last executing test programs: 9m24.353139469s ago: executing program 32 (id=47): r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0x2, 0x0, 0x0) 8m55.814348823s ago: executing program 33 (id=142): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000500)={[{@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f00000001c0)={[{@lazytime}, {@user_xattr}, {@norecovery}, {@nodioread_nolock}, {@dioread_nolock}, {@nombcache}, {@abort}, {@errors_remount}, {@oldalloc}]}, 0x0, 0x7b8, &(0x7f0000001780)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0imVbchzHslL8+cBY780PvfedN/PmWTNIARxYo+mfXMTRiL40OZzNTyKbEb0Rp+vrPV5dKaRTEmtrr3yX1NZ5tLpSiKZtUoezzB8j4rM3Io7ltpZbWVqenSqVigtZfrw6d3m8srR8/NLc1Exxpjh/cmJy8sSpf5w6uXex/vDl8pH7b///rx+d/un1P9x56/MkTseRbFlzHHtlNEazfdKX7sIN/rfXhXVZ0u0KsCvpqdlTP8vjaAxHzzYt+Z99rRkA0CnXImJtlwZ3vSUA0F2JqzgAHDCNzwEera4UGlPU7+dc7+oHE/vkwX8jYrAef+P+Zn1Jb/2e3VeDtfugQ4+S2j2ShiQiRvag/NGIuHn33O10ig7dhwRo5fqNiLgwMrq5/097uM3PLDyrv+1gndFNef0f7J9P0vHPP7eO/yJy2fk/WPu7efwz0OLc3Y125/96Wbl7G1bo24NCm6Tjv383Pdv2uCn+zEhPlvtNbczXl1y8VCqmfdtvI2Is+gbS/MQ2ZYw9/Plhu2XN47/v33ntg7T89HV9jdy93oGN20xPVaeeJ+ZmD25E/Km3VfzJk/ZP2ox/z+6wjJf+9eb77Zal8afxNqat8XfW2q2Iv7Rs//XnoJJtn08crx0O442DooWPv35vqF35ze1/825a0kqh8b/Afkjbf2j7+EeS5uc1K89exhe3hj9tt2xj/Odup+VvjL/18d+fvFpL92fzrk5VqwsTEf3Jy1vnn1jftpFvrJ/GP/bn1uf/dsd/2g1dyNJrT3n4sff+tx/uPv7OSuOfTts/yYJ4avs/e+LO49meduXvrP0na6mxbM7W/q93y/vutILPtfMAAAAAAAAAAAAAAAAAAAAAAAAAYIdyEXEkklz+STqXy+frv+H9+xjKlcqV6rGL5cX56aj9VvZI9OUaX3U53PR9qBPZ9+E38ic25f8eEb+LiHcHDtXy+UK5NN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgc7jN7/+nvhnodu0AgI4Z7HYFAIB95/oPAAdP/frfs3l2f+u1D3W8PgBA59Wu/0lvt6sBAOwjn/8DwMHj+g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnT1zJp3WflxdKaT56StLi7PlK8eni5XZ/NxiIV8oL1zOz5TLM6VivlCea/tG1+svpXL58mTML14drxYr1fHK0vL5ufLifPX8pbmpmeL5Yt++RQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO1dZWp6dKpWKCxLbJ669ENW4kTVbt/eGxAuRGIiIThXR3Esc6k7nBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAr8EsAAAD//4BOHek=") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x450042) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0xffffffff) 8m4.839385837s ago: executing program 4 (id=290): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$vga_arbiter(r1, &(0x7f0000000400)=ANY=[], 0x14) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010affe8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a0000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f19d684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) unshare(0x400) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) pwritev2(r3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x400004) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) 8m2.580511543s ago: executing program 4 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'vlan1\x00'}}, 0x1e) sendmmsg$sock(r3, &(0x7f0000001dc0), 0x213, 0x0) 8m0.925798605s ago: executing program 4 (id=304): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() write$binfmt_script(r2, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 8m0.371910219s ago: executing program 4 (id=307): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x14) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x46c00) dup3(r1, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 7m59.416974986s ago: executing program 4 (id=313): getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x20000000) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, r1}) r3 = socket(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000240)={[{@usrjquota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@grpquota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 7m58.306857933s ago: executing program 4 (id=316): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7m57.822330467s ago: executing program 34 (id=316): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7m7.142215859s ago: executing program 2 (id=489): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0xea47, 0x40881) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = semget$private(0x0, 0x2, 0x40) semctl$GETPID(r1, 0x3df657a8805f5a0f, 0x10, 0x0) socket$xdp(0x2c, 0x3, 0x0) 7m2.181824814s ago: executing program 2 (id=503): socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x80, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) fdatasync(r0) mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m57.896062585s ago: executing program 2 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() kcmp(r4, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 6m56.550111765s ago: executing program 2 (id=517): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040f0400051b"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x10) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x20108c0, &(0x7f0000000080)=ANY=[@ANYBLOB="75737271756f74612c696f636861727365743d69736f383835392d352c696f636861727365743d6575632d6a702c696e746567726974792c71756f74612c6e6f71756f74612c71756f7461006572726f72733d636f6e74696e75652c756d61736b3d3078303030303030303030303030303038312c75737271756f74612c06000000756f74612c756d61736b3d3078303030303030303030303030303030312c67727071756f74612c756d61736b3d3078303030303030303030303032303034352c726f6f74636f6e746578743d7379752c646566636f6e746578743d73797361646d5f752c66736e616d653d003f0000587d5b2d292b2c00a9c1a30bc3207997b7f4e9447ee50b7a7e32bbde0fc9243970c38a6cb5080b27024c8fa61254ca59336acbf090ea35b6e7e44f4af2c218e937a7689e5f17975998f3ff7c1c7b896131aaf5097320e70b9b3c7424cb12be8a69b44da8d201000000abf6813950c019ae80f2a89a067e768d0c305f77357aaccfbf7dc0503768aaa6b8940e1ccbc41e021e0cf63c2d1c991852b2b84c2d677f2898bde305ce8fa91a7c14e01f5f066af16ae8fa48cdee8bf24677ab469a4f18d640cc"], 0xfe, 0x61e8, &(0x7f0000000500)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x302800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 6m53.267824438s ago: executing program 2 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 6m50.822739946s ago: executing program 2 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5b, 0x0, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c00)=""/4109, 0x100d}], 0x1}}], 0x1, 0x120, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x4c}}, 0x0) 6m49.725288554s ago: executing program 35 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5b, 0x0, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c00)=""/4109, 0x100d}], 0x1}}], 0x1, 0x120, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x4c}}, 0x0) 6m28.471047795s ago: executing program 7 (id=593): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 6m27.346281233s ago: executing program 7 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) 6m25.174574089s ago: executing program 7 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) 6m24.237966056s ago: executing program 7 (id=608): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@nouid32}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000004c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78) 6m23.730631769s ago: executing program 7 (id=610): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6m22.887066685s ago: executing program 7 (id=612): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000bc000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 6m21.334466976s ago: executing program 36 (id=612): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000bc000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 6m9.728244079s ago: executing program 8 (id=655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000100)=@x86={0xd, 0x2, 0x5, 0x0, 0x200, 0xe, 0x3, 0x7, 0x7, 0x1, 0x1, 0xb, 0x0, 0x7ff, 0x9, 0xe, 0x80, 0x69, 0x9, '\x00', 0x3, 0x6}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x40}}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m8.714518046s ago: executing program 8 (id=656): sync() sync() sync() sync() sync() sync() sync() sync() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 6m7.514214225s ago: executing program 8 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f00000002c0)=""/199, 0xc7) 6m5.777644288s ago: executing program 8 (id=661): lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x0, 0x150f, &(0x7f0000000e80)="$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") chdir(&(0x7f0000000000)='./file2\x00') syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x171c, 0x0, 0x0, 0x0, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffefffff5aff000001"}) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) 6m4.606657246s ago: executing program 8 (id=665): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b417870000000000950000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x77, 0xfef0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b88", 0xa1}, {&(0x7f0000000000)="b3da23cbcecb0b0107a496fbe0", 0xd}, {&(0x7f0000000380)="08d69fe50cd7a79471d8419b0bb9ae9b86ca44a80d0bd9", 0x17}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 6m3.354501535s ago: executing program 8 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3fed, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 6m1.826575776s ago: executing program 37 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3fed, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 3m34.860278896s ago: executing program 0 (id=1067): r0 = io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0xffffffff, 0x40, 0x0, 0x302}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x44000, 0x0) preadv2(r3, &(0x7f0000000f40)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r5, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m32.157014075s ago: executing program 0 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x3, 0x100) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0xff00) 3m30.800917774s ago: executing program 0 (id=1068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x282241, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 3m28.502847111s ago: executing program 0 (id=1077): syz_open_dev$vbi(0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000080), 0x2) 3m27.377263269s ago: executing program 0 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3m26.330233336s ago: executing program 0 (id=1084): syz_usb_connect(0x5, 0xfffffdd9, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c80)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 3m11.279508814s ago: executing program 38 (id=1084): syz_usb_connect(0x5, 0xfffffdd9, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c80)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 15.651102768s ago: executing program 3 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)='%ps \x00'}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x4c000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[], 0x48) 13.065805167s ago: executing program 3 (id=1567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xb6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) 11.606924107s ago: executing program 6 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x6, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x2, [0x3, 0xe0]}}) 11.596977987s ago: executing program 3 (id=1579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) 11.537214698s ago: executing program 5 (id=1572): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 10.009988358s ago: executing program 6 (id=1574): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = openat2$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x22, 0x8}, 0x18) name_to_handle_at(r2, 0x0, &(0x7f0000002480)=@FILEID_INO32_GEN={0x8, 0x1, {0x9, 0xffffffff}}, 0x0, 0x0) 9.530774212s ago: executing program 9 (id=1575): socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8.896511157s ago: executing program 5 (id=1576): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) 7.570142136s ago: executing program 9 (id=1578): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000003c0007010000000000000000047c00008b3d9076e666384d7d39753fb1f6180a396a6ba5d6f135f95b667bb8c91400028006000600800a000008000900e00000010042846dbc392715e036cc19e56cfb688bec6c4ebc4752e9"], 0x40}}, 0x0) 6.621963823s ago: executing program 5 (id=1581): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x4e, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 6.485942334s ago: executing program 1 (id=1582): stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000880)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@noload}, {@oldalloc}, {@nodelalloc}, {@init_itable_val}, {@resgid={'resgid', 0x3d, r0}}, {@bh}, {@init_itable}]}, 0xff, 0x55b, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa97aa1553ff41cf1186dd604dda0000280600fc0100000000000000000089000002fe8000"/52, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 6.485224693s ago: executing program 9 (id=1583): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x2}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) write$eventfd(r1, &(0x7f0000000200), 0x8) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b52, &(0x7f0000000040)) 6.231501116s ago: executing program 6 (id=1584): memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.898584688s ago: executing program 1 (id=1585): ioperm(0x0, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002940)}, 0x2000}], 0x2, 0x0, 0x0) r3 = msgget(0x3, 0x300) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/4) 5.898363258s ago: executing program 3 (id=1586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x400000001300, 0x400000001330, 0x400000001360], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 5.898082958s ago: executing program 9 (id=1587): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a4, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x802, 0x0) r3 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x20000000) 5.239343123s ago: executing program 5 (id=1588): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x44b, 