e43694538b32b832627f222fbf4af3d619938358fbfb06b5e56aefb008b8a3dc20407a624cd28752553dd666ebb8bf46ee926593ba792f0ff99cf4f57ad90f6c5749f9f9e68fab43aa2388fc837e1ae135ffaf04f8b99911658ff3513131b08ac08c4e17063a66a448e10f6525557f13aaa697b56d4da690ae734f8a324e3c214bf20eaceb62f91855d9cb5087e0fa7f5b5a3237a0f4db0464cb255a7bf266a0702f3aae88f6cff31ef1e5a3046839fa17b4520232baf8627a39a2e301342199434f522ed8d04072a848a1cf23f5a5dfb8bafe4d1b5d38704ec390cbc38a4c70b2b955c6b1775b7f32e286582dbd3cc093709fef1ae99b0eba278787b709445e93b4ea3b26e077b9c2305049afe0e439cf814f6c7a538067fd499e3cc327df64107900a57254b4b4e0752129baeab2cb155f02b1532be72fe8d9f546cff4423e53cd389084050d62fb12a25bfaecf238e4185543f4b143a59ea52e146f7f1c558222c4d84931b2caec643f744f1a986c5dcb33dffcb52670a193dfe2d27d652bff1d2f2016f2958fca24452e23a5dbfdcd779e660a0715a03aa93004a6747ae505de74a2fa782651083a90326e0fd6b4fde44b65ef43c1a03e71acb13b41278c0a5437ceac64974eb0a2dd3322f3a81a719cd4eed104871fd37985056c79a3ccde7fa91f2efcb941ad931b33aa530447257072ae2f3dcd6b4bdbda976af51107fc0aa493acc2b7300b73baf7b1e6656cc72247f0878ff9cf5eece1179b3ae5b2ff23e01167234225a2bdca47f1bfbf882d9d04614a3b29310c9dbf2daba7a27c6e11230087f67374237e56b366e8b50b6f9d8c10a36c896afb3a414667d3b1d66e796be075ace4a624c0d4ed5f635635e9057ac0d34fe79835dc15482df2f7b8acd72e80b283087bae78f9cb9b91c354be64b1e99a46018f2cbe1abf0732113347c77184f5b64ac0c4c2a5b382c055b0e5b4e36c5b93898be0fb8bc1631e9997404bfc529f56e809824dd6d207bb54d233a209a51b53f545c1002d10815e14f30c8048bf51ca1cdcf99fca0de567f8ff2610b74a130a011d0cd2ed972510f375765f1ffba5ff31ec5d307fdeffa3ef28bb4f0cd64ea525316aae57bc2bd380a9bc19501fc0c802a217ffbc050c401a9d6cfd71fb6ea09490e932888dd23d3071418263b5d8a6bb5b1493f5ecebe76836ec0e013dea22042d9cab060dbcab4648bf59d8b2f01a254b9b4b84f1264c0c8157bee5e534f614e1efc3fd98153fc766afe9aaed148803c80e5606cf32dfbe0c17ae8882ac9ab3f055a4bec8c0ddd01721f6f436eea8a9fca2ce1a14acf96af54b9c0a6535395be965f2d715339f16d7d2aa8d2d9e0e5e76f02070dadcfc8af662742bf808c6c7899c6130a8506ce753ef62c22098b1e3bf6a062e50b55d5be26aaae653c6666b56862aa371815f4dfddd9bb3b2c23a5b0a589d045ca6fcc4f05ac1c50f3e66a06f5d09e1ba202730fa7cf31db93ae5f3d5d448e179afd4edf1469008212448e8d51c9d04287eb00cf81d161d9ff828e14123056633e1d78455e1b43093f3a6110637ee2a60e2fcef644190a2ae00a2530fa156a2b8f422180d6a074a6041eae984387d62202b0bfe0ca538cf4c09761cb69fb90aee57d4c7f403b34bf4283db91066cd84b177d55c2c1e3baf10781f0ed66fac5725b176e93fb4ad0697a27712a437e31481e85ed0d96fb77d801219df80a939e0367889d5ffdc4d6a617c86a6935205689dcdd3b537ce91f4dd7c10427502952dcc3a14c0a5b8a04b5d679a410f7e85c63583c691a2a9dc2fdb0911272f192bde2632d70f32b2c1070f454cc53c06e35e687a4093053c56146565266f22bd34dce87675f9649d8699390d302bb5d5025862d8c3c7f9718e5059ec4025e274e7aaea8f76af3309d56131aafa45ee13119c8c44d54cfab501afd59324926e36b6cd2a04d224aab44d66f05325d4bebdf913cd8b74ccd427bb270b28448d0183f4826f6045a96a0a16343dec9d0605e92747dc2c874608776769239ae399cda45bba6f99e00c483b1f7999327d4daa8176ba13d1f8bea9998d60f7b2c8c3aeefbcd43bcdf5df2897549cb17726fbcf43a7d1f67640f084e9873a7ee9804eb4ea58d49b7d8bdfcde55713a07830009719c15eeda90a2be29cadd63a051097e3dd989a732fedbcdc3fb441641565fa8c22f04111c648aee2dc3feea61da3c2b55c76be3b640537f579684f1c2b2cb00c84eddd2c555dc9e9c660a631ebf0f095bc03530ec034a532a458e217c05797ab0c18582c49dc738dcebd87246b06049e8b186d438809c6a6bc7a10ee3b3494ef781771ed5235cda19ed107a1d647fba8079f73c2a27866126530dc4b531119a99f881d001f6c3ec78128b62d65cedf2a0a505b28b3b1dd27bda7fb5cc9acead0bccfbc9c6c88454dd9ddce793b868dee01232eaf36ea0629b0e3eda2e29c4cfc2b52dcff47cb01846166a1a52893dd9a884e9629cb3d35f438347c63bca391b5826f0a4c71d9b8fe0894678cc08607704471e61063924ae090a34579b118b4cfc6f21a82d100c72c93bc35537ef5e5a4c60327b99b9b488b2f46a16b2cc43715bac5148c0e193c06876d46cc2c6da2b3a1b1b917411503818a12bd0dcb2cff6e1a8339d6d551d64f0ed333eb28e887b0d7ea3e8a03590e264ed6cccc7031420b81ea80e8841b0e02fdd0df7515ab5651245500e7624b996a27380a14d201fdd1ab5f024b866972d8a1b689c88b79f38e914972ad76cfa0489ce2596027abbcf33ca7dc9ffd00ab92286c7d8e815b1a208789fac06f9033f99b40ce219f0f454be714f1ba2302be2ee4d7ee16e66f9dd0f0adc13d45f1360c9b95a48d432f99c7c2cf2bc2b11146ac5ba2581647567035113ddfa32d7d22f41e812e9a090d3188e6ff84b808223be36df09bf74175c6a48b9a2de777b1295f80306eac7a7ac4294c98fa9dfa8c20311369c48aeb7b79226d8f619118eee6225d9a0ebefc2d05bc74009f63226cf8a02e614cc21e630fdd07b4f669c4922e15034f3849502374aaa118fc05d3b23ceb663d7ce97032e79f824025e5eebb11886b4ced0ba2c6b7db3f018255452b345fcace69f504c397b9d5fe6ec27f2b9b173083cd4a202324ffa7e976bc8aea5d6e052407c5662c49470ba9eb64a9c3a7680d385bb9c2164b9338f8764cf63c31d1caa2e2a4699ab84cea5ad693338a14245ec122422800193c580eaee1aa84b8b83451c2095b225aa4171ef8de738e39035357ff22c331262d05cdda4b2c72cbfbd1ecfb692196fb32ac15aebaa20f4cebc65b937d938d71f1f6689a74b379358ac521d6964058154c77e2c1c6db2f8059668fcd812d7c30fb9178dcd26bd0ecefb6c526ce45039d492d5a1002f66c4c884373dafedad232d5cf2137c86a8bbec2d238a3b73e36c73baec8d298a11b3e6b3107a8a9ada848a16596cc33ff2ac298f6b11819784479598df918c36b49acbe7187dc35210431b23c0ed44313567ba9eb646ff633a8d3fbeae67479169910ab45d2f177f6a937cb318b926f80b8c6a439ecae706419686fe838dfd9988fa65909d5b7b4a5666b63aceca65cfda662b6dae88aaebb1b8faa86cbbb24b14acd559a8eb1eab51815964cf3bef6df1f216270d0e6807dde51aeb6ff8e49db5f6b673ca00e9a7966e1e3469ed0d2bd613d31c3b57279ed315d629fb7a6e065ea85d11f6aaf1ac6da1fd81ca2a573d722dbdcfbbfa614d79eb24238711c09508dc50a70e5602fdb768c8449b2131925314fba79de6b1b73a176be70fd08ae7993ea3ef240e51e31025f13d3a866cc24c24d51d5f692932527cbb531c628e422e64d1f33057015467d01ed592c5c3a2f63e9db1fbe4afa9831e23966337899d5426c7ff923adc019a7537414e6eb482c538477e8c2bc61aadd48b90b5771802b914031f126f850371cf5a7706a8e2504ccef712773cbbc773d1f40611aae268898bd9339a832aad1e01b3694fc88450f0eb9d279a1531816ff5f213f375867b987882e9bcc89a997c97189a62d4b84850d3136091e44773432b3cb3e1d31035cd2869bf2e5f89a7a066db6704d9950641ea2b922e2730b3c207e37f61581190111252f33fae16945feccb70f12bc487b1b8996f76b4f81c6d7a8389af76db528711d16150c5cfea9e4936c260b72bc27af1db060c9d62676474fd7f6956e41fca51bb4e0a278c01056225d2e0e9993b50ed503e559d3b519e4c72e48692f52a77cec2d4ffabc24ccca06b25a9efbe22493043eb79ddbebf6e0e3013de77f8c646abeb67e906c6a0af27fae50d88a70abed2a37e30a407095b07682a0892ef96eb18b61f904a9edc0a9ef5c4f365dc27c0442a8f7a89e6553a4dc061c09769fde1fbafea56a194ac24eca91acd2a7d91f802cc21b4a3deec2ff395ac28606e3132c673b0cc0d2eadea0955fb8e57a2ea9bf8861837c93b4b609b1f4822b724a9b31733d47d4cc292352b6cb2bb50b613923749600197b5f4797ac82b79d5c98a7e782c5360506c8e8a7bbefd66ac92a1766a2e0cc8886492f06473224cdebd7a6ad803d1a0fe39d00951f6c7a9b094663d881177386b64f5fc3985bce4a17e9217a1946e84589af2ba56810e15b835484f637650cba1530c5438977af634c75750fd2f77f9dbb0cee56f4b7aaa3b4a34eb1bc93ac11249191d5a8b17478bdad56f80d5d3c531f86ee969ecfaefdc45e5d588cab1f43fe421ea3e3568fc7cf3304e9833ccca469b70da619f1ed0851a2f26297a2c061ccc4270b07d6e81e52d26b60b21de9139a740bb7a7aac550ab0ab0029e8fafd77c4a27fee0f77a660b03c76652c109b6276495d24045f00b7181585404ecdf9bede3288373f602831cc5e8c2510f638ac21328b82152af0322e2a5d91d8ce37b7d3afb9b73f90c086d26fc9d0295c6c42200509dbdb780bd1d50f64867a3208e1b20bd7fcc1681fcb40b588908b51255f0fc4d2b7ba86e8a929305aa1111b237c75087d3de02084e11abc6a20c4c7268b8be1558afb0822120742493bf33c056c332543d2eea4d18e5b0486a669d3624d135e8b432d6bf0e0c72bb2bfcf3b71009396ab6c5e639de506bda4985dba6dc67ca0c25553df48ba9f4c708283bdaa7905f98f1a756d86c94b60db11815332ccbd6b6a7b958ae738efec09597952829843025813a4733f34a1abc3c63979358c43df4165a302ed82988070a0f496aa81c7a0971d85d4f67aa4fa11253a956f8e5af31f31520c8a95c3c4515846d5aa07985126212e3d8b6e6350f0d14294db6655bda90fb2bde863716e584fe85115a79d90a01913fe3f307b8816985ae77ecb73e73734af7cb8c5eed2ecc2009cf8eb43793faad3246cb223a7a88704817b800b0f842c2b46dd17829116883d8d4f8b2e8c55c8bd47d6df9c622a5d0da42a4f3c4c773a9a885565f4989ca81da24ed7430f981100021d7f72dedd572e53941bf34ded3c7a642bc32d46112af9195bb0c2d0e969c04a141001f0399ffa7d896b47eb68ca851fa8c0fe368c945c52658be5cac5f582ed06b20e5f6cdf3d4e948b072c7c451e945f851a77248e883da919ae3e0d76ceaf7fe0b2d718a47dceed35f2a212363c565a1099db238b5140b22bc0dba39c9fd3e1b7cc89cf8326e81f515843db90cd83384c19738ad9cc301ca018c59bb887592ea89ff7d3746083c39bf0eab4a47824a5474600d8655644a64cfe0c2e7694d7be85246af80dc839392a1ddf0b44d5d3568adc814981554c394f2fb4c6b3bcfbddaf875c613fe499df7f9028582130b919abdef0e8948f0685ec5b043948a2ba53a61b7d29180933014e9c25b74297e8bb36afdd8fee7241d00924608bcd6cff45468f8776e5e21fa4e7a2186bd461f26c1b625b2c3ccc0fd9cc808bce477f66adf3d584dce667beaf88ea710df35173cdcdedc11f3c1abe4f2811b298cab8ac795632cf1f8248e5f425ca70836146075a1f2d23699c521837f33f81cc87a3b31fa57164ecb4ee940d6f973b473917871cd193c5d348d5b9705253b0677013fcb7d9f7dd49c452f1cc608f5a2b4ebb74dbb7291098d81b1b059b4c88083a796e9f5a416736030ac5d2f1300d3d70732f6d824985b34ed36240d17b340039826131c9ebcd528c2620b28f0cd8c47971a56f4f1ddfac59910a416d0030417c2f6ff99533f589438bfdd209d38238e8c56b803289084f39a4f21e44c7dbc09a77049adeee5854947fedc1db18a88cb7143a16d7d7a61fa47331aac36407d1191c38c2088d8ca839d0f64f060907c668dfd4cc928c723cfa98a685e28882920e056ee340acbb283d8faeda4265feff032ed47f96ac53ea08aba4a6b6f6a3da53ab6a276c0f66c36409eb738fee985c41a74c841ddbfe093917542ff33a5d20da262e491b20f0a510877a34878ecff576147371c2512c6bc1f1fc0b6a9e9cc0f9fe3b559e9e31b506970841084d5ece3480c37f393574f28743bcf1a3dcd3a9dd5464d73a0c1908ea26e2b3a92556d4cdbcbaad5b4d76a71ecc42d0cb54a8915bd2904dff36f1540cdd64963257b4e4b9a0d4b73f960c5aef98224ad015f1f8ddb083e0a4ad81060772ee1c3c23c320967ddd8f776027e9a9d0a92cf19fdf5c49a2e1e99e3448e6043e42b13afbcc2911d235e4a0f96611374066e2aa0a42406913237ae81fb58a362d99f522084fd529f6b0a5931e2ca99a7f5fa7fea2f1cc5bf2742aff2e1339dc18408c48df52883c46178589b72ba39f63e3a7f40bacefcba8454069a2b8e460f7b6dd0a743850825de3ec26ec302cbfcec692463a179aae128dd9b49160aea4b7f611d5eb21fe16f1584a82b1f7de171ecefb809a09e661e7a078f0ae1229d12b511c88df141cb15461466b0fef51ee93a74517598cd6e8ca6494a528973afa1098a350157fe75cc0be57770fdfc96f17e30fd2ca5fff5e18402ef8a6cc1f65a56b237aed43727bfd1e163a2a60dfe979b3cf9760240ca2f7bfa76b34b2b40fda933829ca6458cdff0230f77dd0a2770e8fbfc16b3d385881cbcb189682b99d351270b63c432b15c4935603e05eef3f384beebd0dd8ea4c2e919f93eb62c11978313ac0973fa8d096195c02954db7bd1db313e040a07ba475181013066f557495b2e9b0fbc205bfa074e7dcdbefa38d178da9658d064655f1412498e2047dbc6e99090835291ab982822476087b694a495ead1879b575a98128b459f9855be802925eda28e65b8dbe7bbe44fea75b41254b5446e60fee32df9d8c676bb4ffd958c82ec3d74ef2eb6c4c36e5c184593ce62c0331ece679e588264ce5b8c4d6507768eb4d31888480219779546d99536312971ef05e8710c6e0d4581253334af6dc3d6ce4fe44f1c96da50af4d1dbd18042bb5e8cd26bb03b6e4d0167f8c1ed7feb94b207865fe6d92d390b5124f17241cf7ff286a83520db99b5380384f666622d547812802e7f5829be08ffbbc51c91c2a532ca9fe3895bc27fa7804b7b41f60fdefe1fbc79c24dda59b91979279695eb785cf3f34c3b18e31b6d07926625d1170cafa1b552304d0696d432c59baefd0c1687bc0a01851d3dad8152994257819ac5a78c7af1f1cbb106a27b759d14cfcbba865a8708b203d2fee5610dd30842f80255c88f36824c26cbc478a79864beaffb1e68eb61ed157935f0d8566029113307f1ee53eafd7b3dd2b90eed86dbf52f62e9755717fa7c209a981776977a7eb43f2fee147b387538273f5801a511eeae1144b661c53dbc2df24a238c1cc5e228f60b740cb9b880e9b5b41147b2310562eb777c6775ae0f295c31a22d445727acf2fadfca2aa12df9bfff626454dfe025ecebe8368cc17707d1293db27fd4f7250adefd2ee8b1886df3771560fdf24075bf90594ce4d2440995625f9c32c4dbb85c2e99371e520fac491f4d6671a55e2cf5c9ad8a9fae6ede963acfa586b5173e46d71efba2e21b2699a0169050ff7544beb5f82ce69666d3d129b8eadb11aa72a56b822c9cc85288cadbb140b1502fd09167e2ced58c738d4b54a67d2544d357b9035382062b6f979dac0943bfba726fe0206ba3d9847e93f22ca284396ede878e4d126ba2a5a8f7deef86bed1e89fba087605fe02be1802c49e9b0cf18e7ab6dce52bf564b099f864e81bb7e559bc1e2c27f85a76af30b7369b7ce61e12a86e4e38a904ebf5dfa692b0af4b70a779becbe35956eae191f241c24295af5bac1d82d1da2d28462f1c02c5fb19840027a28387a158ef241fd57f6b6fe74e6dede537c716b933cdff7d14f697410e74844baad2c6ce57f9fbb4e44ca433dce3c2a2950849dbf9f7d81cd785f684c21877cc61016702850ea48ade29fb91e256ff4432ce6271ef2460b09ceaa2d08170fd12dfa96ece57a5ab7de5c26e276682772c70432d44ff12831a518e1a421c1250e9df750d550723690d28e0454bab415548176c9b5da5a54585366da24fa9093a891dd8c41b1db67897dd3ffd69c724e0a21fd1054c804ed4d3c73d362371b03e65c535c08dd27a29cff93d3e7bd0f68cc4001a8bd347e1dd13604578f3b213421b57c38fc0ff68267a3eaa3746b5ff5ba8eeba07c49f5029b92199c3f7b79df9cd523933af5ae4742166365217ef76291dbdf7946b01600dc59990a3121843d0d96ca43e9c5742e74bbec713dba8362177467aace17f75e3abb446a0f913bd09bf9e8d4ed69d60ffa93615386669c94d729b5e305fb40d7ca7f1f38af98432dcbed49c0b5744333e0622ec76d5a55d39593168d08d206751e49d2328efccb4af7ce62dcdbce35de129451133a0f7334097b0fe70b0372249f2bd3f80964b1086040e0f8971f41c7916a41f588d51438beff4a00550d3703f43639e80aeb9e6f58219f29fdac903cc20387dba5b784507f77918b7d6b94211b77bf280fe3653666cf46bbe6567c", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x0, {0x2000003, 0x3, 0x6, 0x0, 0x1ff, 0x3, {0x6, 0x4, 0x7, 0x5, 0x100000001, 0x6, 0x3, 0x0, 0x101, 0x6000, 0x5, 0x0, r1, 0x801, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000100)='./file0/file1\x00', 0xc03, 0x3c) ioctl$SG_IO(r2, 0x412070ea, 0x0) 31m30.745405486s ago: executing program 34 (id=231): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000840)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) getdents64(r0, 0x0, 0x31) 31m27.941240443s ago: executing program 35 (id=243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @private=0xa010100}], 0x20) 31m25.658887438s ago: executing program 36 (id=255): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x5, 0x5, [{0x10, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xd}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200080c8}, 0x20004804) 30m58.404387548s ago: executing program 37 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 30m56.487830264s ago: executing program 38 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) open(0x0, 0x20000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f79a202000f0174856526f30f09f3abf2d9e53e260f06baa100ed672ef2662e3e260f0565c966b8000000000f21f866353000000a0f23f8", 0x38}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30m37.712779497s ago: executing program 39 (id=575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000084, 0x0, 0x3b1}]}) 30m36.726106726s ago: executing program 40 (id=582): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x54, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2, 0xff}, 0xe) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 30m12.39427025s ago: executing program 41 (id=761): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 30m11.071548797s ago: executing program 42 (id=773): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84202) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) 30m9.737186375s ago: executing program 43 (id=784): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x705800, 0x100) symlinkat(&(0x7f0000000240)='./file0\x00', r3, 0x0) 29m51.763032523s ago: executing program 44 (id=860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x98000004, 0x0}, 0x0, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') 29m18.185859677s ago: executing program 45 (id=956): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x209f0000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) 29m16.04537991s ago: executing program 46 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000580)}) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r6, &(0x7f0000000240)={0x27, r9, 0x1, 0x4}, 0x10) 29m13.849952308s ago: executing program 47 (id=973): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 29m8.304968318s ago: executing program 48 (id=981): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x1000000, &(0x7f00000006c0)="04d280"}) 29m4.7077823s ago: executing program 1 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r6, r6], &(0x7f0000000580)}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000240)={0x27, r8, 0x1, 0x4}, 0x10) 29m3.909899434s ago: executing program 1 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000580)}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r6, &(0x7f0000000240)={0x27, r9, 0x1, 0x4}, 0x10) 29m3.094459101s ago: executing program 1 (id=985): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x16, 0xfffffffffffffffd, 0x0, 0x5], 0x0, 0x200}) syz_open_dev$usbmon(&(0x7f0000000040), 0xfffe, 0x800) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29m2.482140911s ago: executing program 1 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 29m2.375593149s ago: executing program 1 (id=987): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b13, 0x0) 29m1.901145587s ago: executing program 1 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000580)}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r6, &(0x7f0000000240)={0x27, r9, 0x1, 0x4}, 0x10) 29m1.646562928s ago: executing program 49 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000580)}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r6, &(0x7f0000000240)={0x27, r9, 0x1, 0x4}, 0x10) 28m54.406631435s ago: executing program 7 (id=991): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = io_uring_setup(0x4b66, &(0x7f00000001c0)={0x0, 0xcb52, 0x400}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x98, 0x298, 0x0, 0x298, 0x0, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e23}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r8, 0x4b65, 0x0) 28m54.065279533s ago: executing program 7 (id=992): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000580)}) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r6, &(0x7f0000000240)={0x27, r9, 0x1, 0x4}, 0x10) 28m53.221305481s ago: executing program 7 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r6, &(0x7f0000000240)={0x27, r8, 0x1, 0x4}, 0x10) 28m52.087490653s ago: executing program 7 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 28m51.784765308s ago: executing program 7 (id=995): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980", 0x6) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000664dc2650375a001f5456e2773d55a00000005000000000000000000000300000000010000000200000009000000040000000000000700000000002e000000"], &(0x7f0000000380)=""/161, 0x41, 0xa1, 0x1, 0x5, 0x10000, @value=r4}, 0x28) syz_open_dev$evdev(0x0, 0x0, 0x2002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}}, 0x20}, 0x1, 0x0, 0x0, 0x200448d0}, 0x4004004) io_uring_enter(r2, 0x2412, 0x0, 0x36, 0x0, 0x0) r7 = epoll_create1(0x80000) r8 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 28m51.321084846s ago: executing program 7 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000580)}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r6, &(0x7f0000000240)={0x27, r9, 0x1, 0x4}, 0x10) 28m50.975879733s ago: executing program 50 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000580)}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r6, &(0x7f0000000240)={0x27, r9, 0x1, 0x4}, 0x10) 7m23.962735031s ago: executing program 4 (id=3899): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x50}}, 0x0) 7m23.907089035s ago: executing program 4 (id=3900): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m23.829204292s ago: executing program 4 (id=3901): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m23.815980853s ago: executing program 4 (id=3902): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="d9e2f81c20b5ab1f360c1068f219d7d16d4bfe86eebd827261ed2f1a31f74649a3567a6a0e87aa6e2a454b4b2903cdaa902ed3309c198137ed7175ad705c4a7b74ee9198f6c27ebda5c55ec63283c02ef96064a6f86f2943b6e6ab39a470dcf8d595020e1e6f36b279b34a014a08d72d90c365f7ded1fd84a93a001eea1c827778a1eae724b9120583b1d01022055a799750f46d9ea96b6d92fc394bc0323f2bab7932efd5e115612b3db68bcfae28458fb913cf093fcaa678f2810370e71c5285234b8db8e3ca8bd5ad8eac924a61", @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1f6, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 7m23.619259689s ago: executing program 4 (id=3905): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000380)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000f3c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) 7m23.177260645s ago: executing program 4 (id=3911): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c0003"], 0x50}}, 0x0) 7m22.888816159s ago: executing program 51 (id=3911): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c0003"], 0x50}}, 0x0) 5m59.6262554s ago: executing program 8 (id=4428): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="1eac4d20f8509e8f36d2842c8fae7bbe58c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d0558de77df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bbbe0131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d964b0161c1856697820eb52f55c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d09d0f74e180df6eaa94651336e7713414e49956fcb68a973e8239e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fbe071de646385", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x585d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x2da}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0xffffffff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 5m58.465637136s ago: executing program 8 (id=4432): mknod$loop(0x0, 0x8fff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x2) 5m58.247533013s ago: executing program 8 (id=4437): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)="104b0b7073fbd7f77a846bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed1", 0x69}, {&(0x7f0000000880)="5c5eafd3ae55a73702d67c10bfd557d170162c4859f5befaee97f47f4be65587e1a5eaab43ac5edc4802006910cd7a153cd84b93208c7b1a625b3ea990092389b19dabe4330e730b2f6c9079049a2dee85", 0x51}, {&(0x7f0000000340)="195ca1e84c12829160283de4f634ba203fee4d872e86c3d5408dbae7edffb39f301f8a933a640bd2581f26fde59de5869a945b960d6d87a4706b64ec96592d5ea5e105bd583c18cd854dc50ce949f490816d2288b71f1384d3db8dd0", 0x5c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="4e6601e65215c622791c4bf404e49bea79da86bb1c1559ac36ae1afe229c64b2235b2a0e813739994b44a6c2865c2e6b70bd4aa7fd7a455fd55fda00eb32904d8bbdbb1dc864207ae1e3164281a58b148f903ab119a349b824a9fec5a1b3bb05558e6da76a28c95cb4381fd89b48ad02a7ac43e7cf91526d07c76752d441d17d827651f7153c5a20015facd0ed645ead3b21c43554e31110a67751702345", 0x9e}, {&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468ef760112d01b4046540dc8a0e9087b", 0x4a}, {&(0x7f0000000e40)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21650af922eaacab49bf078a3971194bf73af173a742171cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5", 0xf9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000bc0)="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", 0x188}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m57.31620889s ago: executing program 8 (id=4443): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="d9e2f81c20b5ab1f360c1068f219d7d16d4bfe86eebd827261ed2f1a31f74649a3567a6a0e87aa6e2a454b4b2903cdaa902ed3309c198137ed7175ad705c4a7b74ee9198f6c27ebda5c55ec63283c02ef96064a6f86f2943b6e6ab39a470dcf8d595020e1e6f36b279b34a014a08d72d90c365f7ded1fd84a93a001eea1c827778a1eae724b9120583b1d01022055a799750f46d9ea96b6d92fc394bc0323f2bab7932efd5e115612b3db68bcfae28458fb913cf093fcaa678f2810370e71c5285234b8db8e3ca8bd5ad8eac924a61", @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1f6, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5m56.279704525s ago: executing program 8 (id=4449): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5m55.821726443s ago: executing program 8 (id=4454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 5m54.567575056s ago: executing program 52 (id=4454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 2m16.745401399s ago: executing program 9 (id=5933): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8d35) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0xfffffffffffffffe) bind$inet(r1, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) write$nbd(r0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 2m16.696906273s ago: executing program 9 (id=5936): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 2m16.582144242s ago: executing program 9 (id=5937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m15.776225038s ago: executing program 9 (id=5939): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) io_setup(0x1, &(0x7f0000000280)) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") 2m12.952258661s ago: executing program 9 (id=5943): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m12.625329668s ago: executing program 9 (id=5947): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) io_setup(0x1, &(0x7f0000000280)) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 1m57.548427188s ago: executing program 53 (id=5947): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) io_setup(0x1, &(0x7f0000000280)) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 8.198890845s ago: executing program 5 (id=6393): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, 0x0) 8.073231436s ago: executing program 5 (id=6394): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x4c, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}}}}]}, 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="de4400439a9e8b", 0x7, 0x4000000, &(0x7f00000003c0)={0x11, 0x16, r3, 0x1, 0x3, 0x6, @local}, 0x14) 7.259583243s ago: executing program 5 (id=6398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x10001, 0x1, 0x0, 0x3, 0x1, 0xc, 0xb, 0x5, 0xff, 0x4, 0x4, 0x16, 0x7}, {0x3, 0xe, 0x3, 0x1, 0x4, 0x8, 0x9, 0x0, 0x7, 0x4, 0x6, 0x2, 0xffffffff}, {0x9, 0x200, 0x4, 0xf7, 0x1, 0xe, 0x6, 0xa7, 0x4e, 0x9, 0x3, 0x9, 0x7}], 0xbd}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) eventfd2(0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000016", @ANYBLOB="8bd2"], 0x38}, 0x1, 0x0, 0x0, 0x240408d4}, 0x4008014) ioctl$KVM_SET_IRQCHIP(r4, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r4, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.896602995s ago: executing program 6 (id=6400): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.031748626s ago: executing program 6 (id=6402): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000001600)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)="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", 0x3a1, 0x0) 4.310645466s ago: executing program 6 (id=6405): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e20000000052001000000000000", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.206392954s ago: executing program 2 (id=6408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) getpeername$qrtr(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) listen(r4, 0x0) 3.257200142s ago: executing program 6 (id=6411): r0 = io_uring_setup(0x3aba, &(0x7f0000000480)={0x0, 0x4178, 0x40, 0x8001002, 0x200003d7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x10001, 0x1, 0x0, 0x3, 0x1, 0xc, 0xb, 0x5, 0xff, 0x4, 0x4, 0x16, 0x7}, {0x3, 0xe, 0x3, 0x1, 0x4, 0x8, 0x9, 0x0, 0x7, 0x4, 0x6, 0x2, 0xffffffff}, {0x9, 0x200, 0x4, 0xf7, 0x1, 0xe, 0x6, 0xa7, 0x4e, 0x9, 0x3, 0x9, 0x7}], 0xbd}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000240)={r6, 0x7ff, 0x2, r6}) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001614", @ANYBLOB="8bd2"], 0x38}, 0x1, 0x0, 0x0, 0x240408d4}, 0x4008014) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.120503073s ago: executing program 2 (id=6412): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x7b7, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 2.92285334s ago: executing program 0 (id=6414): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e20000000052001000000000000", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.777033502s ago: executing program 5 (id=6415): setresgid(0xee00, 0x0, 0xee00) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000280)=0xf3f, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) close(r1) socket$packet(0x11, 0xa, 0x300) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) 2.67588344s ago: executing program 2 (id=6416): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000001600)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)="ba5b7d73de9438a204aed62b6bf2aa656c3d964dbbec67dd76b833e44fc5a4f92c747cc68f36abf57ae5e507ae2554c4c657a5c8d68128208e41baf461630345e6b611414036ffa21559f74df363b340113790228a1ac0c97a5903a11b792f5e6a58ab87b43affa230061b1b97675e5e4a830b7a9c1235833f2abe08324bbcf054d4c2427c61012dbddabd7883d678f42db50f59b6b46e16a40f0b134cfbdcda6cb3e5dc67241672b94f09818aa6fe9fc755b5b314a30172c4d74858a476a844d6292b9e93f2bc774618f1f45cac6f4254cf01836f6cd9e6673d8a17d6cb76990c9780d288ece071e3043144db1bc2bd18f7ca867aff32d74bf0c4769c4186427782e0028654be942eba7bcf42252bdb8dd902cce3eb2a130611f69da2ebede168da9c2522f12e75550a53160731ee9ddd13c30100036d3537c7a21ecadef5cb796ebc214d9d00282aed111404d7fa95fbeecf192a51388a5e421d6e6d3432b83d2a7719724b0d314441cac1b6f207d594c23d01542f1be41dc3c0393ff87f2bffaa707537da2e63d3373b13130746a228be8c9f6b0df5083400547c189099332dd8054c1f757f455a22f1da630dacf10dfd69b531e51646b8ef0a422af33fd8b354653232c77804c5223d04894a8892f6bd85f23176dc91462ca13a894cf241f8c016bcdf32f02c693c2fecd1800b62cec967d6babf2bd23a9418fb581922366fdb00996b98560e3086af409546f10485d9ac692ede172dc832e729c2c6a73ade84d96ac6b17e840edd30c51560d897ebd059c4735230a604caa4301faba66bc3acfe3ae3d15b0f770a8f16c3da036587a5533c57c09ff376c5209326a118827de123a48db9bededceae41a66020800a74b8deb2b69993e32a8b9ee4c55543e46443d1883ec5f70a949d61ccdac77a38b3c8b08e9c789de0e070ae42b79b7db1d3fa8741782a2b5aa0463553c97546181b44f79cab75fa3f1043072e0663811590368c69a8551702d0edf69a200de4067a823a2ab147d7e773da247733affff1aeb9c5a789d1763b8a527d5283bd351ec4036eac7d5ea7148611883de0bd82c84031b93398ea49df04c620d6ef255e3df6e0025e25bb0d89bc1c708411842154555b7df08b3a05bd23ebbb10cc54b389582b652b94c87d278cf61724be89e7ac28346446b06cc3e707c9704eb8a481b17be54834c4956fddb0bd10d290228fa60bcddd90904fd92d529b168873f02d80409d8f9e4fbccf91a255acf9cdb39b50b3169924e07bbfe9ef0d6390b1c95bfa27c9a7a2291ee1747c8863938cf03dd23", 0x3a1, 0x0) 2.67489346s ago: executing program 3 (id=6417): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e00000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000800100", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 2.635261023s ago: executing program 6 (id=6418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) listen(r4, 0x0) 2.505061924s ago: executing program 0 (id=6419): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0xd50, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x4000008}, 0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@local}, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2000c050) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x24040884) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 2.43224984s ago: executing program 3 (id=6420): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 1.844510808s ago: executing program 0 (id=6421): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x57020000}}, [@jmp={0x5, 0x0, 0xd, 0x9, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='syzkaller\x00', 0x6, 0x1009, &(0x7f0000001cc0)=""/4105, 0x41100, 0x2}, 0x94) 1.072896552s ago: executing program 3 (id=6422): r0 = io_uring_setup(0x3aba, &(0x7f0000000480)={0x0, 0x4178, 0x40, 0x8001002, 0x200003d7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x10001, 0x1, 0x0, 0x3, 0x1, 0xc, 0xb, 0x5, 0xff, 0x4, 0x4, 0x16, 0x7}, {0x3, 0xe, 0x3, 0x1, 0x4, 0x8, 0x9, 0x0, 0x7, 0x4, 0x6, 0x2, 0xffffffff}, {0x9, 0x200, 0x4, 0xf7, 0x1, 0xe, 0x6, 0xa7, 0x4e, 0x9, 0x3, 0x9, 0x7}], 0xbd}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000240)={r6, 0x7ff, 0x2, r6}) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001614", @ANYBLOB="8bd2"], 0x38}, 0x1, 0x0, 0x0, 0x240408d4}, 0x4008014) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 984.456649ms ago: executing program 6 (id=6423): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) brk(0x101) 977.981189ms ago: executing program 5 (id=6424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x400007, 0x3, 0x10000, 0x3, 0x0, 0x400, 0x6}, 0x1c) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 963.424541ms ago: executing program 2 (id=6425): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430c1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$sock(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)="436c45fa4aaa4170336af02dbe97a085a502f46df9b8a9659705b64f01612d52a0d68c85582df1bb79761a8f16574c3327d5fc90678dc8776c8c0d37f2bd46befa3c41da78fde973", 0x48}, {&(0x7f0000000200)="297ecf796c5edec8148ff66179b44a11afd81d662b612c60f48e9c843560b1253e6b308402a802fddaa6928d7347c5a20b4a8ac91f8a69db1101e930a55254080aa9957b2c1ebf1d1714aa56374cadb9fecb64ce44bc2aab84187684f27f0f4a2114290541cee27ded47", 0x6a}, {&(0x7f00000000c0)="46746042ef5907aecac3d2d5379c322e714c275485b94c02afc33e6c20f248e5fc93353fbfb0de0773", 0x29}, {&(0x7f0000000300)="c24ec5fd9db85cb996a958b4e76958250d2561abf5631a10796ef1813e411337ad842f5a7869bab382b5d2ae773095f6fef2d1935107bd75c6f29d553bf1b8c9835e51925b5d847766effc8e8da9855854b5f4a43a017e333414f4", 0x5b}], 0x4}, 0x20000001) 780.291016ms ago: executing program 0 (id=6426): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x7b7, &(0x7f00000002c0)="$eJzs3U1sHGf5APBnXbvJ35Wiqv8qjaI0naRFSqXUXa9bF6uHsl2PnWnXu6vdNXKEUBs1TmXFaauWCuoDJZcWEAhx4li49sYNhAQSB+CERA9cuFXqCRUEEgIhJKOZ3XUce/3R1Pmg/f2s+B3PPPO+z7vezLNje2YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhSbbZcnixFPWssLiXbjEREcn8/dmH79g2D/n51XbPLuBGl/F8cPhzHequO3X9t89H80+k40fvqRBzOm8Oxds/Re5/+/9GRwf67JHSjTu0zrhTxrTypyxdWV5dfvwmJ3ELf/cVuW0eHrfzXev55Pm1knWa2UJ1Pk6zTTGamp8uPn5vrJHNZPe2c73TThaTWTqvdZjs5U3s0mZyZmUrSifPNxcb8bLWeDlY+9VilXJ5OnptopdV2p9l4/LmJTu1cVq9njfkiplL+euQxTyW12fbzWTfpptWFJLm0sro8tdfs8qDJXbafeOTej9788O8ry/kTcqegUv+JWZmcrFQmp5+cefKpcnm0Uq5cv6K8RWxExEhEHnFTnrTcOYpD5m4O5sANB2CkX/+jHlk0YjGWIhnyMRa1mI12NGMh//qPY9si+gb1/wuP/+X3u427uf4Pqvyxa5uPR1H/T/a+OrlT/R+a60F+jPTz2Wn7G/FWrMXluBCrsRrL8fpNz+hTfowcbH/zkUYjsuhEM7JYiGqxJumvSWImpmM6yvFCnIu56EQSc5FFPdLoxPnoRDfS4hlVi3akUY1uNKMdSZyJWjwaSUzGTMzEVCSRxkScj2YsRiPmYzaqRS+XYqV43Ke25HX0my/+/OU/fPRevrwRNLnLREr5i7k86G+7BG0r9/uv/+vRj1D/P+8O+AgON259UP8BAACAz6xS8dP3/Px/LB4sluayevqV250WAAAAcICK3/yfyJuxfOnBKOXn/+UhkR/c8twAAACAg1EqrrErRcR4PNRbGlwuNeyHAAAAAMD/oOL3/yfzZjzi7WKF838AAAD4jPn2TvfY/3Bwj91O61Dpl3+NdnusdLW19EjpSjWPq165q7dfv/nyRo/dueOlw9HrpOhrenTtnlJEjNbSE6XB3S//c6jXflx8Pj66sftO9/ovbUlgY4+7tk4pT+DI2pYEjhYDfy9O9WJOXey1F/tx/TsSj89l9XSi1qw/XdwSMf/XffOVlW9EMf3vNBaOlOLSyuryxEuvrl4scrma93L1Sv8Gitvuozg8l2LE9f4jEA8On/FYcSFGf9zx3rjlzd+A/r2JR3Yfs7R5zHfidC/m9HivHb9+/ofzMScnnp6MavXISDdd6r65vmn2/SwmP+XM34mHezEPn3m41wzJonJdFq9sz6KyOYv9PRZ7ZjHWf2K9d+rtpX/8pllKp/bKYmpLFoc/YRYAt8ul4q4/16rQ/xVV6N/rPXn9v1Z3k15AX/8o98BGV/lRblAGthzlLsXGlsH+m2rdaGyr7ltfXsSWUXY4op/pxZzpvZ4YPT6krpSHHNFfW3ntt/0j+hPv/+jHXz35u5/eeHV7Px7txfSbuO/XO9TYfM7fbyyMDzpdeqa/8JMdx+3UK6UYi7jra1dei6NvvLX22MqVCy8vv7z8SqUyNV1+olx+shJjxUuFfqP2ADDE3u+xs2dE6Yk9zqrv2/iTgol4KV6N1bgYZ4urDSLioeG9jm/6M4SzcTqKk+UdzlrHN73Dy9k9zi2vxVa2xw5eV2yLndr0iD3ww6L55038pgDATXZ6jzq8n/p/do/z7utr+Zaz49i5lg/zxZv6aADA50Pa/rg03n231G5nrRcmZ2Ymq91zadJu1p5P2tnsfJpkjW7arp2rNubTpNVudpu1wQ+OZ9NO0llstZrtbjLXbCetZidbKt75Pem/9XsnXag2ulmt06qn1U6a1JqNbrXWTWazTi1p3f1sPeucS9vFzp1WWsvmslq1mzUbSae52K6lE0nSSdOktTgIzGbTRjeby/LFRtJqZwvV9tWIqC8upMls2qm1s1a32etwMFbWmGu2F4puJ7ZP/8+3+vEGgDvBG2+tXb6wurr8+idcGI1i4U/7Cb7dcwQArqdKAwAAAAAAAAAAAADAnW/75Xr52hu5InDtUHzyvQ7FDV19aGEfC/k38g5I4/YuvPjMM5d3inn27WPn9tfP8P8pwy51ffdIxN0/+0FvzZdu1Uw/iIgb2H29tEvM7T4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2/w0AAP//naJXlA==") openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 771.295367ms ago: executing program 3 (id=6427): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fcntl$setpipe(r1, 0x407, 0x6894) 454.490833ms ago: executing program 3 (id=6428): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1, 0xb, &(0x7f0000000840)=ANY=[@ANYRESOCT=r3, @ANYRES8=r1, @ANYBLOB="d903147dfe6307b6d05b918c38608c10f0af45e34aa356f7768ad85b5a5b39db549f2bb79a33451a3adf8bdcdd8f3d1346c06eaa3405c8aff40c30462c57df92576a00b3f0cf852b3dc17ca25694145286c4214f25ca67bc43c5e0c5ad2e36112152a6bef6f23b77d97a89d9829cf1c6c45d8a0b74b8df4233cfbf5cec041802485e77fdf0b5d73e500362f12346b6890ab2cb9ea3f3de576503687ab152fab4696716d40a25d644614449c0ba34e97174b4b3d95a717e9babdf6d713b49aa55d9a0a28569509e", @ANYRESHEX=r4, @ANYRES32=r2, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000800}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 454.104943ms ago: executing program 2 (id=6429): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e20000000052001000000000000", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 417.651406ms ago: executing program 0 (id=6430): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e00000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000800100", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 416.065926ms ago: executing program 5 (id=6431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef28"], 0xffdd) close(0x3) close(0x4) 181.333955ms ago: executing program 2 (id=6432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 180.829665ms ago: executing program 3 (id=6433): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=6434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) listen(r4, 0x0) kernel console output (not intermixed with test programs): .808439][ T4308] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.877384][T22918] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4463'. [ 1639.222033][T18419] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1639.232439][T18419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1639.261984][T18419] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1639.272524][T18419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1639.283281][T18419] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1639.291283][T18419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1639.386146][T20870] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1639.501017][T22922] chnl_net:caif_netlink_parms(): no