0x8000000, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x40, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) statfs(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) getpid() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4db, &(0x7f0000000200)="$eJzs3c9vE1ceAPDvOAkECJuwuwcWaVm0yyqgXeyELBDtgc1edk+sltJ7miZOFMWJo9gBEqEqqH9Apaq/1J566qVSz1Wlij+hqoTU3qseWqEW6KFSf7iyM4YQnF8liSH+fKTJvDcz9vf7YvnZb97IE0DLOhERQxHRFhGnI6I73Z5Jl1haXqrH3bt7Y7S6JFGpXPkmiSTdVn+uJF0fSh/WGRHP/TfixeTxuKWFxamRQiE/l9Zz5enZXGlh8czk9MhEfiI/MzTQf37wwuC5wb6tNahBrLqLnfHGK+/95+LHf7/2xfDXp16qHtqV7lvZjs1Y2lI6HbX/RV17RMxtJdhTrC1tT0ezEwEAYFOq3/F/GxF/joj7bzc7GwAAAGAnVP7VFT8mERUAAABgz8rUroFNMtn0WoCuyGSy2eVreH8fBzOFYqn8t/Hi/MzY8rWyPdGRGZ8s5PvSa4V7oiOp1vtr5Yf1s6vqAxFxJCJe6z5Qq2dHi4WxZp/8AAAAgBZxaNX4/7vu5fE/AAAAsMf0NDsBAAAAYMcZ/wMAAMDe9/j4/4dKbZW0NyEbAAAAYJv9/9Kl6lKp3/967OrC/FTx6pmxfGkqOz0/mh0tzs1mJ4rFidpv9k1v9HyFYnH2HzEzfz1XzpfKudLC4vB0cX6mPFy7r/dw3n2iAQAAYPcd+dOtz5OIWPrngdpStS/dt4mx+tDOZgfspMzWDk92Kg9g97U1OwGgaVzgC63LfDywYmB/scHu11fVt3jaAAAAeBr0/uGJ5v/NB8IzzEAeWpf5f2hd5v+hdZn/hxa3f+NDOtfa8ck25wIAAOyYrtqSZLLpXGBXZDLZbMTh2m0BOpLxyUK+LyJ+ExGfdXfsr9b7m500AAAAAAAAAAAAAAAAAAAAAAAAADxjKpUkKgAAAMCeFpH5Kklv5N/bfbJr9fmBfcn33bV1RFx758qb10fK5bn+6vZvH2wvv5VuP9uMMxgAAADAavVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb6d7dG6P1ZTfj3vl3RPQ0it8enbV154fdEXHwfhLtKx6XRETbNsRfuhn1510VP6mmFT1pFqvjZyLiwDbFj6OPtz/53/L+9eIf2ob40MpuVfufoUb9TyZO1NaN33/tEY/Uf607J9bq/zL1/q/WzzXq/w5vMsax2x/k1ox/M+JYe6P4yYP4yRP2vy88v7i41r7KuxG9DT9/kkdi5crTs7nSwuKZyemRifxEfmZgoP/84IXBc4N9ufHJQj792zDGq3/86Of12n9wjfg9G7T/5Cbb/9Pt63d/t078U39p/PofXSd+9X//1/RzoLq/t15eWi6vdPz9T4+v1/6xNdq/0et/apPtP3355S83eSgAsAtKC4tTI4VCfk5h64Xk6UhDQWHNwuX0jb7lhze5YwIAALbdwy/9zc4EAAAAAAAAAAAAAAAAAAAAWteO/wjZ/kd/WaCzeU0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjXLwEAAP//HQfRZw==") 5.118918063s ago: executing program 6 (id=1589): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000006780), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000008c0)={r3, 0x1, 0x6, @multicast}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='gid_map\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.20614879s ago: executing program 3 (id=1590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) 4.20546398s ago: executing program 9 (id=1591): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@migrate={0xec, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x7, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}, [@migrate={0x9c, 0x11, [{@in6=@empty, @in=@loopback, @in=@multicast1, @in6=@private0, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0x3, 0x0, 0x3501, 0x5, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) openat(0xffffffffffffffff, 0x0, 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x1}) 3.470414375s ago: executing program 1 (id=1592): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) creat(&(0x7f0000000480)='./bus\x00', 0x0) 3.386771706s ago: executing program 5 (id=1593): sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800c00, &(0x7f0000000100)=ANY=[], 0x4, 0xc34, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) pwrite64(r2, &(0x7f0000000300)='_', 0x1, 0x10000000005) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="85", 0x1}], 0x1, 0x8, 0x0, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) dup2(r4, r1) 3.368958066s ago: executing program 9 (id=1594): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) 3.131304007s ago: executing program 5 (id=1595): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) 3.044744789s ago: executing program 6 (id=1596): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.84351518s ago: executing program 1 (id=1597): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.762641567s ago: executing program 1 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='sched_switch\x00', r3}, 0x18) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 1.762240298s ago: executing program 3 (id=1599): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 21.93233ms ago: executing program 1 (id=1600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETVNETBE(r2, 0x800454df, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x3]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000005c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000640), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x1f, &(0x7f0000000f00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x89, &(0x7f00000002c0)=""/137, 0x40f00, 0x50, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x0, 0x3ca, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880), 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x240, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 0s ago: executing program 6 (id=1601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) kernel console output (not intermixed with test programs): 5416] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.074206][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.246400][ T5416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.258320][ T5416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.271066][ T5416] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 147.280927][ T5416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.288112][ T26] audit: type=1326 audit(1741634537.487:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.5.273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3aa958d169 code=0x0 [ 147.297001][ T5416] usb 5-1: config 0 descriptor?? [ 147.659713][ T4332] bond0 (unregistering): Released all slaves [ 147.745920][ T5416] pantherlord 0003:0F30:0111.0005: item fetching failed at offset 6/7 [ 147.758850][ T5416] pantherlord 0003:0F30:0111.0005: parse failed [ 147.770723][ T5416] pantherlord: probe of 0003:0F30:0111.0005 failed with error -22 [ 148.043358][ T14] usb 5-1: USB disconnect, device number 3 [ 148.284480][ T5594] loop5: detected capacity change from 0 to 256 [ 149.553627][ T5615] loop6: detected capacity change from 0 to 64 [ 151.053494][ T5627] loop5: detected capacity change from 0 to 1024 [ 151.262869][ T5627] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.269362][ T5627] EXT4-fs: Ignoring removed nobh option [ 151.562151][ T5627] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.587194][ T4521] EXT4-fs (loop5): unmounting filesystem. [ 152.629691][ T26] audit: type=1326 audit(1741634542.827:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.654382][ T26] audit: type=1326 audit(1741634542.857:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.654542][ T26] audit: type=1326 audit(1741634542.857:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.655625][ T26] audit: type=1326 audit(1741634542.857:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.655660][ T26] audit: type=1326 audit(1741634542.857:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.655688][ T26] audit: type=1326 audit(1741634542.857:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.655715][ T26] audit: type=1326 audit(1741634542.857:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.655741][ T26] audit: type=1326 audit(1741634542.857:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.655764][ T26] audit: type=1326 audit(1741634542.857:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.655788][ T26] audit: type=1326 audit(1741634542.857:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 152.818967][ T5659] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 152.820729][ T5649] loop4: detected capacity change from 0 to 4096 [ 153.096589][ T5665] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 153.290201][ T5649] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.349856][ T5649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.683240][ T5640] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 153.807821][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 156.485200][ T5729] loop4: detected capacity change from 0 to 1024 [ 156.626694][ T5729] hfsplus: xattr searching failed [ 156.974902][ T4251] hfsplus: bad catalog folder thread [ 157.009295][ T4251] hfsplus: bad catalog folder thread [ 158.146808][ T4356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.365265][ T4356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.523607][ T4356] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.665002][ T4356] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.172528][ T5777] loop2: detected capacity change from 0 to 8192 [ 159.207168][ T5777] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.563725][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.574427][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.582821][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.592793][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.600258][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.625844][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.010972][ T5799] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 160.139439][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 160.139453][ T26] audit: type=1804 audit(1741634550.337:65): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.324" name="/newroot/24/file0/bus" dev="overlay" ino=153 res=1 errno=0 [ 160.221385][ T26] audit: type=1804 audit(1741634550.347:66): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.324" name="/newroot/24/file0/bus" dev="overlay" ino=153 res=1 errno=0 [ 160.509070][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 160.999431][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.021012][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.062085][ T5783] device bridge_slave_0 entered promiscuous mode [ 161.233946][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.250839][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.259026][ T5783] device bridge_slave_1 entered promiscuous mode [ 161.348132][ T4356] device hsr_slave_0 left promiscuous mode [ 161.400682][ T4356] device hsr_slave_1 left promiscuous mode [ 161.451642][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.459108][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.708255][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 161.732501][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.739965][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.818614][ T4356] device bridge_slave_1 left promiscuous mode [ 162.825194][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.887455][ T4356] device bridge_slave_0 left promiscuous mode [ 162.927797][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.036473][ T4356] device veth1_macvtap left promiscuous mode [ 163.058458][ T4356] device veth0_macvtap left promiscuous mode [ 163.086882][ T4356] device veth1_vlan left promiscuous mode [ 163.108438][ T4356] device veth0_vlan left promiscuous mode [ 163.460616][ C1] sched: RT throttling activated [ 163.750794][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 163.779387][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 164.073070][ T5841] loop6: detected capacity change from 0 to 2048 [ 164.098645][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 164.179995][ T5841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 164.540480][ T4356] team0 (unregistering): Port device team_slave_1 removed [ 164.618655][ T4356] team0 (unregistering): Port device team_slave_0 removed [ 164.648292][ T4986] EXT4-fs (loop6): unmounting filesystem. [ 164.722581][ T4356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.776342][ T4356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.196610][ T4356] bond0 (unregistering): Released all slaves [ 165.288152][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 165.331124][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.369765][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.509737][ T5783] team0: Port device team_slave_0 added [ 165.541513][ T5783] team0: Port device team_slave_1 added [ 165.640117][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.650692][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.705208][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.719369][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.751538][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.779163][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.830784][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 165.849127][ T5783] device hsr_slave_0 entered promiscuous mode [ 165.856681][ T5783] device hsr_slave_1 entered promiscuous mode [ 166.114468][ T5783] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 166.126326][ T5783] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.138467][ T5783] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.167902][ T5783] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.274328][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.293085][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.307038][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 166.332217][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.340042][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.364085][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.373569][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.385359][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.392527][ T4555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.405599][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.420047][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.432336][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.439450][ T4555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.454461][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.466855][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.498186][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.510428][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.523672][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.533152][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.542521][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.558157][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.569578][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.588499][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.601287][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.609912][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.620064][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.629184][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.662086][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.908206][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.916565][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.937521][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.247652][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.257395][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.286730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.302354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.316877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.324987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.342388][ T5783] device veth0_vlan entered promiscuous mode [ 167.358434][ T5783] device veth1_vlan entered promiscuous mode [ 167.390224][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.405822][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.419212][ T5783] device veth0_macvtap entered promiscuous mode [ 167.432126][ T5783] device veth1_macvtap entered promiscuous mode [ 167.450030][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.461968][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.472564][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.483388][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.493684][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.504524][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.515306][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.526121][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.538469][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.549526][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.558321][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.570027][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.579325][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.596983][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.609338][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.619742][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.634592][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.648360][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.659247][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.669821][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.694113][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.707735][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.718972][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.730553][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.743518][ T5783] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.754025][ T5783] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.763596][ T5783] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.772752][ T5783] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.867475][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.886199][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.904824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.912991][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 167.923622][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.932905][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.949299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.484312][ T5940] loop6: detected capacity change from 0 to 512 [ 169.617260][ T5940] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2759: inode #12: comm syz.6.351: corrupted xattr block 142 [ 169.730094][ T5940] EXT4-fs (loop6): Remounting filesystem read-only [ 169.752755][ T5940] EXT4-fs (loop6): 1 truncate cleaned up [ 169.761127][ T5940] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 169.976545][ T26] audit: type=1107 audit(1741634560.177:67): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 170.357630][ T4986] EXT4-fs (loop6): unmounting filesystem. [ 172.799721][ T5977] loop6: detected capacity change from 0 to 16 [ 172.869643][ T5977] erofs: (device loop6): mounted with root inode @ nid 36. [ 174.246762][ T26] audit: type=1800 audit(1741634564.447:68): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.357" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 175.495342][ T6023] loop7: detected capacity change from 0 to 2048 [ 175.555900][ T6023] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 175.584086][ T6023] UDF-fs: Scanning with blocksize 512 failed [ 175.627293][ T6031] tipc: Started in network mode [ 175.646931][ T6023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.657710][ T6031] tipc: Node identity ac14140f, cluster identity 4711 [ 175.685675][ T6031] tipc: New replicast peer: 255.255.255.255 [ 175.720304][ T6031] tipc: Enabled bearer , priority 10 [ 176.833243][ T4329] tipc: Node number set to 2886997007 [ 180.507821][ T6090] tipc: Started in network mode [ 180.565089][ T6090] tipc: Node identity ac14140f, cluster identity 4711 [ 180.667433][ T6090] tipc: New replicast peer: 255.255.255.255 [ 180.716725][ T6090] tipc: Enabled bearer , priority 10 [ 181.122027][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 181.129272][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 181.527008][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 181.537612][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 181.564028][ T6104] ceph: No mds server is up or the cluster is laggy [ 181.582424][ T5416] libceph: connect (1)[c::]:6789 error -101 [ 181.590901][ T5416] libceph: mon0 (1)[c::]:6789 connect error [ 181.710739][ T5416] tipc: Node number set to 2886997007 [ 182.551947][ T6136] loop7: detected capacity change from 0 to 1024 [ 182.839615][ T6136] hfsplus: xattr searching failed [ 183.012133][ T6134] loop2: detected capacity change from 0 to 128 [ 183.102533][ T6134] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 183.164925][ T6134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.829804][ T6184] overlayfs: failed to clone upperpath [ 191.363207][ T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 191.372619][ T47] Bluetooth: hci4: Injecting HCI hardware error event [ 191.381175][ T4261] Bluetooth: hci4: hardware error 0x00 [ 193.218358][ T6070] net_ratelimit: 10 callbacks suppressed [ 193.218375][ T6070] Set syz1 is full, maxelem 65536 reached [ 193.263544][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 193.436494][ T4261] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 193.472421][ T6299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.733341][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 193.898043][ T6308] loop2: detected capacity change from 0 to 8192 [ 193.980303][ T4245] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.154805][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161227][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.180936][ T6308] device geneve2 entered promiscuous mode [ 194.452537][ T6339] overlayfs: workdir and upperdir must reside under the same mount [ 194.659350][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.437'. [ 196.164209][ T5032] libceph: connect (1)[c::]:6789 error -101 [ 196.170343][ T5032] libceph: mon0 (1)[c::]:6789 connect error [ 196.305252][ T6375] loop2: detected capacity change from 0 to 1024 [ 196.510889][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 196.872343][ T6375] hfsplus: xattr searching failed [ 196.975019][ T6370] ceph: No mds server is up or the cluster is laggy [ 197.085514][ T26] audit: type=1326 audit(1741634587.287:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 197.221644][ T26] audit: type=1326 audit(1741634587.327:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 197.254982][ T26] audit: type=1326 audit(1741634587.327:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 197.426092][ T26] audit: type=1326 audit(1741634587.327:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 198.235889][ T26] audit: type=1326 audit(1741634587.327:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 198.299028][ T26] audit: type=1326 audit(1741634587.327:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 198.402471][ T26] audit: type=1326 audit(1741634587.327:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 198.441299][ T26] audit: type=1326 audit(1741634587.327:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 198.570708][ T26] audit: type=1326 audit(1741634587.367:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 198.686969][ T26] audit: type=1326 audit(1741634587.367:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.5.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 200.424420][ T6396] loop2: detected capacity change from 0 to 32768 [ 201.347818][ T6396] XFS (loop2): Mounting V5 Filesystem [ 201.392393][ T6396] XFS (loop2): log mount failed [ 203.087440][ T6471] loop2: detected capacity change from 0 to 256 [ 203.122427][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 203.128511][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 203.156130][ T6469] ceph: No mds server is up or the cluster is laggy [ 203.164564][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'. [ 203.261811][ T6471] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 208.496236][ T6565] xt_SECMARK: invalid mode: 2 [ 209.704309][ T6569] random: crng reseeded on system resumption [ 212.013502][ T6601] netlink: 'syz.7.494': attribute type 10 has an invalid length. [ 212.073773][ T6601] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.132483][ T6601] bond0: (slave team0): Enslaving as an active interface with an up link [ 215.968256][ T6639] loop2: detected capacity change from 0 to 8192 [ 215.989994][ T6639] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 216.004901][ T6639] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 216.014474][ T6639] REISERFS (device loop2): using ordered data mode [ 216.021046][ T6639] reiserfs: using flush barriers [ 216.038245][ T6639] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 216.055853][ T6639] REISERFS (device loop2): checking transaction log (loop2) [ 216.081632][ T6639] REISERFS (device loop2): Using r5 hash to sort names [ 216.092161][ T6639] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 216.479552][ T6655] loop7: detected capacity change from 0 to 256 [ 217.927075][ T6655] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.075403][ T6689] loop7: detected capacity change from 0 to 8192 [ 220.209112][ T6689] device geneve2 entered promiscuous mode [ 221.309381][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.520'. [ 221.539792][ T6696] loop2: detected capacity change from 0 to 32768 [ 222.348472][ T6696] overlayfs: upper fs needs to support d_type. [ 222.427258][ T6696] overlayfs: upper fs does not support tmpfile. [ 222.503740][ T6696] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 222.527632][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 222.527646][ T26] audit: type=1800 audit(1741634612.727:96): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.517" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 222.696337][ T6744] loop7: detected capacity change from 0 to 512 [ 222.774094][ T6744] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2: comm syz.7.523: invalid block [ 222.792970][ T6744] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.523: invalid indirect mapped block 10 (level 1) [ 222.807579][ T6744] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.523: invalid indirect mapped block 8 (level 1) [ 222.824346][ T6744] EXT4-fs (loop7): 1 truncate cleaned up [ 222.830711][ T6744] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 224.608414][ T6755] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 224.803164][ T5783] EXT4-fs (loop7): unmounting filesystem. [ 225.537893][ T4261] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 225.551294][ T4261] CPU: 1 PID: 4261 Comm: kworker/u5:3 Not tainted 6.1.130-syzkaller #0 [ 225.559585][ T4261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.569669][ T4261] Workqueue: hci1 hci_rx_work [ 225.574391][ T4261] Call Trace: [ 225.577677][ T4261] [ 225.580612][ T4261] dump_stack_lvl+0x1e3/0x2cb [ 225.585309][ T4261] ? nf_tcp_handle_invalid+0x647/0x647 [ 225.590789][ T4261] ? panic+0x764/0x764 [ 225.594893][ T4261] sysfs_create_dir_ns+0x2c6/0x390 [ 225.600031][ T4261] ? sysfs_warn_dup+0xa0/0xa0 [ 225.604740][ T4261] kobject_add_internal+0x6df/0xd10 [ 225.609976][ T4261] kobject_add+0x14e/0x210 [ 225.614419][ T4261] ? device_add+0x3c2/0xfd0 [ 225.618948][ T4261] ? kobject_init+0x1d0/0x1d0 [ 225.623652][ T4261] ? __raw_spin_lock_init+0x41/0x100 [ 225.628963][ T4261] ? get_device_parent+0x128/0x400 [ 225.634099][ T4261] device_add+0x476/0xfd0 [ 225.638462][ T4261] hci_conn_add_sysfs+0xe4/0x1f0 [ 225.643426][ T4261] le_conn_complete_evt+0xcfe/0x1350 [ 225.648747][ T4261] ? trace_contention_end+0x61/0x170 [ 225.654055][ T4261] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 225.660327][ T4261] ? __mutex_unlock_slowpath+0x218/0x750 [ 225.665998][ T4261] ? mutex_unlock+0x10/0x10 [ 225.670521][ T4261] ? skb_pull_data+0x10e/0x220 [ 225.675308][ T4261] hci_le_conn_complete_evt+0x188/0x410 [ 225.680885][ T4261] hci_event_packet+0xa40/0x1510 [ 225.685857][ T4261] ? hci_remote_host_features_evt+0x270/0x270 [ 225.691954][ T4261] ? bis_list+0x290/0x290 [ 225.696304][ T4261] ? do_raw_spin_unlock+0x137/0x8a0 [ 225.701530][ T4261] ? kcov_remote_start+0x4ae/0x7c0 [ 225.706665][ T4261] ? lockdep_hardirqs_on+0x20/0x130 [ 225.711898][ T4261] ? hci_send_to_monitor+0x99/0x4d0 [ 225.717143][ T4261] hci_rx_work+0x3a6/0xd10 [ 225.721602][ T4261] ? process_one_work+0x806/0x1260 [ 225.726733][ T4261] process_one_work+0x917/0x1260 [ 225.731711][ T4261] ? worker_detach_from_pool+0x260/0x260 [ 225.737375][ T4261] ? _raw_spin_lock_irqsave+0x120/0x120 [ 225.742948][ T4261] ? kthread_data+0x4e/0xc0 [ 225.747486][ T4261] ? wq_worker_running+0x97/0x190 [ 225.752533][ T4261] worker_thread+0xa47/0x1200 [ 225.757234][ T4261] ? release_firmware_map_entry+0x18b/0x18b [ 225.763176][ T4261] kthread+0x28d/0x320 [ 225.767264][ T4261] ? worker_clr_flags+0x190/0x190 [ 225.772305][ T4261] ? kthread_blkcg+0xd0/0xd0 [ 225.776911][ T4261] ret_from_fork+0x1f/0x30 [ 225.781367][ T4261] [ 225.798225][ T4261] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 225.812049][ T4261] Bluetooth: hci1: failed to register connection device [ 226.968822][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 228.765240][ T6814] bond0: (slave team0): Error: Slave device does not support XDP [ 228.934216][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.953093][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.963325][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.974780][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.983649][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.991658][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.308587][ T6832] device geneve2 entered promiscuous mode [ 230.346443][ T6819] chnl_net:caif_netlink_parms(): no params data found [ 231.032582][ T4259] Bluetooth: hci4: command 0x0409 tx timeout [ 233.110796][ T4259] Bluetooth: hci4: command 0x041b tx timeout [ 233.315084][ T6859] overlayfs: failed to clone upperpath [ 233.601492][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.608618][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.630300][ T6819] device bridge_slave_0 entered promiscuous mode [ 233.650921][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.694285][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.739633][ T6819] device bridge_slave_1 entered promiscuous mode [ 234.021121][ T6819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.773496][ T6819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.168403][ T6819] team0: Port device team_slave_0 added [ 235.865915][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 235.987135][ T6819] team0: Port device team_slave_1 added [ 236.097969][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.125037][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.263307][ T6819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.280538][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.293091][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.331902][ T6819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.428812][ T6819] device hsr_slave_0 entered promiscuous mode [ 236.439662][ T6819] device hsr_slave_1 entered promiscuous mode [ 236.456867][ T6819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.470173][ T6819] Cannot create hsr debugfs directory [ 236.610874][ T3609] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 236.802027][ T3609] usb 8-1: config 0 has an invalid interface number: 220 but max is 0 [ 236.823246][ T3609] usb 8-1: config 0 has no interface number 0 [ 236.889032][ T3609] usb 8-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=fb.cb [ 236.921462][ T3609] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.970756][ T3609] usb 8-1: Product: syz [ 237.000819][ T3609] usb 8-1: Manufacturer: syz [ 237.005475][ T3609] usb 8-1: SerialNumber: syz [ 237.037381][ T6819] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 237.060353][ T3609] usb 8-1: config 0 descriptor?? [ 237.082146][ T6819] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 237.201795][ T6819] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 237.227919][ T6819] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 237.917384][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 238.065909][ T3609] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in cold state, will try to load a firmware [ 238.124095][ T6819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.163426][ T3609] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 238.186236][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.189742][ T3609] dib0700: firmware download failed at 7 with -22 [ 238.202529][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.246083][ T6819] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.260824][ T3609] usb 8-1: USB disconnect, device number 2 [ 238.293133][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.311472][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.340483][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.347718][ T4559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.388189][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.406895][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.416665][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.427611][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.434805][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.483270][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.617026][ T6819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.629211][ T6819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.650851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.668630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.927475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.955633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.070459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.226575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.355516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.407783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.451449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.487319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.500475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.625547][ T6970] device geneve2 entered promiscuous mode [ 240.903652][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.916199][ T6996] netlink: 32 bytes leftover after parsing attributes in process `syz.5.576'. [ 240.926107][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.950535][ T6819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.193041][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.231711][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.288752][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.331694][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.368949][ T6819] device veth0_vlan entered promiscuous mode [ 244.386980][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.417320][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.478578][ T6819] device veth1_vlan entered promiscuous mode [ 244.805536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.819154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.886589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.941643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.991805][ T6819] device veth0_macvtap entered promiscuous mode [ 245.056300][ T6819] device veth1_macvtap entered promiscuous mode [ 245.122393][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.163112][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.190493][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.228686][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.259168][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.273523][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.288504][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.326141][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.390815][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.408474][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.421196][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.083251][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.126247][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.134908][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.144560][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.156931][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.6.588'. [ 246.252673][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.288749][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.305022][ T26] audit: type=1326 audit(1741634636.507:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305558d169 code=0x7ffc0000 [ 246.347473][ T26] audit: type=1326 audit(1741634636.507:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f305558d169 code=0x7ffc0000 [ 246.376544][ T7093] loop7: detected capacity change from 0 to 512 [ 246.383600][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.408578][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.419020][ T26] audit: type=1326 audit(1741634636.507:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305558d169 code=0x7ffc0000 [ 246.449188][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.460383][ T7093] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 246.467445][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.484763][ T26] audit: type=1326 audit(1741634636.507:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f305558bad0 code=0x7ffc0000 [ 246.507480][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.518532][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.530714][ T7093] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 246.534743][ T26] audit: type=1326 audit(1741634636.507:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f305558e997 code=0x7ffc0000 [ 246.567971][ T6819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.586770][ T6819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.592085][ T7093] EXT4-fs (loop7): 1 truncate cleaned up [ 246.602367][ T7093] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 246.627362][ T26] audit: type=1326 audit(1741634636.507:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f305558d169 code=0x7ffc0000 [ 246.663740][ T7093] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2186: inode #15: comm syz.7.589: corrupted in-inode xattr [ 246.687511][ T7093] EXT4-fs warning (device loop7): ext4_xattr_set_entry:1723: inode #15: comm syz.7.589: unable to update i_inline_off [ 246.710954][ T7093] EXT4-fs error (device loop7): ext4_xattr_ibody_get:603: inode #15: comm syz.7.589: corrupted in-inode xattr [ 246.716278][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.750554][ T26] audit: type=1326 audit(1741634636.507:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f305558e997 code=0x7ffc0000 [ 246.785474][ T6819] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.798846][ T26] audit: type=1326 audit(1741634636.507:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f305558bdca code=0x7ffc0000 [ 246.833940][ T6819] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.850695][ T6819] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.859442][ T6819] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.870894][ T26] audit: type=1326 audit(1741634636.507:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305558d169 code=0x7ffc0000 [ 246.910763][ T26] audit: type=1326 audit(1741634636.507:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.7.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f305558d169 code=0x7ffc0000 [ 246.934179][ T5783] EXT4-fs (loop7): unmounting filesystem. [ 246.940255][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.964471][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.763218][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.789606][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.839940][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.864992][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.973029][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.161114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 252.176931][ T7172] loop7: detected capacity change from 0 to 512 [ 252.195524][ T7172] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.267584][ T7172] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2: comm syz.7.608: invalid block [ 252.330526][ T7172] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.608: invalid indirect mapped block 10 (level 1) [ 252.387678][ T7172] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.608: invalid indirect mapped block 8 (level 1) [ 252.431026][ T7172] EXT4-fs (loop7): 1 truncate cleaned up [ 252.455586][ T7172] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 252.638325][ T5783] EXT4-fs error (device loop7): ext4_lookup:1850: inode #2: comm syz-executor: bad inode number: 11 [ 252.700968][ T5783] EXT4-fs error (device loop7): ext4_lookup:1850: inode #2: comm syz-executor: bad inode number: 11 [ 252.838262][ T6971] EXT4-fs (loop7): unmounting filesystem. [ 254.107277][ T56] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.110338][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 254.110353][ T26] audit: type=1326 audit(2000000003.229:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 254.421129][ T26] audit: type=1326 audit(2000000003.279:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 254.652298][ T26] audit: type=1326 audit(2000000003.279:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 254.715672][ T26] audit: type=1326 audit(2000000003.279:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 254.824210][ T56] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.850829][ T26] audit: type=1326 audit(2000000003.279:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 254.959836][ T26] audit: type=1326 audit(2000000003.279:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 254.996850][ T56] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.075991][ T26] audit: type=1326 audit(2000000003.279:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 255.232183][ T26] audit: type=1326 audit(2000000003.279:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 255.277195][ T56] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.360806][ T26] audit: type=1326 audit(2000000003.279:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 255.867128][ T7221] loop8: detected capacity change from 0 to 32768 [ 255.881068][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.887450][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.931870][ T26] audit: type=1326 audit(2000000003.279:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 256.042318][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'. [ 256.051478][ T7226] device bridge_slave_1 left promiscuous mode [ 256.057926][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.179688][ T7226] device bridge_slave_0 left promiscuous mode [ 256.222403][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.235946][ T4261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.300054][ T4261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.308800][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.348392][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.361172][ T4261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.370825][ T4261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.339696][ T7258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.347751][ T7258] IPv6: NLM_F_CREATE should be set when creating new route [ 257.467508][ T7227] chnl_net:caif_netlink_parms(): no params data found [ 258.173493][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.191525][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.199716][ T7227] device bridge_slave_0 entered promiscuous mode [ 259.550143][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 