params data found [ 1639.581237][T22922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.596868][T20870] usb 6-1: Using ep0 maxpacket: 32 [ 1639.604654][T20870] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.615810][ T4345] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1639.705752][T22922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.733689][T22922] device bridge_slave_0 entered promiscuous mode [ 1639.761324][T22922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.768857][T20870] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1639.773517][T22922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.785440][T20870] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1639.801505][T20870] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1639.806061][ T4345] usb 10-1: Using ep0 maxpacket: 32 [ 1639.810823][T20870] usb 6-1: Product: syz [ 1639.820579][T20870] usb 6-1: Manufacturer: syz [ 1639.823173][T22922] device bridge_slave_1 entered promiscuous mode [ 1639.835049][T20870] hub 6-1:4.0: bad descriptor, ignoring hub [ 1639.840358][ T4345] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.842982][T20870] hub: probe of 6-1:4.0 failed with error -5 [ 1639.861814][T20870] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 1639.863626][ T4345] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.886247][ T4345] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1639.895781][ T4345] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1639.907672][ T4345] usb 10-1: Product: syz [ 1639.912012][ T4345] usb 10-1: Manufacturer: syz [ 1639.950560][ T4345] hub 10-1:4.0: USB hub found [ 1640.014813][T22922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.040391][T22922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.140824][ T4345] hub 10-1:4.0: 2 ports detected [ 1640.155060][T22922] team0: Port device team_slave_0 added [ 1640.207121][T22922] team0: Port device team_slave_1 added [ 1640.245466][T22922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.267321][T22922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.303356][T22922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.348505][T22922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.365019][T22922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.403001][T22922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.581401][T22922] device hsr_slave_0 entered promiscuous mode [ 1640.589681][T22922] device hsr_slave_1 entered promiscuous mode [ 1640.604993][T22922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1640.613677][T22922] Cannot create hsr debugfs directory [ 1640.843793][ T4308] device hsr_slave_0 left promiscuous mode [ 1640.868284][ T4308] device hsr_slave_1 left promiscuous mode [ 1640.886930][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1640.894721][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.914519][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1640.922676][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.950468][ T4308] device bridge_slave_1 left promiscuous mode [ 1640.968926][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.987555][ T4308] device bridge_slave_0 left promiscuous mode [ 1641.004058][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.015025][T22940] loop6: detected capacity change from 0 to 1024 [ 1641.054337][ T4308] device veth1_macvtap left promiscuous mode [ 1641.061561][ T4308] device veth0_macvtap left promiscuous mode [ 1641.070508][ T4308] device veth1_vlan left promiscuous mode [ 1641.078698][ T4308] device veth0_vlan left promiscuous mode [ 1641.129513][T22940] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1641.228639][T13288] EXT4-fs (loop6): unmounting filesystem. [ 1641.336755][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 1641.360821][ T4345] hub 10-1:4.0: hub_ext_port_status failed (err = -71) [ 1641.374377][T13203] usb 10-1: USB disconnect, device number 22 [ 1641.990990][T22955] loop9: detected capacity change from 0 to 256 [ 1642.047858][T22955] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1642.448121][T22965] kernel read not supported for file /file1 (pid: 22965 comm: syz.9.4479) [ 1642.463870][ T27] audit: type=1800 audit(1754505134.402:432): pid=22965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4479" name="file1" dev="mqueue" ino=131148 res=0 errno=0 [ 1642.521959][ T4308] team0 (unregistering): Port device team_slave_1 removed [ 1642.527508][T20870] usb 6-1: reset high-speed USB device number 58 using dummy_hcd [ 1642.562775][T20870] usb 6-1: device reset changed ep0 maxpacket size! [ 1642.591176][T20870] usb 6-1: USB disconnect, device number 58 [ 1642.645353][ T4308] team0 (unregistering): Port device team_slave_0 removed [ 1642.719449][ T4308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.812688][ T4308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1643.052242][T14007] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1643.287052][T20870] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1643.316547][T14007] usb 10-1: Using ep0 maxpacket: 32 [ 1643.337497][T14007] usb 10-1: config 1 has an invalid interface number: 233 but max is 0 [ 1643.346682][T14007] usb 10-1: config 1 has no interface number 0 [ 1643.352915][T14007] usb 10-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 1643.364968][T14007] usb 10-1: config 1 interface 233 has no altsetting 0 [ 1643.375041][T14007] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 1643.387114][T14007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.397189][T14007] usb 10-1: Product: syz [ 1643.402056][T14007] usb 10-1: Manufacturer: syz [ 1643.407917][T14007] usb 10-1: SerialNumber: syz [ 1643.428511][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 1643.435242][T22965] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1643.501990][T20870] usb 6-1: Using ep0 maxpacket: 16 [ 1643.511374][T20870] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1643.522725][T20870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1643.605450][T20870] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1643.615359][T20870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.624507][T20870] usb 6-1: Product: syz [ 1643.629600][T20870] usb 6-1: Manufacturer: syz [ 1643.634232][T20870] usb 6-1: SerialNumber: syz [ 1643.680475][T14007] imon_raw 10-1:1.233: IR endpoint missing [ 1643.702317][T14007] usb 10-1: USB disconnect, device number 23 [ 1643.890873][T20870] usb 6-1: 0:2 : does not exist [ 1643.916750][T20870] usb 6-1: USB disconnect, device number 59 [ 1643.999137][ T4308] bond0 (unregistering): Released all slaves [ 1645.005866][T13203] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1645.248187][T13203] usb 6-1: Using ep0 maxpacket: 32 [ 1645.273119][T13203] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.449939][T13203] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1645.481621][T13203] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1645.497737][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1645.503574][T13203] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1645.520226][T13203] usb 6-1: Product: syz [ 1645.524575][T13203] usb 6-1: Manufacturer: syz [ 1645.541509][T13203] hub 6-1:4.0: bad descriptor, ignoring hub [ 1645.549852][T13203] hub: probe of 6-1:4.0 failed with error -5 [ 1645.565139][T13203] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 1645.861254][T20870] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1645.890646][T23003] kernel read not supported for file /file1 (pid: 23003 comm: syz.2.4494) [ 1645.905366][ T27] audit: type=1800 audit(1754505137.842:433): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4494" name="file1" dev="mqueue" ino=131225 res=0 errno=0 [ 1646.047022][T20870] usb 10-1: Using ep0 maxpacket: 16 [ 1646.055462][T20870] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.072235][T20870] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1646.085334][T22922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1646.107195][T22922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1646.122168][T22922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1646.137966][T22922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1646.227893][T20870] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1646.238129][T20870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.247525][T20870] usb 10-1: Product: syz [ 1646.251988][T20870] usb 10-1: Manufacturer: syz [ 1646.260658][T20870] usb 10-1: SerialNumber: syz [ 1646.310395][T22922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.469199][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1646.605360][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1646.788413][T22922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.883046][T20870] usb 10-1: 0:2 : does not exist [ 1646.889081][T20870] usb 10-1: unit 6 not found! [ 1646.901183][T20870] usb 10-1: USB disconnect, device number 24 [ 1646.953125][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1646.963120][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1646.983871][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.991193][ T8479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.038089][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1647.055295][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1647.071523][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1647.082446][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.089916][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.104172][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1647.124667][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1647.139160][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1647.158296][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1647.169082][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1647.193845][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1647.204094][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1647.220345][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1647.233454][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1647.251138][T22922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1647.263861][T22922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1647.273164][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1647.282694][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1647.506149][T13203] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1647.563110][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1647.576126][T18419] Bluetooth: hci3: command 0x0419 tx timeout [ 1647.589962][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1647.621763][T22922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.668759][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1647.687851][T13203] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.708900][T13203] usb 7-1: config 0 has no interfaces? [ 1647.713962][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1647.738667][T13203] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1647.757392][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1647.779809][T13203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.788350][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1647.791764][T22922] device veth0_vlan entered promiscuous mode [ 1647.808602][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1647.818664][T13203] usb 7-1: Product: syz [ 1647.828507][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1647.836386][T13203] usb 7-1: Manufacturer: syz [ 1647.836408][T13203] usb 7-1: SerialNumber: syz [ 1647.848798][T13203] usb 7-1: config 0 descriptor?? [ 1647.904180][T22922] device veth1_vlan entered promiscuous mode [ 1647.956620][ T4345] usb 6-1: USB disconnect, device number 60 [ 1648.020129][T16106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1648.492496][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1648.527942][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1648.554142][T22922] device veth0_macvtap entered promiscuous mode [ 1648.584970][T22922] device veth1_macvtap entered promiscuous mode [ 1648.623334][T22922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.641360][T22922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.663883][T22922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.686676][T22922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.776831][T23046] loop9: detected capacity change from 0 to 32768 [ 1648.783651][T22922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.802631][T22922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.813836][T22922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.832737][T22922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.860696][T22922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.876549][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1648.885043][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1648.907826][T23046] JBD2: Ignoring recovery information on journal [ 1648.915596][T23046] jbd2_journal_bmap: journal block not found at offset 32 on loop9-75 [ 1648.930962][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1648.952049][T23046] JBD2: bad block at offset 32 [ 1648.974246][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1648.984704][T23046] (syz.9.4506,23046,0):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 1648.996790][T23046] (syz.9.4506,23046,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 1649.000901][T22922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.018121][T22922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.026117][T23046] (syz.9.4506,23046,1):ocfs2_check_volume:2461 ERROR: status = -22 [ 1649.029837][T22922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.048977][T23046] (syz.9.4506,23046,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 1649.049012][T23046] (syz.9.4506,23046,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 1649.066972][T22922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.078181][T22922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.089655][T23046] (syz.9.4506,23046,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1649.101590][T22922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.113055][T22922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.124526][T22922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.140342][T22922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.150484][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1649.177788][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1649.199079][T22922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.227085][T22922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.246627][T22922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.266516][T22922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.442870][ T8479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.473477][ T8479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.514200][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.526496][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1649.544777][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.574314][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1649.746324][ T7] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1649.936562][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 1649.944701][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.964510][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1649.988775][ T7] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1649.999090][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.008535][ T7] usb 6-1: Product: syz [ 1650.013435][ T7] usb 6-1: Manufacturer: syz [ 1650.019410][ T7] usb 6-1: SerialNumber: syz [ 1650.026169][T20870] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1650.206623][T20870] usb 10-1: Using ep0 maxpacket: 32 [ 1650.214099][T20870] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.227872][T20870] usb 10-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1650.247990][ T7] usb 6-1: 0:2 : does not exist [ 1650.253417][ T7] usb 6-1: unit 14 not found! [ 1650.260375][T20870] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1650.284607][T20870] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1650.289516][T13895] usb 7-1: USB disconnect, device number 56 [ 1650.294589][ T7] usb 6-1: USB disconnect, device number 61 [ 1650.316348][T20870] usb 10-1: Product: syz [ 1650.320662][T20870] usb 10-1: Manufacturer: syz [ 1650.343344][T20870] hub 10-1:4.0: bad descriptor, ignoring hub [ 1650.353597][T20870] hub: probe of 10-1:4.0 failed with error -5 [ 1650.362869][T20870] usbhid 10-1:4.0: couldn't find an input interrupt endpoint [ 1651.049535][ T7] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1651.236776][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 1651.244896][ T7] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.258353][ T7] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.271424][ T7] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1651.281268][ T7] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1651.291142][ T7] usb 7-1: Product: syz [ 1651.295602][ T7] usb 7-1: Manufacturer: syz [ 1651.313391][ T7] hub 7-1:4.0: USB hub found [ 1651.520593][ T7] hub 7-1:4.0: 2 ports detected [ 1652.256428][T13203] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1652.446230][T13203] usb 6-1: Using ep0 maxpacket: 16 [ 1652.453511][T13203] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.464967][T13203] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1652.480315][T13203] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1652.489985][T13203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.500722][T13203] usb 6-1: Product: syz [ 1652.505068][T13203] usb 6-1: Manufacturer: syz [ 1652.510232][T13203] usb 6-1: SerialNumber: syz [ 1652.722251][T13203] usb 6-1: 0:2 : does not exist [ 1652.727602][T13203] usb 6-1: unit 14 not found! [ 1652.739951][ T7] hub 7-1:4.0: hub_ext_port_status failed (err = -71) [ 1652.740310][ T4345] usb 7-1: USB disconnect, device number 57 [ 1652.756392][T13203] usb 6-1: USB disconnect, device number 62 [ 1652.927318][ T7] usb 10-1: USB disconnect, device number 25 [ 1653.657006][T20387] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1653.846316][T20387] usb 6-1: Using ep0 maxpacket: 16 [ 1653.853626][T20387] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.885373][T20387] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1653.919196][T20387] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1653.958346][T20387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.006567][T20387] usb 