259.693138][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.700312][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.736027][ T7227] device bridge_slave_1 entered promiscuous mode [ 260.816998][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.603072][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 261.658357][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.797540][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.842126][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.029130][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.364624][ T7227] team0: Port device team_slave_0 added [ 263.671327][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 263.888574][ T7227] team0: Port device team_slave_1 added [ 264.303762][ T56] device hsr_slave_0 left promiscuous mode [ 264.321370][ T56] device hsr_slave_1 left promiscuous mode [ 264.328708][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.349541][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.383590][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.420782][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.449176][ T56] device bridge_slave_1 left promiscuous mode [ 264.468788][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.490144][ T56] device bridge_slave_0 left promiscuous mode [ 264.526100][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.596347][ T56] device veth1_macvtap left promiscuous mode [ 264.610819][ T56] device veth0_macvtap left promiscuous mode [ 264.621858][ T56] device veth1_vlan left promiscuous mode [ 264.644044][ T56] device veth0_vlan left promiscuous mode [ 266.212921][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 267.926708][ T56] team0 (unregistering): Port device team_slave_1 removed [ 267.982145][ T56] team0 (unregistering): Port device team_slave_0 removed [ 268.033587][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.080082][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.438569][ T56] bond0 (unregistering): (slave team0): Releasing backup interface [ 268.608994][ T56] bond0 (unregistering): Released all slaves [ 268.703364][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.711248][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.738944][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.761176][ T7386] netlink: 'syz.6.652': attribute type 39 has an invalid length. [ 268.829055][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.836384][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.880484][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.028519][ T7227] device hsr_slave_0 entered promiscuous mode [ 269.049946][ T7227] device hsr_slave_1 entered promiscuous mode [ 270.634314][ T7427] loop8: detected capacity change from 0 to 256 [ 270.704633][ T7427] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 270.837618][ T7427] loop8: detected capacity change from 256 to 11 [ 270.855121][ T7434] syz.8.661: attempt to access beyond end of device [ 270.855121][ T7434] loop8: rw=2049, sector=136, nr_sectors = 1 limit=11 [ 271.100757][ T7434] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 271.308720][ T7427] loop8: [ 271.574478][ T7434] syz.8.661: attempt to access beyond end of device [ 271.574478][ T7434] loop8: rw=2049, sector=208, nr_sectors = 8 limit=11 [ 271.876063][ T7227] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 272.769726][ T7227] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 272.827626][ T7227] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 272.859971][ T7227] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 273.926285][ T7227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.450013][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.471255][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.622439][ T7227] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.676292][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.689532][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.708651][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.715868][ T4559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.826622][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.251663][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.296859][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.377355][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.384570][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.432430][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.464254][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.500191][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.511974][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.241296][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.323940][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.358152][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.381014][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.391697][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.408245][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.417150][ T4259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.429010][ T4259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.438165][ T4259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.447479][ T4259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.455221][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.464246][ T4259] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.471774][ T4259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.506324][ T7227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.411716][ T7491] chnl_net:caif_netlink_parms(): no params data found [ 281.431945][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.439477][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.463548][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.510836][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 282.051984][ T56] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.494198][ T7491] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.505920][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.517511][ T7491] device bridge_slave_0 entered promiscuous mode [ 282.638470][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.657066][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.672256][ T7491] device bridge_slave_1 entered promiscuous mode [ 282.741147][ T56] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.880696][ T56] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.912975][ T7491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.982269][ T7491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.076599][ T56] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.105903][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.131462][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.170527][ T7227] device veth0_vlan entered promiscuous mode [ 283.230434][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.257120][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.272155][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.284844][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.312781][ T7227] device veth1_vlan entered promiscuous mode [ 283.353824][ T7491] team0: Port device team_slave_0 added [ 283.423146][ T7491] team0: Port device team_slave_1 added [ 283.471816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 283.490905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 283.537425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.554860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.590936][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 283.600975][ T7227] device veth0_macvtap entered promiscuous mode [ 283.610371][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.618230][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.645274][ T7491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.702517][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.709491][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.808753][ T7491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.825483][ T7227] device veth1_macvtap entered promiscuous mode [ 283.860722][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.871010][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.971192][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.994857][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.006654][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.017712][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.027984][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.038899][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.049128][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.060029][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.127859][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.150504][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.175789][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.352626][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.993355][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.021897][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.033046][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.047346][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.060877][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.078391][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.098853][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.109844][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.135200][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.146475][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.157097][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.175285][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.186249][ T7491] device hsr_slave_0 entered promiscuous mode [ 285.214301][ T7491] device hsr_slave_1 entered promiscuous mode [ 285.230786][ T7491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.238399][ T7491] Cannot create hsr debugfs directory [ 285.251073][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.264381][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.072755][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 286.245432][ T7227] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.260757][ T7227] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.269875][ T7227] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.278927][ T7227] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.580824][ T7593] bridge: RTM_NEWNEIGH with invalid ether address [ 287.861440][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.869802][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.151669][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 288.234987][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.697'. [ 289.128569][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.135182][ T4555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.144178][ T4555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.172175][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.231003][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.697'. [ 289.246871][ T7623] netlink: 44302 bytes leftover after parsing attributes in process `syz.5.697'. [ 291.027949][ T7644] loop9: detected capacity change from 0 to 512 [ 291.356671][ T7644] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 2: comm syz.9.616: invalid block [ 291.378265][ T7644] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.616: invalid indirect mapped block 10 (level 1) [ 291.402134][ T7644] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.616: invalid indirect mapped block 8 (level 1) [ 291.429448][ T7644] EXT4-fs (loop9): 1 truncate cleaned up [ 291.436925][ T7644] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 292.748187][ T56] device hsr_slave_0 left promiscuous mode [ 292.788902][ T56] device hsr_slave_1 left promiscuous mode [ 292.829540][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.847816][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.897922][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.926190][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.983946][ T56] device bridge_slave_1 left promiscuous mode [ 293.000472][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.040254][ T56] device bridge_slave_0 left promiscuous mode [ 293.063967][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.102703][ T7227] EXT4-fs (loop9): unmounting filesystem. [ 293.146257][ T56] device veth1_macvtap left promiscuous mode [ 293.152766][ T56] device veth0_macvtap left promiscuous mode [ 293.170007][ T56] device veth1_vlan left promiscuous mode [ 293.180861][ T56] device veth0_vlan left promiscuous mode [ 297.420783][ T7699] SET target dimension over the limit! [ 298.705028][ T56] team0 (unregistering): Port device team_slave_1 removed [ 298.982565][ T56] team0 (unregistering): Port device team_slave_0 removed [ 299.554310][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.752984][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.205516][ T7716] overlayfs: failed to clone upperpath [ 301.536451][ T56] bond0 (unregistering): Released all slaves [ 302.787938][ T7491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.805502][ T7491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.824667][ T7491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.850016][ T7491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.196870][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.289618][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.312065][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.345733][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.406861][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.427241][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.454663][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.461802][ T4555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.529034][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.557699][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.596741][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.635403][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.642602][ T4555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.665171][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.689877][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.739945][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.767538][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.803879][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.831769][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.871336][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.891315][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.954215][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.976989][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.347162][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.550546][ T7491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.583568][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.705951][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.184025][ T7491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.592272][ T7491] device veth0_vlan entered promiscuous mode [ 306.623911][ T7491] device veth1_vlan entered promiscuous mode [ 306.645985][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.657810][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.667233][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.676452][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.687333][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.726263][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.739854][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.760371][ T7491] device veth0_macvtap entered promiscuous mode [ 306.774449][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.783770][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.800130][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.816514][ T7491] device veth1_macvtap entered promiscuous mode [ 306.833481][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.844346][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.854546][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.865402][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.875653][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.886768][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.896757][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.907840][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.917708][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.928238][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.939242][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.949788][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.961782][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.971844][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.983049][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.992942][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.003709][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.013721][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.024174][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.034518][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.045119][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.056102][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.063667][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.072295][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.081919][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.090544][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.099461][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.115045][ T7491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.124238][ T7491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.133090][ T7491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.142530][ T7491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.252017][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.260234][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.301483][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.317513][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.328043][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.359653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.055511][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 309.091326][ T7808] device bridge_slave_1 left promiscuous mode [ 309.097625][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.140837][ T7808] device bridge_slave_0 left promiscuous mode [ 309.150556][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.058967][ T7809] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.068587][ T7809] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.077394][ T7809] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.086133][ T7809] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.171725][ T7809] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 311.545354][ T7837] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.742'. [ 315.732507][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.756'. [ 317.756561][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.762930][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.734437][ T7912] infiniband syz0: set active [ 318.739604][ T7912] infiniband syz0: added bond0 [ 318.790151][ T7912] infiniband syz0: Couldn't open port 1 [ 318.824391][ T7912] RDS/IB: syz0: added [ 318.828744][ T7912] smc: adding ib device syz0 with port count 1 [ 318.835164][ T7912] smc: ib device syz0 port 1 has pnetid [ 324.052656][ T7970] bad cache= option: noneev:~0OD˕KVڐ-!͚3\7 Zp(v [ 324.052656][ T7970] [ 324.063627][ T7970] CIFS: VFS: bad cache= option: noneev:~0OD˕KVڐ-!͚3\7 Zp(v [ 326.216506][ T8000] netlink: 132 bytes leftover after parsing attributes in process `syz.5.786'. [ 326.285190][ T8000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.786'. [ 328.326816][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 329.015197][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 329.105709][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 329.214992][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): 30XD: link becomes ready [ 329.355680][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 329.370554][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 329.850325][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 333.676714][ T8088] syz.1.809[8088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.676818][ T8088] syz.1.809[8088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.215482][ T8093] syz.0.810 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 334.974400][ T8088] syz.1.809[8088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.974498][ T8088] syz.1.809[8088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.310815][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 336.681539][ T8139] Zero length message leads to an empty skb [ 344.182222][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.837'. [ 344.271177][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.837'. [ 352.410066][ T8276] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 352.504720][ T8278] tipc: Started in network mode [ 352.531634][ T8278] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 352.553777][ T8278] tipc: Enabled bearer , priority 10 [ 353.551037][ T4329] tipc: Node number set to 15444650 [ 355.906908][ T8320] netlink: 'syz.9.868': attribute type 10 has an invalid length. [ 355.914738][ T8320] netlink: 40 bytes leftover after parsing attributes in process `syz.9.868'. [ 355.939812][ T8320] team0: Port device geneve0 added [ 357.161665][ T8332] device ip6gre0 entered promiscuous mode [ 357.168139][ T8332] device vlan2 entered promiscuous mode [ 357.176500][ T8332] device ip6gre0 left promiscuous mode [ 357.922565][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.873'. [ 358.503151][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.874'. [ 359.152625][ T8357] overlayfs: failed to clone upperpath [ 366.417445][ T8461] netlink: 'syz.1.902': attribute type 20 has an invalid length. [ 368.844461][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 369.966215][ T8512] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 370.389705][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.919'. [ 370.410882][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.919'. [ 371.991807][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.9.927'. [ 372.810213][ T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 372.819809][ T47] Bluetooth: hci4: Injecting HCI hardware error event [ 372.829619][ T47] Bluetooth: hci4: hardware error 0x00 [ 374.288688][ T8579] overlayfs: failed to clone upperpath [ 374.668574][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.938'. [ 374.691378][ T8596] device vlan2 entered promiscuous mode [ 374.696980][ T8596] device bridge0 entered promiscuous mode [ 374.723008][ T8596] device bridge0 left promiscuous mode [ 374.911342][ T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 379.363432][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.369761][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.862029][ T8667] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 380.869846][ T8667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.957'. [ 380.910284][ T8667] team0: Port device geneve0 added [ 381.875160][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 385.405090][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 385.405105][ T26] audit: type=1326 audit(2000000134.529:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 385.842837][ T26] audit: type=1326 audit(2000000134.569:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 386.290774][ T26] audit: type=1326 audit(2000000134.569:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 386.419060][ T26] audit: type=1326 audit(2000000134.569:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 386.689479][ T26] audit: type=1326 audit(2000000134.569:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 388.520787][ T26] audit: type=1326 audit(2000000134.569:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 388.545240][ T26] audit: type=1326 audit(2000000134.569:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 388.574149][ T26] audit: type=1326 audit(2000000134.569:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 388.642722][ T26] audit: type=1326 audit(2000000134.569:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 388.665460][ T26] audit: type=1326 audit(2000000134.569:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c58d169 code=0x7ffc0000 [ 390.784483][ T8767] xt_NFQUEUE: number of total queues is 0 [ 396.772575][ T8821] 9pnet_fd: Insufficient options for proto=fd [ 396.906277][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'. [ 399.607661][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 399.607676][ T26] audit: type=1326 audit(2000000148.719:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 399.837562][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1004'. [ 400.174142][ T26] audit: type=1326 audit(2000000148.719:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 405.222399][ T26] audit: type=1326 audit(2000000148.729:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 405.526704][ T26] audit: type=1326 audit(2000000148.729:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 405.569080][ T26] audit: type=1326 audit(2000000148.729:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 405.699641][ T26] audit: type=1326 audit(2000000148.729:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 405.735182][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1011'. [ 405.775506][ T8908] device vlan2 entered promiscuous mode [ 405.788686][ T26] audit: type=1326 audit(2000000148.729:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 405.832175][ T8908] device bridge0 entered promiscuous mode [ 405.862141][ T8908] device bridge0 left promiscuous mode [ 405.882000][ T8914] netlink: 'syz.0.1013': attribute type 5 has an invalid length. [ 405.892685][ T26] audit: type=1326 audit(2000000148.729:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 405.968208][ T26] audit: type=1326 audit(2000000148.729:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb804b8bad0 code=0x7ffc0000 [ 406.044458][ T26] audit: type=1326 audit(2000000148.729:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 406.146018][ T26] audit: type=1326 audit(2000000148.729:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 406.389538][ T26] audit: type=1326 audit(2000000148.729:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 408.706297][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1022'. [ 411.077700][ T4557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.143369][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a3c8000: rx timeout, send abort [ 413.005845][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805765dc00: rx timeout, send abort [ 413.014101][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a3c8000: abort rx timeout. Force session deactivation [ 413.283740][ T4557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.362526][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572dc400: rx timeout, send abort [ 414.707393][ T4557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.870792][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572dc400: abort rx timeout. Force session deactivation [ 416.538093][ T4557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.220860][ T9064] syz.0.1051[9064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.221678][ T9064] syz.0.1051[9064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.321945][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 424.086096][ T9082] device hsr_slave_1 left promiscuous mode [ 428.003055][ T9156] tipc: Failed to remove unknown binding: 66,1,1/0:2700373346/2700373348 [ 428.181016][ T9156] tipc: Failed to remove unknown binding: 66,1,1/0:2700373346/2700373348 [ 430.071973][ T4557] IPVS: stopping master sync thread 5799 ... [ 434.918327][ T9217] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1090'. [ 435.019429][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1090'. [ 440.178622][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.185726][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.531077][ T9264] rdma_rxe: rxe_register_device failed with error -23 [ 440.539401][ T9264] rdma_rxe: failed to add bond0 [ 441.341971][ T4557] device hsr_slave_0 left