6-1: Product: syz [ 1654.011841][T20387] usb 6-1: Manufacturer: syz [ 1654.042385][T20387] usb 6-1: SerialNumber: syz [ 1654.284369][T20387] usb 6-1: 0:2 : does not exist [ 1654.290809][T20387] usb 6-1: unit 15 not found! [ 1654.323335][T20387] usb 6-1: USB disconnect, device number 63 [ 1654.967705][T23212] kernel read not supported for file /file1 (pid: 23212 comm: syz.5.4576) [ 1654.996231][ T27] audit: type=1800 audit(1754505146.942:434): pid=23212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4576" name="file1" dev="mqueue" ino=131800 res=0 errno=0 [ 1655.284495][ T4345] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1655.642255][ T4345] usb 6-1: Using ep0 maxpacket: 32 [ 1655.650697][ T4345] usb 6-1: config 1 has an invalid interface number: 233 but max is 0 [ 1655.666829][ T4345] usb 6-1: config 1 has no interface number 0 [ 1655.672995][ T4345] usb 6-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 1655.683498][ T4345] usb 6-1: config 1 interface 233 has no altsetting 0 [ 1655.721914][ T4345] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 1655.817845][ T4345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.831880][ T4345] usb 6-1: Product: syz [ 1655.836792][ T4345] usb 6-1: Manufacturer: syz [ 1655.841415][ T4345] usb 6-1: SerialNumber: syz [ 1655.871263][T23212] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1656.095007][ T4345] imon_raw 6-1:1.233: IR endpoint missing [ 1656.124488][ T4345] usb 6-1: USB disconnect, device number 64 [ 1658.993649][T23216] Set syz1 is full, maxelem 65536 reached [ 1659.106611][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4594'. [ 1659.116802][T23259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'. [ 1662.331200][T23318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4618'. [ 1662.343172][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4618'. [ 1662.853265][T23296] loop5: detected capacity change from 0 to 32768 [ 1662.898492][T23324] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4621'. [ 1663.104323][T23296] JBD2: Ignoring recovery information on journal [ 1663.115267][T23296] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 1663.126692][T23296] JBD2: bad block at offset 32 [ 1663.270549][T23296] (syz.5.4608,23296,1):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 1663.295747][T23296] (syz.5.4608,23296,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 1663.310131][T23296] (syz.5.4608,23296,0):ocfs2_check_volume:2461 ERROR: status = -22 [ 1663.319923][T23296] (syz.5.4608,23296,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 1663.329416][T23296] (syz.5.4608,23296,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 1663.379542][T23296] (syz.5.4608,23296,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1664.607360][T23352] loop6: detected capacity change from 0 to 1024 [ 1664.640833][T23354] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4632'. [ 1664.828803][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4628'. [ 1664.838987][T23352] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1664.850903][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4628'. [ 1665.116151][T13288] EXT4-fs (loop6): unmounting filesystem. [ 1666.565061][T23389] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.4644'. [ 1667.105827][T23398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4646'. [ 1667.116843][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4646'. [ 1667.333673][T23399] loop9: detected capacity change from 0 to 1024 [ 1667.424954][T23399] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1667.571387][T21478] EXT4-fs (loop9): unmounting filesystem. [ 1668.643600][T13203] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1668.836584][T13203] usb 10-1: Using ep0 maxpacket: 32 [ 1668.843869][T13203] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.885712][T13203] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.919243][T13203] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1668.949792][T13203] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1668.972333][T23427] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4658'. [ 1668.991822][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4659'. [ 1668.992669][T13203] usb 10-1: Product: syz [ 1669.018122][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4659'. [ 1669.018322][T13203] usb 10-1: Manufacturer: syz [ 1669.046767][T13203] hub 10-1:4.0: USB hub found [ 1669.133694][T23435] loop6: detected capacity change from 0 to 1024 [ 1669.249845][T13203] hub 10-1:4.0: 2 ports detected [ 1669.277429][T23435] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1669.424410][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.431067][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.478296][T13288] EXT4-fs (loop6): unmounting filesystem. [ 1670.077571][T20387] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1670.270397][T14007] usb 10-1: USB disconnect, device number 26 [ 1670.281329][T20387] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1670.298054][T20387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.307383][T20387] usb 7-1: Product: syz [ 1670.311729][T20387] usb 7-1: Manufacturer: syz [ 1670.317081][T20387] usb 7-1: SerialNumber: syz [ 1670.331848][T20387] usb 7-1: config 0 descriptor?? [ 1670.587128][T20387] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1670.790731][T20387] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 1671.039257][T23469] loop9: detected capacity change from 0 to 764 [ 1671.086602][T23469] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1671.129103][T23469] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4675'. [ 1672.299740][T23489] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1672.320692][T23489] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1672.355450][T23489] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1672.393550][T23489] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1672.419035][T23489] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1672.451438][T23489] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1672.480446][T23489] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1672.777390][T23504] kernel read not supported for file /file1 (pid: 23504 comm: syz.3.4687) [ 1672.798960][ T27] audit: type=1800 audit(1754505164.742:435): pid=23504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4687" name="file1" dev="mqueue" ino=133023 res=0 errno=0 [ 1672.878568][T13895] usb 7-1: USB disconnect, device number 58 [ 1672.912950][T23507] loop9: detected capacity change from 0 to 764 [ 1672.938773][T23507] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1673.010327][T23507] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4688'. [ 1674.768159][T23542] loop6: detected capacity change from 0 to 764 [ 1674.783402][T23542] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1674.812373][T23542] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4702'. [ 1676.503431][T23572] loop9: detected capacity change from 0 to 764 [ 1676.547608][T23572] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1676.579255][T23572] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4715'. [ 1676.616658][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1676.679783][T23580] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1676.716676][T23580] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1676.761601][T23580] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1676.823100][T20387] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1676.835767][T23580] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1676.929226][T23580] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1677.023333][T23580] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1677.046573][T20387] usb 6-1: Using ep0 maxpacket: 32 [ 1677.054988][T20387] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.063751][T23580] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1677.077036][T20387] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.175916][T20387] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1677.209560][T20387] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1677.497714][T20387] usb 6-1: Product: syz [ 1677.582412][T20387] usb 6-1: Manufacturer: syz [ 1677.727929][T20387] hub 6-1:4.0: USB hub found [ 1677.901669][T23576] loop6: detected capacity change from 0 to 32768 [ 1677.934125][T20387] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1677.944061][T23576] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.4717 (23576) [ 1678.119561][T23576] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1678.153980][T23576] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1678.206284][T23576] BTRFS info (device loop6): metadata ratio 1025 [ 1678.212697][T23576] BTRFS info (device loop6): enabling disk space caching [ 1678.236256][T23576] BTRFS info (device loop6): enabling ssd optimizations [ 1678.253764][T23576] BTRFS info (device loop6): force clearing of disk cache [ 1678.831795][T23576] BTRFS info (device loop6): turning off barriers [ 1678.839359][T23576] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1678.848690][T23576] BTRFS info (device loop6): using spread ssd allocation scheme [ 1678.857381][T23576] BTRFS info (device loop6): disk space caching is enabled [ 1679.228543][T23576] BTRFS info (device loop6): rebuilding free space tree [ 1679.834861][T23576] BTRFS info (device loop6): disabling free space tree [ 1679.915868][T23576] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1679.964736][T23576] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1680.076551][ T22] usb 6-1: USB disconnect, device number 65 [ 1680.170651][T13288] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1682.304716][T23673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4745'. [ 1683.462800][T23701] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1686.267609][T14007] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1686.466972][T14007] usb 7-1: Using ep0 maxpacket: 16 [ 1686.477276][T14007] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1686.511125][T14007] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1686.538492][T14007] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1686.664127][T14007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.673996][T14007] usb 7-1: Product: syz [ 1686.679634][T14007] usb 7-1: Manufacturer: syz [ 1686.684936][T14007] usb 7-1: SerialNumber: syz [ 1687.467701][T14007] usb 7-1: 0:2 : does not exist [ 1687.472741][T14007] usb 7-1: unit 6 not found! [ 1687.494668][T14007] usb 7-1: USB disconnect, device number 59 [ 1694.814203][T23885] loop6: detected capacity change from 0 to 32768 [ 1694.833481][T23885] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.4826 (23885) [ 1694.870377][T23885] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1694.892858][T23885] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1694.909477][T23885] BTRFS info (device loop6): metadata ratio 1025 [ 1694.929400][T23885] BTRFS info (device loop6): enabling disk space caching [ 1694.940097][T23885] BTRFS info (device loop6): enabling ssd optimizations [ 1694.963641][T23885] BTRFS info (device loop6): force clearing of disk cache [ 1694.986846][T23885] BTRFS info (device loop6): turning off barriers [ 1694.993774][T23885] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1695.008393][T23885] BTRFS info (device loop6): using spread ssd allocation scheme [ 1695.020380][T23885] BTRFS info (device loop6): disk space caching is enabled [ 1695.081292][T23885] BTRFS info (device loop6): rebuilding free space tree [ 1695.118919][T23885] BTRFS info (device loop6): disabling free space tree [ 1695.131646][T23885] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1695.142579][T23885] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1695.221685][T23885] BTRFS info (device loop6): scrub: started on devid 1 [ 1695.244357][T23885] BTRFS info (device loop6): scrub: finished on devid 1 with status: 0 [ 1695.443807][T13288] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1695.986884][T23929] Illegal XDP return value 3724179468 on prog (id 574) dev syz_tun, expect packet loss! [ 1696.314069][T23937] loop6: detected capacity change from 0 to 764 [ 1696.338853][T23937] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1697.548745][T23992] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1698.006172][ T4345] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1698.156255][ T4345] usb 7-1: device descriptor read/64, error -71 [ 1698.426383][ T4345] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1698.586457][ T4345] usb 7-1: device descriptor read/64, error -71 [ 1698.670742][T24046] netlink: 300 bytes leftover after parsing attributes in process `syz.9.4892'. [ 1698.716508][ T4345] usb usb7-port1: attempt power cycle [ 1699.131388][ T4345] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1699.173372][ T4345] usb 7-1: device descriptor read/8, error -71 [ 1699.446229][ T4345] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1699.488659][ T4345] usb 7-1: device descriptor read/8, error -71 [ 1699.607153][ T4345] usb usb7-port1: unable to enumerate USB device [ 1701.168574][T24114] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1701.274530][T24121] loop6: detected capacity change from 0 to 764 [ 1701.312766][T24121] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1702.357871][T24135] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1702.540032][T24147] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.4941'. [ 1703.690166][T24171] loop6: detected capacity change from 0 to 1024 [ 1703.747583][T24171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1703.924764][T24171] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1704.075212][T13288] EXT4-fs (loop6): unmounting filesystem. [ 1704.444179][T24198] loop6: detected capacity change from 0 to 1024 [ 1704.508760][T24198] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1704.811692][T13288] EXT4-fs (loop6): unmounting filesystem. [ 1705.853197][T24238] loop6: detected capacity change from 0 to 1024 [ 1705.923397][T24238] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1706.217305][T13288] EXT4-fs (loop6): unmounting filesystem. [ 1707.217617][T24271] netlink: 'syz.5.4992': attribute type 4 has an invalid length. [ 1707.591944][T24285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4998'. [ 1708.282954][T24306] netlink: 'syz.2.5006': attribute type 4 has an invalid length. [ 1708.338609][T24306] netlink: 'syz.2.5006': attribute type 4 has an invalid length. [ 1708.613194][T24311] loop6: detected capacity change from 0 to 1024 [ 1708.680822][T24311] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1708.885413][T13288] EXT4-fs (loop6): unmounting filesystem. [ 1712.880993][T24387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1713.234156][T24408] netlink: 300 bytes leftover after parsing attributes in process `syz.9.5045'. [ 1713.569822][T24416] loop6: detected capacity change from 0 to 1024 [ 1713.667246][T24416] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1713.856802][T13288] EXT4-fs (loop6): unmounting filesystem. [ 1713.945193][T24426] fuse: Bad value for 'fd' [ 1714.630740][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5065'. [ 1714.764163][T24458] bond1 (unregistering): Released all slaves [ 1714.872251][T24457] netlink: 'syz.6.5068': attribute type 9 has an invalid length. [ 1714.902000][T24457] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5068'. [ 1718.103554][T24509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5088'. [ 1718.308696][ T7641] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.394705][ T7641] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.420740][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1718.441974][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1718.453854][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1718.483169][ T7641] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.494113][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1718.502747][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1718.511848][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1718.754661][ T7641] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.683728][T24536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5097'. [ 1719.778621][T24517] chnl_net:caif_netlink_parms(): no params data found [ 1720.569532][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 1720.607586][T24553] syz.5.5102[24553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1720.607712][T24553] syz.5.5102[24553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1720.726393][T24551] netlink: 'syz.2.5101': attribute type 4 has an invalid length. [ 1720.903604][T24517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.911568][T24517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.956274][T24517] device bridge_slave_0 entered promiscuous mode [ 1720.983877][T24556] netlink: 'syz.2.5101': attribute type 4 has an invalid length. [ 1721.722243][ T7641] bond1: (slave ip6erspan0): Releasing backup interface [ 1721.792886][T24517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.816554][T24517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.853623][T24517] device bridge_slave_1 entered promiscuous mode [ 1721.947923][T24517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.207711][T24517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.225504][T24582] netlink: 'syz.2.5113': attribute type 4 has an invalid length. [ 1722.626380][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 1722.900460][T24582] netlink: 'syz.2.5113': attribute type 4 has an invalid length. [ 1722.953827][T24517] team0: Port device team_slave_0 added [ 1722.978665][T24590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5115'. [ 1723.037440][T24517] team0: Port device team_slave_1 added [ 1723.387642][T24517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.397307][T24517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.793930][T24517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.813938][T24596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1723.904004][T24517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.930824][T24517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.983318][T24517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.382689][T24517] device hsr_slave_0 entered promiscuous mode [ 1724.391476][T24517] device hsr_slave_1 entered promiscuous mode [ 1724.399691][T24517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1724.413267][T24517] Cannot create hsr debugfs directory [ 1724.422354][T24620] netlink: 'syz.3.5126': attribute type 4 has an invalid length. [ 1724.455474][T24627] netlink: 