promiscuous mode [ 441.361560][ T4557] device hsr_slave_1 left promiscuous mode [ 441.396518][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.414832][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.511834][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.099525][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.115169][ T4557] device bridge_slave_1 left promiscuous mode [ 442.887397][ T4557] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.963127][ T4557] device bridge_slave_0 left promiscuous mode [ 444.044299][ T4557] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.905736][ T4557] device veth1_macvtap left promiscuous mode [ 447.110864][ T4557] device veth0_macvtap left promiscuous mode [ 447.472239][ T4557] device veth1_vlan left promiscuous mode [ 447.478491][ T4557] device veth0_vlan left promiscuous mode [ 448.066049][ T4261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.079404][ T4261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.095330][ T4261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.103323][ T4261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.113070][ T4261] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 448.120362][ T4261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.143022][ T4557] team0 (unregistering): Port device team_slave_1 removed [ 450.198754][ T4557] team0 (unregistering): Port device team_slave_0 removed [ 450.243653][ T4557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.291507][ T4557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.784171][ T4557] bond0 (unregistering): Released all slaves [ 450.790799][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 450.869638][ T9314] lo speed is unknown, defaulting to 1000 [ 450.878939][ T9314] lo speed is unknown, defaulting to 1000 [ 450.885835][ T9314] lo speed is unknown, defaulting to 1000 [ 451.019318][ T9314] infiniband sz1: set active [ 451.024227][ T9314] infiniband sz1: added lo [ 451.029142][ T9314] rdma_rxe: unable to create cq [ 451.034487][ T9314] infiniband sz1: Couldn't create ib_mad CQ [ 451.040579][ T9314] infiniband sz1: Couldn't open port 1 [ 451.048923][ T27] lo speed is unknown, defaulting to 1000 [ 451.079005][ T9314] RDS/IB: sz1: added [ 451.083223][ T9314] smc: adding ib device sz1 with port count 1 [ 451.089403][ T9314] smc: ib device sz1 port 1 has pnetid [ 451.151173][ T9314] lo speed is unknown, defaulting to 1000 [ 451.246037][ T9314] lo speed is unknown, defaulting to 1000 [ 451.342087][ T9314] lo speed is unknown, defaulting to 1000 [ 451.438566][ T9314] lo speed is unknown, defaulting to 1000 [ 451.535168][ T27] lo speed is unknown, defaulting to 1000 [ 451.543795][ T9314] lo speed is unknown, defaulting to 1000 [ 452.212946][ T9314] lo speed is unknown, defaulting to 1000 [ 452.882928][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 454.698521][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 455.243925][ T4261] Bluetooth: hci5: command 0x040f tx timeout [ 455.397628][ T9370] lo speed is unknown, defaulting to 1000 [ 455.575225][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.601554][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.637699][ T9330] device bridge_slave_0 entered promiscuous mode [ 455.744534][ T4557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.447316][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.454950][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.469402][ T9330] device bridge_slave_1 entered promiscuous mode [ 456.628527][ T4557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.777134][ T4557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.804978][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.849332][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.959707][ T4557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.280683][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 457.423452][ T9330] team0: Port device team_slave_0 added [ 457.436189][ T9330] team0: Port device team_slave_1 added [ 458.777183][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.794621][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.919082][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.934915][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.942803][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.968726][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.136494][ T9330] device hsr_slave_0 entered promiscuous mode [ 459.186178][ T9330] device hsr_slave_1 entered promiscuous mode [ 459.250241][ T9330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.283190][ T9330] Cannot create hsr debugfs directory [ 471.327232][ T9330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.677853][ T9330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.694244][ T9330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.112278][ T9330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.948711][ T9591] syz.5.1172[9591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.948811][ T9591] syz.5.1172[9591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.703709][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.755330][ T9601] I/O error, dev loop19, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 475.797552][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.806113][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.818616][ T9601] EXT4-fs (loop19): unable to read superblock [ 475.834696][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.876994][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.911214][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.940230][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.947411][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.975918][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.016395][ T4557] device hsr_slave_0 left promiscuous mode [ 476.051194][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.071821][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.089422][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.110834][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.128881][ T4557] device bridge_slave_1 left promiscuous mode [ 476.140878][ T4557] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.166786][ T4557] device bridge_slave_0 left promiscuous mode [ 476.183443][ T4557] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.374957][ T4557] device veth1_macvtap left promiscuous mode [ 477.007234][ T4557] device veth0_macvtap left promiscuous mode [ 477.041798][ T4557] device veth1_vlan left promiscuous mode [ 477.047774][ T4557] device veth0_vlan left promiscuous mode [ 477.328577][ T4557] team0 (unregistering): Port device geneve0 removed [ 477.991035][ T4557] team0 (unregistering): Port device team_slave_1 removed [ 478.039156][ T4557] team0 (unregistering): Port device team_slave_0 removed [ 478.087950][ T4557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.137836][ T4557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.632748][ T4557] bond0 (unregistering): Released all slaves [ 478.718300][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1177'. [ 478.728570][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 478.737810][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.748020][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.755204][ T4555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.763493][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 478.772430][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 478.797095][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 478.828784][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.869310][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.885774][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.897443][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 478.912376][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.934124][ T9330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.954235][ T9330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 478.969704][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 478.997898][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.039621][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.298825][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.307915][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.319372][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.346548][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.359316][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.395095][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.406963][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.422967][ T9330] device veth0_vlan entered promiscuous mode [ 479.437895][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.447749][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.461399][ T9330] device veth1_vlan entered promiscuous mode [ 479.491769][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.501069][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 479.509244][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.518712][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.531453][ T9330] device veth0_macvtap entered promiscuous mode [ 479.542716][ T9330] device veth1_macvtap entered promiscuous mode [ 479.561786][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.572486][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.583898][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.598372][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.608482][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.619035][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.629502][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.645827][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.657582][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.668951][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.679597][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.689561][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.700162][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.710141][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.726405][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.737674][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.749130][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.760434][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.769995][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 479.780203][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.788742][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.799806][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.809211][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 479.817888][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 479.837296][ T9330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.847262][ T9330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.856529][ T9330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.866159][ T9330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.946908][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.958106][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.989406][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 480.020019][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.036395][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.050382][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 480.891900][ T9688] netlink: 'syz.5.1190': attribute type 21 has an invalid length. [ 482.391217][ T9689] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 483.509800][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1182'. [ 483.580564][ T9712] overlayfs: failed to clone upperpath [ 485.427885][ T9748] overlayfs: failed to clone upperpath [ 488.477256][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 488.505980][ T26] audit: type=1326 audit(2000000237.599:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c58d169 code=0x7fc00000 [ 488.578526][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1212'. [ 488.662468][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1212'. [ 490.521408][ T9803] overlayfs: failed to clone upperpath [ 491.256259][ T26] audit: type=1326 audit(2000000240.369:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 491.552976][ T26] audit: type=1326 audit(2000000240.669:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 491.587531][ T26] audit: type=1326 audit(2000000240.669:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 491.654971][ T26] audit: type=1326 audit(2000000240.669:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 491.686479][ T26] audit: type=1326 audit(2000000240.679:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 491.728208][ T26] audit: type=1326 audit(2000000240.679:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 491.805629][ T26] audit: type=1326 audit(2000000240.679:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 491.828322][ T26] audit: type=1326 audit(2000000240.679:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 491.850650][ T26] audit: type=1326 audit(2000000240.679:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 495.109304][ T9857] overlayfs: failed to clone upperpath [ 500.017853][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 500.041125][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1237'. [ 502.201554][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.207875][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.948714][ T9969] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 507.576988][ T9999] device xfrm1 entered promiscuous mode [ 507.600861][ T9999] team0: Device xfrm1 is of different type [ 512.701179][T10036] netlink: 'syz.1.1263': attribute type 4 has an invalid length. [ 512.708957][T10036] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1263'. [ 513.748311][T10047] capability: warning: `syz.6.1265' uses 32-bit capabilities (legacy support in use) [ 519.485241][T10095] netlink: 'syz.5.1277': attribute type 4 has an invalid length. [ 519.493365][T10095] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1277'. [ 522.545219][T10113] loop3: detected capacity change from 0 to 128 [ 522.604345][T10113] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 523.292506][T10113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 523.497911][T10124] SET target dimension over the limit! [ 523.556245][ T9330] EXT4-fs (loop3): unmounting filesystem. [ 523.685172][T10134] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1289'. [ 523.734498][T10134] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1289'. [ 525.997282][T10151] netlink: 'syz.6.1291': attribute type 4 has an invalid length. [ 526.005060][T10151] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1291'. [ 528.031344][T10176] loop3: detected capacity change from 0 to 512 [ 528.525318][T10176] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 528.536748][T10176] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 528.685619][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 528.685634][ T26] audit: type=1326 audit(2000000277.812:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 528.728916][ T26] audit: type=1326 audit(2000000277.852:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 528.795167][ T26] audit: type=1326 audit(2000000277.882:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 528.886171][ T26] audit: type=1326 audit(2000000277.882:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 528.909616][ T26] audit: type=1326 audit(2000000277.882:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 528.962663][ T26] audit: type=1326 audit(2000000277.882:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 528.996191][ T26] audit: type=1326 audit(2000000277.882:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 529.558724][ T26] audit: type=1326 audit(2000000277.882:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 529.647718][ T26] audit: type=1326 audit(2000000277.892:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 529.670247][ T26] audit: type=1326 audit(2000000277.892:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.3.