'syz.3.5126': attribute type 4 has an invalid length. [ 1724.558789][T24634] netlink: 300 bytes leftover after parsing attributes in process `syz.5.5132'. [ 1724.696305][T18419] Bluetooth: hci0: command 0x040f tx timeout [ 1724.743601][T24639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5134'. [ 1726.009708][ T7641] device hsr_slave_0 left promiscuous mode [ 1726.038991][ T7641] device hsr_slave_1 left promiscuous mode [ 1726.052726][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1726.062130][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.082769][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.096177][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.112680][ T7641] device bridge_slave_1 left promiscuous mode [ 1726.123450][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.142946][ T7641] device bridge_slave_0 left promiscuous mode [ 1726.159997][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.199938][ T7641] device veth1_macvtap left promiscuous mode [ 1726.207024][ T7641] device veth0_macvtap left promiscuous mode [ 1726.213466][ T7641] device veth1_vlan left promiscuous mode [ 1726.222341][ T7641] device veth0_vlan left promiscuous mode [ 1726.717522][ T7641] bond2 (unregistering): Released all slaves [ 1726.816716][T18419] Bluetooth: hci0: command 0x0419 tx timeout [ 1727.642257][ T7641] bond1 (unregistering): Released all slaves [ 1727.733973][T24700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5158'. [ 1728.457837][ T7641] team0 (unregistering): Port device team_slave_1 removed [ 1728.549641][ T7641] team0 (unregistering): Port device team_slave_0 removed [ 1728.641708][ T7641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1728.736569][ T7641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1729.186201][ T7641] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1729.913139][ T7641] bond0 (unregistering): Released all slaves [ 1730.033224][T24669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5147'. [ 1730.905167][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.915636][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.323551][T24740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5175'. [ 1731.467191][T24742] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5176'. [ 1731.654628][T24744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5177'. [ 1731.761121][T24746] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1731.830403][T24747] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1731.854429][T24747] bond1 (unregistering): Released all slaves [ 1731.965489][T24517] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1732.007185][T24517] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1732.105056][T24517] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1732.195503][T24517] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1733.094029][T24517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.145558][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1733.191980][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1733.224679][T24517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.249099][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1733.272812][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1733.293358][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.300706][ T8479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.321922][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1733.346717][T24778] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5187'. [ 1733.411108][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1733.424231][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1733.436186][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.443548][ T8479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.486429][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1733.504903][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1733.534968][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1733.569891][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1733.613338][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1733.622315][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1733.643515][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1733.673900][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1733.699643][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1733.730181][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1733.741971][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1733.754192][T24791] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5191'. [ 1733.812780][T24793] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1733.827905][T24796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5193'. [ 1733.890061][T24797] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1733.933148][T24797] bond1 (unregistering): Released all slaves [ 1733.976634][T24798] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1733.998922][T24517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1734.087660][T24801] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1734.134049][T24801] bond1 (unregistering): Released all slaves [ 1734.170931][T24804] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5194'. [ 1734.671017][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1734.689891][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1734.712690][T24517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.972099][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5207'. [ 1735.061062][T24845] bond1 (unregistering): Released all slaves [ 1736.388591][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1736.423388][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1736.495485][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1736.518970][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1736.528127][T24868] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5215'. [ 1736.540038][T24517] device veth0_vlan entered promiscuous mode [ 1736.558423][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1736.577625][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1736.599207][T24517] device veth1_vlan entered promiscuous mode [ 1736.662311][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1736.687652][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1736.705273][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1736.721631][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1736.738307][T24517] device veth0_macvtap entered promiscuous mode [ 1736.769770][T24517] device veth1_macvtap entered promiscuous mode [ 1736.812874][T24517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1736.827673][T24517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.839357][T24517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1736.852818][T24517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.863884][T24517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1736.890555][T24517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.926469][T24517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1736.952140][T24517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.983989][T24517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1737.010678][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1737.028534][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1737.047100][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1737.067441][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1737.088660][T24517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1737.117378][T24517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1737.131702][T24517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1737.145444][T24517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1737.162227][T24517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1737.174240][T24517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1737.188844][T24517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1737.200754][T24517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1737.223091][T24517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.251311][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1737.282207][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1737.312161][T24517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.331778][T24517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.366116][T24517] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.375236][T24517] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.545022][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.584290][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.616114][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1737.658966][ T8479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.696973][ T8479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.770460][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1737.965091][T24910] loop6: detected capacity change from 0 to 1024 [ 1738.106990][T24910] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1738.273216][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1738.978707][T24935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5244'. [ 1739.270582][T24941] loop6: detected capacity change from 0 to 4096 [ 1739.356986][T24941] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 1740.341745][T24964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5258'. [ 1742.574755][T24992] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5269'. [ 1743.629818][T25026] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5283'. [ 1743.744062][T25029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5284'. [ 1744.596909][T25038] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1750.735076][T25124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5321'. [ 1750.841586][T25129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5323'. [ 1750.987540][T25131] bond1 (unregistering): Released all slaves [ 1752.242199][T25157] loop6: detected capacity change from 0 to 2048 [ 1753.524268][T25165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5335'. [ 1753.831443][T25157] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1753.858729][T25157] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1754.034400][T25157] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 1754.143280][T25172] overlayfs: failed to clone upperpath [ 1754.342465][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1754.574838][T25183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5344'. [ 1754.680022][T25186] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5345'. [ 1754.704479][T25186] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5345'. [ 1754.855193][T25187] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5344'. [ 1754.881495][T25193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1755.162944][T25193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1755.193343][T25183] bond1 (unregistering): Released all slaves [ 1755.211858][T25198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5349'. [ 1756.900531][T25224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5358'. [ 1758.147752][T25242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5364'. [ 1758.259062][T25245] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5364'. [ 1758.380804][T25250] bond1 (unregistering): Released all slaves [ 1762.359565][T25314] overlayfs: failed to clone upperpath [ 1764.185016][T18419] Bluetooth: hci3: command 0x0406 tx timeout [ 1764.499572][T25329] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5397'. [ 1764.652063][T25337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5400'. [ 1764.882987][T25345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5402'. [ 1766.832275][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5402'. [ 1766.916830][T25348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5402'. [ 1767.295456][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5411'. [ 1768.502394][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1768.512055][T25385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1770.386209][T13895] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1770.587803][T13895] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1770.640524][T13895] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.704103][T13895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1770.775304][T13895] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1770.858254][T13895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.122417][T13895] usb 7-1: config 0 descriptor?? [ 1771.298643][T25440] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5442'. [ 1771.555399][T13895] usbhid 7-1:0.0: can't add hid device: -71 [ 1771.573423][T13895] usbhid: probe of 7-1:0.0 failed with error -71 [ 1771.597553][T13895] usb 7-1: USB disconnect, device number 64 [ 1773.582828][T25520] loop6: detected capacity change from 0 to 764 [ 1773.599512][T25520] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1773.652642][ T4308] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1775.447081][T25582] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5506'. [ 1777.036841][T25627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5524'. [ 1777.278571][T25642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5530'. [ 1778.569178][T25668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5540'. [ 1778.871996][T25675] loop6: detected capacity change from 0 to 16 [ 1778.916731][T25675] erofs: (device loop6): mounted with root inode @ nid 36. [ 1779.773348][T25679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5545'. [ 1782.971043][T25717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5561'. [ 1784.484818][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5580'. [ 1786.819896][T25797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5596'. [ 1789.007120][T25835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5611'. [ 1792.613505][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.625659][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.926117][ T26] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1796.125922][ T26] usb 7-1: Using ep0 maxpacket: 32 [ 1796.134194][ T26] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.196074][ T26] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.244525][ T26] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1796.286116][ T26] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1796.294527][ T26] usb 7-1: Product: syz [ 1796.340317][ T26] usb 7-1: Manufacturer: syz [ 1796.376219][ T26] hub 7-1:4.0: USB hub found [ 1796.873305][ T26] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 1799.616655][T13895] usb 7-1: USB disconnect, device number 65 [ 1799.718452][T25974] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.5668'. [ 1800.253247][T25985] loop6: detected capacity change from 0 to 1024 [ 1800.341975][T25985] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1800.543037][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1800.841949][T26004] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.5683'. [ 1801.094114][T26012] loop6: detected capacity change from 0 to 16 [ 1801.226974][T26012] erofs: (device loop6): mounted with root inode @ nid 36. [ 1802.216837][T26020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1802.350604][T26023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1802.497051][T26025] bond1 (unregistering): Released all slaves [ 1802.842089][T26033] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.5694'. [ 1803.327017][T26048] loop6: detected capacity change from 0 to 16 [ 1803.668363][T26048] erofs: (device loop6): mounted with root inode @ nid 36. [ 1803.779137][T26048] syz.6.5697: attempt to access beyond end of device [ 1803.779137][T26048] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1806.995485][T26069] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.5710'. [ 1808.472122][T26103] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1808.838062][T26114] loop6: detected capacity change from 0 to 16 [ 1808.875335][T26114] erofs: (device loop6): mounted with root inode @ nid 36. [ 1808.944548][T26114] syz.6.5725: attempt to access beyond end of device [ 1808.944548][T26114] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1811.804382][T26147] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1815.000581][ T4308] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1825.247854][T20870] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1825.766533][T20870] usb 7-1: Using ep0 maxpacket: 32 [ 1825.788335][T20870] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.803114][T20870] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.848476][T20870] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1825.926902][T20870] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1825.937782][T20870] usb 7-1: Product: syz [ 1825.942242][T20870] usb 7-1: Manufacturer: syz [ 1825.954502][T20870] hub 7-1:4.0: USB hub found [ 1828.911640][T20870] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 1828.951925][T20870] usb 7-1: USB disconnect, device number 66 [ 1829.144365][T26340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5816'. [ 1830.262237][T26369] loop6: detected capacity change from 0 to 512 [ 1830.300380][T26373] overlayfs: failed to clone upperpath [ 1830.308071][T26369] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1830.326495][T26369] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1831.460698][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1832.858082][T26384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5831'. [ 1833.034130][T26388] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5831'. [ 1833.134653][T26392] bond1 (unregistering): Released all slaves [ 1834.092443][T26402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5837'. [ 1834.502544][T13895] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1834.967571][T13895] usb 7-1: Using ep0 maxpacket: 32 [ 1835.080148][T13895] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.204618][T13895] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.255776][T13895] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1836.288544][T13895] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1836.338966][T13895] usb 7-1: Product: syz [ 1836.343180][T13895] usb 7-1: Manufacturer: syz [ 1836.480719][T13895] hub 7-1:4.0: USB hub found [ 1836.829525][T13895] hub 7-1:4.0: 2 ports detected [ 1837.993381][T13895] hub 7-1:4.0: hub_ext_port_status failed (err = -71) [ 1837.993628][T20870] usb 7-1: USB disconnect, device number 67 [ 1838.712654][T26467] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5864'. [ 1838.904288][T26475] loop6: detected capacity change from 0 to 764 [ 1838.957520][T26475] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1840.082103][ T4345] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1840.289507][ T4345] usb 7-1: Using ep0 maxpacket: 32 [ 1840.303423][ T4345] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.331865][ T4345] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.367388][ T4345] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1840.403465][ T4345] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1840.423206][ T4345] usb 7-1: Product: syz [ 1840.429881][ T4345] usb 7-1: Manufacturer: syz [ 1840.458594][ T4345] hub 7-1:4.0: USB hub found [ 1840.583046][T26516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1840.891742][ T4345] hub 7-1:4.0: 2 ports detected [ 1841.836841][T26530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5888'. [ 1842.037155][T26531] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5888'. [ 1842.143744][T26532] bond2 (unregistering): Released all slaves [ 1842.688624][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1842.814363][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1842.825819][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1842.837319][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1842.849346][T20315] hub 7-1:4.0: hub_ext_port_status failed (err = -71) [ 1842.851285][T20387] usb 7-1: USB disconnect, device number 68 [ 1842.863559][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1842.871824][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1843.454453][T26535] chnl_net:caif_netlink_parms(): no params data found [ 1843.618437][T26563] loop6: detected capacity change from 0 to 512 [ 1843.854244][T26563] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.5898: inode #1: comm syz.6.5898: iget: illegal inode # [ 1843.883733][T26563] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.5898: error while reading EA inode 1 err=-117 [ 1843.902462][T26563] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.5898: inode #1: comm syz.6.5898: iget: illegal inode # [ 1843.926432][T26563] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.5898: error while reading EA inode 1 err=-117 [ 1843.944165][T26563] EXT4-fs (loop6): 1 orphan inode deleted [ 1843.950578][T26563] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1843.991169][T26563] EXT4-fs (loop6): unmounting filesystem. [ 1844.702577][T26568] netlink: 1608 bytes leftover after parsing attributes in process `syz.3.5899'. [ 1844.818327][T26535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.828310][T26535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.954076][T26535] device bridge_slave_0 entered promiscuous mode [ 1845.109189][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 1845.169013][T26535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.294798][T26535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.454443][T26535] device bridge_slave_1 entered promiscuous mode [ 1845.576802][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 1846.280112][T26535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.342131][T26535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.390690][T26535] team0: Port device team_slave_0 added [ 1846.408655][T26535] team0: Port device team_slave_1 added [ 1846.422255][T26577] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1846.694909][T26535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.738432][T26535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1846.771695][T26535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.801765][T26535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.823699][T26535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1846.881619][T26535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1846.986958][T26535] device hsr_slave_0 entered promiscuous mode [ 1847.002187][T26535] device hsr_slave_1 entered promiscuous mode [ 1847.012451][T26535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1847.022228][T26595] loop6: detected capacity change from 0 to 764 [ 1847.029527][T26535] Cannot create hsr debugfs directory [ 1847.053947][T26595] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1847.176779][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 1847.942443][T26535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.259081][T26535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.398652][T26535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.583108][T26535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.258207][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 1849.779032][T26634] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5923'. [ 1851.429780][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 1854.058802][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.065376][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1856.482249][T26535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1856.513183][T26535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1856.543164][T26535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1856.566614][T26535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1856.606624][T26669] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5937'. [ 1856.689051][T26535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.709164][T26535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.750003][T26535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1856.779609][T26535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1856.792272][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1856.804965][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1856.813486][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1856.828979][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1856.838461][T15139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.845653][T15139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.865022][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1856.874709][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1856.898139][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.905363][T15139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1856.920758][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1856.932951][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1856.950146][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1856.970086][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1856.983231][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1857.011836][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1857.025197][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1857.041593][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1857.052334][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1857.069981][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1857.083517][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1857.093847][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1857.115312][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1857.138451][T26669] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5937'. [ 1857.153251][T26679] bond1 (unregistering): Released all slaves [ 1859.567437][T26692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1859.907489][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1859.929135][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1860.007433][T26535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1860.116281][T26535] device veth0_vlan entered promiscuous mode [ 1860.187348][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1860.227904][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1860.247611][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1860.267401][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1860.299986][T26535] device veth1_vlan entered promiscuous mode [ 1860.316373][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1860.327243][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1860.346997][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1860.428029][T26535] device veth0_macvtap entered promiscuous mode [ 1860.477193][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1860.497007][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1860.508080][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1860.517840][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1860.531251][T26535] device veth1_macvtap entered promiscuous mode [ 1860.592245][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1860.615311][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.636949][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1860.650022][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.662908][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1860.675013][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.696500][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1860.738652][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.769299][T26535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1860.779824][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1860.819186][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1860.867382][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1860.957147][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1860.969943][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.980661][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1861.006442][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.018225][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1861.032034][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.129536][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1861.317863][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.537634][T26535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1861.796044][T26535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.827459][T26535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1862.014108][T26729] loop6: detected capacity change from 0 to 16 [ 1863.608024][T26535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.612436][T26535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.716982][T26729] erofs: (device loop6): mounted with root inode @ nid 36. [ 1865.083872][T26535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.118313][T26535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.164697][T16106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1865.186748][T16106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1866.052887][ T7962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1866.083914][ T7962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1866.171396][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1866.209200][ T7962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1866.246243][ T7962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1866.302233][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1866.474951][T26743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5958'. [ 1866.541784][T26745] loop2: detected capacity change from 0 to 1024 [ 1866.693377][T26752] loop6: detected capacity change from 0 to 16 [ 1866.741865][T26752] erofs: (device loop6): mounted with root inode @ nid 36. [ 1866.753394][T26752] syz.6.5960: attempt to access beyond end of device [ 1866.753394][T26752] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1867.639746][T26745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1867.981863][T26535] EXT4-fs (loop2): unmounting filesystem. [ 1868.719078][T26774] loop2: detected capacity change from 0 to 512 [ 1868.838652][T26774] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.5966: inode #1: comm syz.2.5966: iget: illegal inode # [ 1868.861594][T26774] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.5966: error while reading EA inode 1 err=-117 [ 1868.882481][T26774] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.5966: inode #1: comm syz.2.5966: iget: illegal inode # [ 1868.899354][T26774] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.5966: error while reading EA inode 1 err=-117 [ 1868.917991][T26774] EXT4-fs (loop2): 1 orphan inode deleted [ 1868.924006][T26774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1868.948783][T26774] EXT4-fs (loop2): unmounting filesystem. [ 1869.757605][T26778] loop6: detected capacity change from 0 to 512 [ 1869.884093][T26778] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1869.924819][T26778] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1870.275144][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1871.264047][T26791] loop6: detected capacity change from 0 to 512 [ 1872.290522][T26791] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.5970: inode #1: comm syz.6.5970: iget: illegal inode # [ 1872.315581][T26791] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.5970: error while reading EA inode 1 err=-117 [ 1872.331752][T26791] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.5970: inode #1: comm syz.6.5970: iget: illegal inode # [ 1872.350933][T26791] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.5970: error while reading EA inode 1 err=-117 [ 1872.368086][T26791] EXT4-fs (loop6): 1 orphan inode deleted [ 1872.373961][T26791] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1872.397526][T26791] EXT4-fs (loop6): unmounting filesystem. [ 1874.338110][T20315] syzkaller0: tun_net_xmit 76 [ 1874.344312][T20315] syzkaller0: tun_net_xmit 48 [ 1875.577980][T20315] syzkaller0: tun_net_xmit 76 [ 1875.591548][T12903] syzkaller0: tun_net_xmit 76 [ 1875.605896][T20549] syzkaller0: tun_net_xmit 76 [ 1876.061361][T26828] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5983'. [ 1876.087517][T26795] syzkaller0: tun_net_xmit 76 [ 1876.204854][T20869] syzkaller0: tun_net_xmit 76 [ 1877.282073][T18419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1877.335178][T18419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1877.356392][T18419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1877.367427][T18419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1877.378132][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1877.386540][T18419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1879.422878][T18419] Bluetooth: hci2: command 0x0409 tx timeout [ 1881.504523][T18419] Bluetooth: hci2: command 0x041b tx timeout [ 1882.311448][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5998'. [ 1882.804830][T26049] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.117881][T26893] loop2: detected capacity change from 0 to 512 [ 1883.266791][T26893] EXT4-fs: Ignoring removed orlov option [ 1883.488384][T26049] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.576285][T18419] Bluetooth: hci2: command 0x040f tx timeout [ 1883.611565][T26893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1883.630245][T26893] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1883.713275][T26049] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.837777][T26846] chnl_net:caif_netlink_parms(): no params data found [ 1884.462673][T26049] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.563849][T26535] EXT4-fs (loop2): unmounting filesystem. [ 1884.691135][T26846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.699822][T26846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.719317][T26846] device bridge_slave_0 entered promiscuous mode [ 1884.773428][T26846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.791209][T26846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.810862][T26846] device bridge_slave_1 entered promiscuous mode [ 1884.876074][T26846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1884.934643][T26921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6012'. [ 1884.987894][T26846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.103750][T26846] team0: Port device team_slave_0 added [ 1885.223357][T26846] team0: Port device team_slave_1 added [ 1885.470838][T26846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1885.500983][T26846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1885.657095][T18419] Bluetooth: hci2: command 0x0419 tx timeout [ 1885.683477][T26846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1885.896862][T26846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1885.909278][T26846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1886.053023][T26846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1886.509379][T26846] device hsr_slave_0 entered promiscuous mode [ 1886.840631][T26846] device hsr_slave_1 entered promiscuous mode [ 1886.954988][T26846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1887.193135][T26846] Cannot create hsr debugfs directory [ 1887.452497][T26952] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 1887.514466][T20549] syzkaller0: tun_net_xmit 76 [ 1887.522102][T20549] syzkaller0: tun_net_xmit 48 [ 1887.565430][ T26] syzkaller0: tun_net_xmit 76 [ 1887.680895][ T26] syzkaller0: tun_net_xmit 76 [ 1887.730026][ T26] syzkaller0: tun_net_xmit 76 [ 1889.943833][T26972] loop6: detected capacity change from 0 to 16 [ 1889.994122][T26972] erofs: (device loop6): mounted with root inode @ nid 36. [ 1890.018047][T26971] syz.6.6030: attempt to access beyond end of device [ 1890.018047][T26971] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1891.860245][T26995] loop6: detected capacity change from 0 to 512 [ 1893.917356][T26995] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.6039: inode #1: comm syz.6.6039: iget: illegal inode # [ 1893.938118][T26995] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.6039: error while reading EA inode 1 err=-117 [ 1893.960689][T26995] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.6039: inode #1: comm syz.6.6039: iget: illegal inode # [ 1893.976097][T26995] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.6039: error while reading EA inode 1 err=-117 [ 1893.993162][T26995] EXT4-fs (loop6): 1 orphan inode deleted [ 1894.000320][T26995] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1894.020450][T26995] EXT4-fs (loop6): unmounting filesystem. [ 1910.532316][T27104] loop2: detected capacity change from 0 to 512 [ 1910.672232][T27104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.6075: inode #1: comm syz.2.6075: iget: illegal inode # [ 1910.694577][T27104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.6075: error while reading EA inode 1 err=-117 [ 1910.723197][T27104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.6075: inode #1: comm syz.2.6075: iget: illegal inode # [ 1910.742254][T27104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.6075: error while reading EA inode 1 err=-117 [ 1910.761290][T27104] EXT4-fs (loop2): 1 orphan inode deleted [ 1910.768335][T27104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1910.801007][T27104] EXT4-fs (loop2): unmounting filesystem. [ 1912.546749][T26049] device hsr_slave_0 left promiscuous mode [ 1912.563310][T26049] device hsr_slave_1 left promiscuous mode [ 1912.584102][T26049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1912.597233][T26049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1912.606212][T26049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1912.614143][T26049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1912.644329][T26049] device bridge_slave_1 left promiscuous mode [ 1912.661493][T26049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.673263][T26049] device bridge_slave_0 left promiscuous mode [ 1912.681202][T26049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.818263][T26049] device veth1_macvtap left promiscuous mode [ 1912.824649][T26049] device veth0_macvtap left promiscuous mode [ 1912.852425][T27137] loop6: detected capacity change from 0 to 1024 [ 1912.884702][T27137] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1912.918125][T26049] device veth1_vlan left promiscuous mode [ 1912.925043][T26049] device veth0_vlan left promiscuous mode [ 1913.524989][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1914.792127][T27159] loop6: detected capacity change from 0 to 512 [ 1914.877550][T27159] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1914.917938][T27159] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1915.099007][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1915.185743][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.192344][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.647007][T26049] team0 (unregistering): Port device team_slave_1 removed [ 1916.964381][T26049] team0 (unregistering): Port device team_slave_0 removed [ 1917.094888][T26049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1917.245043][T26049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1918.878886][T26049] bond0 (unregistering): Released all slaves [ 1919.008782][T27175] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1919.283964][T26846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1919.336915][T26846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1919.378369][T26846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1919.429883][T26846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1934.724422][T27295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6137'. [ 1934.855290][T26846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1934.920549][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1934.951638][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1934.974107][T26846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1935.021546][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1935.060750][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1935.073611][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.081086][ T7864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1935.134914][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1935.154010][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1935.168990][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1935.190997][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.198285][ T7864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.214093][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1935.233644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1935.246348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1935.656678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1935.837927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1935.942462][T26846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1935.954116][T26846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1935.998889][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1936.048086][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1936.208333][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1936.541845][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1936.817168][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1936.940246][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1936.982844][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1938.600489][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1939.235800][T27346] loop2: detected capacity change from 0 to 16 [ 1941.049713][T18419] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1941.076206][T27346] erofs: (device loop2): mounted with root inode @ nid 36. [ 1941.086859][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1941.126915][T27345] syz.2.6148: attempt to access beyond end of device [ 1941.126915][T27345] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1941.151754][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1941.162905][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1941.174461][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1941.189001][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1941.197413][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1942.342108][T27342] chnl_net:caif_netlink_parms(): no params data found [ 1943.286498][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1944.138066][T27342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.290092][T27342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.345355][T27342] device bridge_slave_0 entered promiscuous mode [ 1944.371359][T27342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.390289][T27342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.413246][T27342] device bridge_slave_1 entered promiscuous mode [ 1944.653589][T27342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1944.988355][T27342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1945.346750][T18419] Bluetooth: hci2: command 0x041b tx timeout [ 1945.388165][T27342] team0: Port device team_slave_0 added [ 1945.410811][T27342] team0: Port device team_slave_1 added [ 1945.504265][T27342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1945.533021][T27342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1945.611960][T27342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1945.627390][T27342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1945.634563][T27342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1945.682916][T27342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1946.370354][T27342] device hsr_slave_0 entered promiscuous mode [ 1946.475073][T27342] device hsr_slave_1 entered promiscuous mode [ 1946.703187][T27414] loop6: detected capacity change from 0 to 1024 [ 1946.824505][T27414] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1946.943672][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1947.416617][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1947.708042][T27435] sctp: [Deprecated]: syz.3.6174 (pid 27435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1947.708042][T27435] Use struct sctp_sack_info instead [ 1947.778998][T27437] sctp: [Deprecated]: syz.3.6174 (pid 27437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1947.778998][T27437] Use struct sctp_sack_info instead [ 1948.332517][ T11] device hsr_slave_0 left promiscuous mode [ 1949.057103][ T11] device hsr_slave_1 left promiscuous mode [ 1949.075855][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1949.150841][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1949.183428][ T11] device bridge_slave_1 left promiscuous mode [ 1949.210627][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.227821][ T11] device bridge_slave_0 left promiscuous mode [ 1949.243783][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.412493][T27465] loop6: detected capacity change from 0 to 512 [ 1949.433002][T27465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1949.499521][T18419] Bluetooth: hci2: command 0x0419 tx timeout [ 1949.552049][T27465] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1949.611903][T27465] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1949.892826][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1950.448641][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1950.631872][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1950.913992][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1951.028092][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1952.141910][T27526] loop2: detected capacity change from 0 to 164 [ 1952.627659][ T11] bond0 (unregistering): Released all slaves [ 1952.903931][T27546] loop6: detected capacity change from 0 to 512 [ 1953.015071][T27546] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.6208: inode #1: comm syz.6.6208: iget: illegal inode # [ 1953.034355][T27546] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.6208: error while reading EA inode 1 err=-117 [ 1953.057401][T27546] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.6208: inode #1: comm syz.6.6208: iget: illegal inode # [ 1953.074547][T27546] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.6208: error while reading EA inode 1 err=-117 [ 1953.092366][T27546] EXT4-fs (loop6): 1 orphan inode deleted [ 1953.099319][T27546] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1954.029776][T27342] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1954.127638][T27342] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1954.208178][T27342] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1954.318196][T27342] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1954.778432][T27342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1954.806769][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1954.887454][T27342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1954.995094][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1955.015122][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1955.042245][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1955.060412][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1955.074002][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.081661][ T7641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1955.153459][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1955.354516][T27591] loop6: detected capacity change from 0 to 16 [ 1955.775674][T27591] erofs: (device loop6): mounted with root inode @ nid 36. [ 1955.805540][T27591] syz.6.6217: attempt to access beyond end of device [ 1955.805540][T27591] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1956.106591][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1956.157396][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.164563][ T7641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1956.427986][T27342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1956.501504][T27342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1957.033751][T27342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1957.062811][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1957.081137][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1957.106599][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1957.152022][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1957.168690][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1957.187772][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1957.200327][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1957.361222][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1957.409126][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1957.447580][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1957.475057][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1957.497864][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1957.524063][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1957.582101][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1957.636681][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1957.717310][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1957.770269][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1958.313051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1958.328450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1958.549211][T27342] device veth0_vlan entered promiscuous mode [ 1958.575015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1958.617244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1958.649323][T27342] device veth1_vlan entered promiscuous mode [ 1958.691022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1958.711450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1958.739174][T27342] device veth0_macvtap entered promiscuous mode [ 1958.773904][T27342] device veth1_macvtap entered promiscuous mode [ 1958.854328][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1958.934295][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.961397][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.001107][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.047403][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.076787][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.115023][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.145363][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.203163][T27342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1959.259795][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.312303][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.351319][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.381395][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.426755][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.442120][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.453816][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.474780][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.508794][T27342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.536519][T27342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.570573][T27342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1959.590448][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1959.607816][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1959.627110][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1959.673265][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1959.778062][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1959.875726][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1960.331560][T27342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1960.382076][T27342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1960.436267][T27342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1960.445405][T27342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1960.632267][ T7864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1960.685033][ T7864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1960.740221][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1960.764812][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1960.834242][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1960.849666][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1961.343537][T27693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6253'. [ 1961.871773][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1961.888284][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1961.901881][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1961.911880][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1961.923046][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1961.932424][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1962.771871][ T7864] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.958927][ T7864] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.170096][ T7864] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.454192][ T7864] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.574846][T27745] loop6: detected capacity change from 0 to 512 [ 1963.693205][T27745] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1963.756335][T27745] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1963.801150][T27707] chnl_net:caif_netlink_parms(): no params data found [ 1963.977247][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 1964.000734][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1964.281215][T27768] loop0: detected capacity change from 0 to 2048 [ 1964.306402][T27707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1964.321716][T27707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1964.334275][T27707] device bridge_slave_0 entered promiscuous mode [ 1964.348655][T27707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.357260][T27707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.366986][T27707] device bridge_slave_1 entered promiscuous mode [ 1964.401746][T27768] loop0: p1 < > p3 [ 1964.434483][T27768] loop0: p3 size 134217728 extends beyond EOD, truncated [ 1964.537155][T27707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1964.569578][T27707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.613766][T27782] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 1964.793830][T27707] team0: Port device team_slave_0 added [ 1964.924627][T27707] team0: Port device team_slave_1 added [ 1965.060148][T27707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1965.091790][T27707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1965.192402][T27791] loop2: detected capacity change from 0 to 512 [ 1965.222790][T27791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1965.333347][T27707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1965.468206][T27791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1965.490967][T27791] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1965.542536][T27707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1965.554077][T27707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1965.581694][T27707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1965.644778][T26535] EXT4-fs (loop2): unmounting filesystem. [ 1965.881911][T27707] device hsr_slave_0 entered promiscuous mode [ 1965.932148][T27707] device hsr_slave_1 entered promiscuous mode [ 1965.946192][T27707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1965.953972][T27707] Cannot create hsr debugfs directory [ 1965.962153][T27812] loop0: detected capacity change from 0 to 512 [ 1966.072911][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 1966.073750][T27816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6293'. [ 1966.095109][T27816] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1966.145403][T27812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1966.165991][T27817] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1966.173388][T27817] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1966.208464][T27812] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1966.382209][T27342] EXT4-fs (loop0): unmounting filesystem. [ 1966.389598][T27824] loop2: detected capacity change from 0 to 764 [ 1966.437373][T27824] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1966.773288][T27838] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1967.584082][T27850] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.6305'. [ 1967.769269][T27856] loop6: detected capacity change from 0 to 512 [ 1967.879625][ T7864] device hsr_slave_0 left promiscuous mode [ 1967.892197][ T7864] device hsr_slave_1 left promiscuous mode [ 1967.899921][ T7864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1967.908635][ T7864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1967.924291][ T7864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1967.924938][T27856] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1967.958084][T27856] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1967.961513][ T7864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1967.987711][ T7864] device bridge_slave_1 left promiscuous mode [ 1967.994277][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.020100][ T7864] device bridge_slave_0 left promiscuous mode [ 1968.028301][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.081049][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1968.093175][T27867] loop0: detected capacity change from 0 to 764 [ 1968.147054][T18419] Bluetooth: hci1: command 0x040f tx timeout [ 1968.164749][T27867] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1968.234126][ T7864] device veth1_macvtap left promiscuous mode [ 1968.243384][ T7864] device veth0_macvtap left promiscuous mode [ 1968.253743][ T7864] device veth1_vlan left promiscuous mode [ 1968.283021][T27873] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 1968.292785][ T7864] device veth0_vlan left promiscuous mode [ 1968.467058][T18419] Bluetooth: hci4: command 0x0406 tx timeout [ 1970.227613][T18419] Bluetooth: hci1: command 0x0419 tx timeout [ 1970.754291][T27889] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6318'. [ 1971.537399][ T7864] team0 (unregistering): Port device team_slave_1 removed [ 1971.644690][ T7864] team0 (unregistering): Port device team_slave_0 removed [ 1971.831892][ T7864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1972.001831][ T7864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.652037][T27903] loop6: detected capacity change from 0 to 512 [ 1972.712683][T27903] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1972.735242][T27903] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1972.830328][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1973.743417][ T7864] bond0 (unregistering): Released all slaves [ 1974.174436][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6329'. [ 1974.222273][T27925] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1974.304626][T27707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1974.345039][T27707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1974.430516][T27707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1974.478606][T27932] loop2: detected capacity change from 0 to 16 [ 1974.507406][T27932] erofs: (device loop2): mounted with root inode @ nid 36. [ 1974.542381][T27932] syz.2.6327: attempt to access beyond end of device [ 1974.542381][T27932] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1974.765284][T27707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1976.640406][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.648222][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.839578][T27959] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.6336'. [ 1976.967156][T27707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1977.033887][T16106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1977.052573][T16106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1977.083167][T27707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1977.143019][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1977.160504][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1977.188433][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.195854][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1977.226664][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1977.242826][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1977.253030][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.260208][ T8086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1977.298085][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1977.309575][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1977.324323][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1977.334957][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1977.350306][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1977.373062][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1977.383195][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1977.394449][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1977.411184][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1977.424962][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1977.438075][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1977.449285][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1977.464618][T27707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1977.682724][T27983] loop0: detected capacity change from 0 to 764 [ 1977.724229][T27983] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1978.165337][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1978.226247][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1978.260281][T27707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1979.614949][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1979.634253][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1979.659095][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1979.669301][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1979.681512][T27707] device veth0_vlan entered promiscuous mode [ 1979.690072][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1979.700100][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1979.714176][T27707] device veth1_vlan entered promiscuous mode [ 1979.750922][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1979.765287][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1979.785762][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1979.795202][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1979.818113][T27707] device veth0_macvtap entered promiscuous mode [ 1979.840145][T27707] device veth1_macvtap entered promiscuous mode [ 1979.867248][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.873484][T28035] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.6361'. [ 1979.878440][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.878463][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.878479][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.878505][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.878516][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.878533][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.878545][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.880250][T27707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1980.000260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1980.009222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1980.024329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1980.035156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1980.053636][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.089222][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.111400][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.125817][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.152901][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.180754][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.203016][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.216245][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.242563][T27707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1980.269491][T27707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.291891][T27707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1980.309629][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1980.337378][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1980.368866][T27707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.396101][T27707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.417631][T27707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.456824][T27707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.393298][T28053] loop2: detected capacity change from 0 to 512 [ 1981.452808][T28055] loop0: detected capacity change from 0 to 764 [ 1981.468958][ T8000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.487826][ T8000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.508418][T28055] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1981.530633][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1981.555155][T28055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6368'. [ 1981.564824][ T7864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.564881][ T7864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.578384][T28053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1981.633864][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1981.657362][T28053] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1981.698869][T28063] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.6372'. [ 1981.752148][T26535] EXT4-fs (loop2): unmounting filesystem. [ 1983.038030][T28089] loop2: detected capacity change from 0 to 764 [ 1983.101169][T28089] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1983.208071][T28089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6381'. [ 1984.733317][T28107] loop0: detected capacity change from 0 to 1024 [ 1984.737289][T28105] loop6: detected capacity change from 0 to 512 [ 1984.788327][T28107] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1984.819622][T28105] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1984.831460][T28115] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.6386'. [ 1984.895015][T28105] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1984.923903][T27342] EXT4-fs (loop0): unmounting filesystem. [ 1985.238209][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1985.912276][T28134] loop2: detected capacity change from 0 to 764 [ 1986.180625][T28134] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1987.189954][T28134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1988.127802][T28158] loop6: detected capacity change from 0 to 1024 [ 1988.466431][T28159] netlink: 'syz.0.6403': attribute type 72 has an invalid length. [ 1988.567640][T28158] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1988.957417][T24517] EXT4-fs (loop6): unmounting filesystem. [ 1989.466417][T28182] device bridge4 entered promiscuous mode [ 1990.177312][T28194] loop2: detected capacity change from 0 to 764 [ 1990.241823][T28194] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1990.411228][T28198] netlink: 'syz.0.6414': attribute type 72 has an invalid length. [ 1990.589803][T28204] loop2: detected capacity change from 0 to 1024 [ 1990.804708][T28204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1992.177051][T26535] EXT4-fs (loop2): unmounting filesystem. [ 1992.480996][T28239] loop0: detected capacity change from 0 to 764 [ 1992.517173][T28239] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1992.816083][T28246] netlink: 'syz.2.6429': attribute type 72 has an invalid length. [ 1993.405923][ T28] INFO: task kworker/0:9:7583 blocked for more than 144 seconds. [ 1993.892097][ T28] Not tainted 6.1.147-syzkaller #0 [ 1993.931602][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1993.965551][ T28] task:kworker/0:9 state:D stack:22912 pid:7583 ppid:2 flags:0x00004000 [ 1994.168387][ T28] Workqueue: usb_hub_wq hub_event [ 1994.190097][ T28] Call Trace: [ 1994.193922][ T28] [ 1994.197063][ T28] __schedule+0x10ec/0x40b0 [ 1994.201861][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 1994.207897][ T28] ? kthread_data+0x4b/0xc0 [ 1994.212455][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1994.225926][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1994.231319][ T28] schedule+0xb9/0x180 [ 1994.236332][ T28] usb_kill_urb+0x1c2/0x2f0 [ 1994.241223][ T28] ? usb_unlink_urb+0xa0/0xa0 [ 1994.246498][ T28] ? wake_bit_function+0x200/0x200 [ 1994.251796][ T28] usb_start_wait_urb+0x189/0x4b0 [ 1994.257392][ T28] ? usb_api_blocking_completion+0xb0/0xb0 [ 1994.263435][ T28] ? usb_alloc_urb+0x3f/0x140 [ 1994.275918][ T28] ? __kmalloc+0xe1/0x240 [ 1994.280657][ T28] ? memset+0x1e/0x40 [ 1994.295860][T27062] syzkaller0: tun_net_xmit 76 [ 1994.296022][ T28] usb_control_msg+0x22f/0x3e0 [ 1994.300956][T27062] syzkaller0: tun_net_xmit 48 [ 1994.305334][ T28] hub_port_init+0xcd3/0x2ac0 [ 1994.315914][ T28] hub_event+0x292c/0x54e0 [ 1994.320642][ T28] ? hub_post_resume+0x120/0x120 [ 1994.326931][ T28] ? read_lock_is_recursive+0x10/0x10 [ 1994.332551][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1994.339760][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1994.345142][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1994.351625][ T28] ? process_one_work+0x7a1/0x1160 [ 1994.357891][ T28] process_one_work+0x898/0x1160 [ 1994.363238][ T28] ? worker_detach_from_pool+0x240/0x240 [ 1994.370543][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 1994.376497][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1994.382086][ T28] ? kthread_data+0x4b/0xc0 [ 1994.389175][ T28] worker_thread+0xaa2/0x1250 [ 1994.394310][ T28] ? __kthread_parkme+0x162/0x1c0 [ 1994.400006][ T28] kthread+0x29d/0x330 [ 1994.404121][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 1994.409614][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1994.414538][ T28] ret_from_fork+0x1f/0x30 [ 1994.419256][ T28] [ 1994.423137][ T28] [ 1994.423137][ T28] Showing all locks held in the system: [ 1994.432464][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1994.438427][ T28] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1994.462784][ T28] 1 lock held by rcu_tasks_trace/13: [ 1994.473176][ T28] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1994.487610][ T28] 1 lock held by khungtaskd/28: [ 1994.493121][ T28] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1994.504472][ T28] 3 locks held by kworker/u4:2/41: [ 1994.511177][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1994.524925][ T28] #1: ffffc90000b27d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1994.537640][ T28] #2: ffffffff8dd401e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1994.548629][ T28] 2 locks held by getty/4027: [ 1994.553779][ T28] #0: ffff88814cd37098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1994.564765][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 1994.577318][ T28] 5 locks held by kworker/0:9/7583: [ 1994.582926][ T28] #0: ffff888144ee0538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1994.598067][ T28] #1: ffffc90003787d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1994.614217][ T28] #2: ffff888028cb3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0 [ 1994.627317][ T28] #3: ffff888028cb64f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21bd/0x54e0 [ 1994.642639][ T28] #4: ffff888146375468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21ee/0x54e0 [ 1994.654922][ T28] 2 locks held by kworker/1:14/20549: [ 1994.662644][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1994.674928][ T28] #1: ffffc90003297d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1994.694045][ T28] 2 locks held by syz.5.6431/28251: [ 1994.700876][ T28] #0: ffffffff8dd401e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1994.711365][ T28] #1: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 1994.723571][ T28] 2 locks held by syz.3.6433/28256: [ 1994.731248][ T28] #0: ffffffff8dd9ffb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 1994.741018][ T28] #1: ffffffff8dd401e8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x930 [ 1994.752544][ T28] 1 lock held by syz.3.6433/28258: [ 1994.759336][ T28] #0: ffffffff8dd401e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 1994.770878][ T28] [ 1994.773243][ T28] ============================================= [ 1994.773243][ T28] [ 1994.782049][ T28] NMI backtrace for cpu 0 [ 1994.786421][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.147-syzkaller #0 [ 1994.794341][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1994.804600][ T28] Call Trace: [ 1994.808015][ T28] [ 1994.811061][ T28] dump_stack_lvl+0x168/0x22e [ 1994.815941][ T28] ? show_regs_print_info+0x12/0x12 [ 1994.821150][ T28] ? load_image+0x3b0/0x3b0 [ 1994.825747][ T28] ? vprintk_emit+0x571/0x680 [ 1994.830816][ T28] ? printk_sprint+0x460/0x460 [ 1994.835821][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 1994.841045][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1994.847685][ T28] ? _printk+0xcc/0x110 [ 1994.852052][ T28] ? load_image+0x3b0/0x3b0 [ 1994.856671][ T28] ? load_image+0x3b0/0x3b0 [ 1994.861395][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1994.867812][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1994.874528][ T28] watchdog+0xeee/0xf30 [ 1994.878705][ T28] ? watchdog+0x1ed/0xf30 [ 1994.883234][ T28] kthread+0x29d/0x330 [ 1994.887594][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1994.892937][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1994.897645][ T28] ret_from_fork+0x1f/0x30 [ 1994.902083][ T28] [ 1994.907056][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1994.912531][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 1994.923797][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1994.930754][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.147-syzkaller #0 [ 1994.938724][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1994.949202][ T28] Call Trace: [ 1994.952594][ T28] [ 1994.955708][ T28] dump_stack_lvl+0x168/0x22e [ 1994.960497][ T28] ? memcpy+0x3c/0x60 [ 1994.964694][ T28] ? show_regs_print_info+0x12/0x12 [ 1994.969919][ T28] ? load_image+0x3b0/0x3b0 [ 1994.974963][ T28] panic+0x2c9/0x710 [ 1994.978860][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1994.984615][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1994.989330][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1994.995496][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1995.001754][ T28] watchdog+0xf2d/0xf30 [ 1995.006190][ T28] ? watchdog+0x1ed/0xf30 [ 1995.010538][ T28] kthread+0x29d/0x330 [ 1995.014631][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1995.019855][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1995.024555][ T28] ret_from_fork+0x1f/0x30 [ 1995.029096][ T28] [ 1995.032376][ T28] Kernel Offset: disabled [ 1995.036848][ T28] Rebooting in 86400 seconds..