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302c38d169 code=0x7ffc0000 [ 529.793550][ T9330] EXT4-fs (loop3): unmounting filesystem. [ 529.907018][T10200] SET target dimension over the limit! [ 531.368745][T10222] netlink: 'syz.6.1305': attribute type 8 has an invalid length. [ 534.659546][T10251] loop3: detected capacity change from 0 to 2048 [ 534.948196][T10251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.450268][T10253] device batadv0 entered promiscuous mode [ 535.480751][T10253] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 535.499888][T10253] device batadv0 left promiscuous mode [ 535.699411][T10259] SET target dimension over the limit! [ 537.403028][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 537.412634][ T26] audit: type=1326 audit(2000000286.501:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 537.796575][ T26] audit: type=1326 audit(2000000286.501:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb804b8d169 code=0x7ffc0000 [ 541.135730][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1329'. [ 544.966108][ T26] audit: type=1326 audit(2000000294.080:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 545.018338][ T26] audit: type=1326 audit(2000000294.080:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 545.115910][ T26] audit: type=1326 audit(2000000294.090:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 545.892071][ T26] audit: type=1326 audit(2000000294.090:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 545.947771][ T26] audit: type=1326 audit(2000000294.090:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 545.999599][ T26] audit: type=1326 audit(2000000294.090:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 546.033377][ T26] audit: type=1326 audit(2000000294.120:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 546.076514][ T26] audit: type=1326 audit(2000000294.120:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 546.225158][ T26] audit: type=1326 audit(2000000294.120:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 547.677569][ T26] audit: type=1326 audit(2000000294.120:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc5538d169 code=0x7ffc0000 [ 547.877590][T10384] overlayfs: failed to clone upperpath [ 551.921579][T10417] lo speed is unknown, defaulting to 1000 [ 552.282446][T10424] loop3: detected capacity change from 0 to 2048 [ 552.290527][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1354'. [ 552.441480][T10424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.400201][T10469] loop3: detected capacity change from 0 to 16 [ 555.491076][T10469] erofs: (device loop3): mounted with root inode @ nid 36. [ 555.912315][T10472] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 556.240441][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 556.240454][ T26] audit: type=1326 audit(2000000305.359:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10480 comm="syz.5.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x0 [ 556.329943][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 556.377936][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1369'. [ 556.560338][T10493] loop3: detected capacity change from 0 to 256 [ 556.573343][T10489] netlink: 'syz.9.1372': attribute type 10 has an invalid length. [ 556.630093][T10489] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 556.646909][T10493] FAT-fs (loop3): Directory bread(block 64) failed [ 556.659363][T10493] FAT-fs (loop3): Directory bread(block 65) failed [ 556.681877][T10493] FAT-fs (loop3): Directory bread(block 66) failed [ 556.710901][T10493] FAT-fs (loop3): Directory bread(block 67) failed [ 556.735395][T10493] FAT-fs (loop3): Directory bread(block 68) failed [ 556.761444][T10493] FAT-fs (loop3): Directory bread(block 69) failed [ 556.788961][T10493] FAT-fs (loop3): Directory bread(block 70) failed [ 556.797778][T10493] FAT-fs (loop3): Directory bread(block 71) failed [ 556.833831][T10493] FAT-fs (loop3): Directory bread(block 72) failed [ 556.850445][T10493] FAT-fs (loop3): Directory bread(block 73) failed [ 559.942108][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1382'. [ 561.493911][T10557] Malformed UNC in devname [ 561.493911][T10557] [ 561.501450][T10557] CIFS: VFS: Malformed UNC in devname [ 563.647754][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.710923][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.764564][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1392'. [ 564.952336][T10598] loop3: detected capacity change from 0 to 4096 [ 566.548776][T10634] loop3: detected capacity change from 0 to 2048 [ 566.610562][T10634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 566.673972][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 570.280261][ T9330] EXT4-fs (loop3): unmounting filesystem. [ 571.584022][T10701] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1421'. [ 574.686439][T10744] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 574.713200][T10744] CIFS: Unable to determine destination address [ 575.116876][ T4261] Bluetooth: hci5: command 0x0406 tx timeout [ 578.943230][T10797] syz.6.1448 (10797): attempted to duplicate a private mapping with mremap. This is not supported. [ 579.118699][T10805] ip6t_srh: unknown srh invflags 7863 [ 585.089929][T10872] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 588.160475][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 590.006954][T10922] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 590.214370][T10935] No such timeout policy "syz1" [ 590.799027][T10922] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 590.844852][T10922] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 590.858212][T10922] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 590.868053][T10922] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 590.946533][T10922] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 593.626914][T10968] ip6t_srh: unknown srh invflags 7863 [ 596.245519][T10983] netlink: 'syz.3.1493': attribute type 27 has an invalid length. [ 596.550873][T10987] netlink: 'syz.3.1493': attribute type 27 has an invalid length. [ 597.039749][T10979] bridge0: port 3(vlan3) entered blocking state [ 597.046117][T10979] bridge0: port 3(vlan3) entered disabled state [ 597.070906][T10979] device vlan3 entered promiscuous mode [ 597.097157][T10979] device syz_tun entered promiscuous mode [ 597.117243][T10979] bridge0: port 3(vlan3) entered blocking state [ 597.123699][T10979] bridge0: port 3(vlan3) entered forwarding state [ 597.995924][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1498'. [ 598.142246][T11016] netlink: del zone limit has 8 unknown bytes [ 599.295276][T11028] ip6t_srh: unknown srh invflags 7863 [ 602.197299][T11045] loop3: detected capacity change from 0 to 2048 [ 602.641444][T11045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.837374][T11049] 9pnet: Could not find request transport: f [ 604.785813][T11075] bridge0: port 3(vlan2) entered blocking state [ 604.805916][T11075] bridge0: port 3(vlan2) entered disabled state [ 604.825088][T11075] device vlan2 entered promiscuous mode [ 604.830866][T11075] device syz_tun entered promiscuous mode [ 604.847632][T11075] bridge0: port 3(vlan2) entered blocking state [ 604.854010][T11075] bridge0: port 3(vlan2) entered forwarding state [ 607.932307][ T26] audit: type=1326 audit(2000000613.004:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 608.964326][ T26] audit: type=1326 audit(2000000613.004:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 609.073837][ T26] audit: type=1326 audit(2000000613.004:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 609.849686][ T26] audit: type=1326 audit(2000000613.004:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 609.947702][ T26] audit: type=1326 audit(2000000613.004:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 610.027708][ T26] audit: type=1326 audit(2000000613.004:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 610.107450][ T26] audit: type=1326 audit(2000000613.004:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 610.200244][ T26] audit: type=1326 audit(2000000613.004:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958d169 code=0x7ffc0000 [ 610.375968][T11139] netlink: 'syz.3.1531': attribute type 10 has an invalid length. [ 610.446017][T11139] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 616.919712][T11217] netlink: 'syz.6.1543': attribute type 10 has an invalid length. [ 616.939468][T11217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 619.484441][T11243] netlink: 'syz.9.1553': attribute type 1 has an invalid length. [ 619.576413][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 619.663036][T11243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.748901][T11249] device vlan4 entered promiscuous mode [ 619.788426][T11249] device bond1 entered promiscuous mode [ 619.832243][T11249] device bond1 left promiscuous mode [ 622.147365][T11295] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 624.552259][T11311] ptrace attach of "./syz-executor exec"[7227] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ( [ 624.555952][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.734354][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.474147][T11365] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1578'. [ 632.147833][T11401] device batadv_slave_1 entered promiscuous mode [ 632.757236][ T26] audit: type=1326 audit(2000000637.864:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.6.1589" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a6c58d169 code=0x0 [ 633.122778][T11396] device batadv_slave_1 left promiscuous mode [ 636.447857][ T4431] ------------[ cut here ]------------ [ 636.453980][ T4431] WARNING: CPU: 0 PID: 4431 at io_uring/io_uring.c:2812 io_ring_exit_work+0x31d/0x794 [ 636.463608][ T4431] Modules linked in: [ 636.467553][ T4431] CPU: 0 PID: 4431 Comm: kworker/u4:10 Not tainted 6.1.130-syzkaller #0 [ 636.475888][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 636.486875][ T4431] Workqueue: events_unbound io_ring_exit_work [ 636.493022][ T4431] RIP: 0010:io_ring_exit_work+0x31d/0x794 [ 636.498883][ T4431] Code: 78 23 e8 fb 79 da f6 48 8b 7c 24 30 48 8b 74 24 18 e8 0c 1a 0a 00 48 85 c0 75 3f e8 e2 79 da f6 e9 f9 fd ff ff e8 d8 79 da f6 <0f> 0b b8 70 17 00 00 48 89 44 24 18 eb cf 48 8b 4c 24 10 80 e1 07 [ 636.518691][ T4431] RSP: 0018:ffffc90004ccfae0 EFLAGS: 00010293 [ 636.524750][ T4431] RAX: ffffffff8ab01fa8 RBX: 00000001000082c3 RCX: ffff88802ac55940 [ 636.532749][ T4431] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 636.540728][ T4431] RBP: ffffc90004ccfc50 R08: ffffffff8ab01f7b R09: fffff52000999f4d [ 636.548701][ T4431] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000001000082c5 [ 636.556658][ T4431] R13: ffff888026144260 R14: 1ffff11004c2884c R15: dffffc0000000000 [ 636.564636][ T4431] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 636.573568][ T4431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.580152][ T4431] CR2: 00007f3a6d2d56c0 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 636.588124][ T4431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.596076][ T4431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 636.604049][ T4431] Call Trace: [ 636.607327][ T4431] [ 636.610249][ T4431] ? __warn+0x15a/0x520 [ 636.614400][ T4431] ? io_ring_exit_work+0x31d/0x794 [ 636.619520][ T4431] ? report_bug+0x2af/0x500 [ 636.624007][ T4431] ? io_ring_exit_work+0x31d/0x794 [ 636.629125][ T4431] ? handle_bug+0x3d/0x70 [ 636.633443][ T4431] ? exc_invalid_op+0x16/0x40 [ 636.638122][ T4431] ? asm_exc_invalid_op+0x16/0x20 [ 636.643134][ T4431] ? io_ring_exit_work+0x2f0/0x794 [ 636.648246][ T4431] ? io_ring_exit_work+0x31d/0x794 [ 636.653342][ T4431] ? io_ring_exit_work+0x31d/0x794 [ 636.658491][ T4431] ? io_ring_ctx_wait_and_kill+0x314/0x314 [ 636.664337][ T4431] ? do_raw_spin_unlock+0x137/0x8a0 [ 636.669579][ T4431] ? process_one_work+0x806/0x1260 [ 636.674695][ T4431] process_one_work+0x917/0x1260 [ 636.679648][ T4431] ? worker_detach_from_pool+0x260/0x260 [ 636.685269][ T4431] ? _raw_spin_lock_irqsave+0x120/0x120 [ 636.690821][ T4431] ? kthread_data+0x4e/0xc0 [ 636.695329][ T4431] ? wq_worker_running+0x97/0x190 [ 636.700352][ T4431] worker_thread+0xa47/0x1200 [ 636.705021][ T4431] ? _raw_spin_unlock+0x40/0x40 [ 636.709878][ T4431] kthread+0x28d/0x320 [ 636.713958][ T4431] ? worker_clr_flags+0x190/0x190 [ 636.718986][ T4431] ? kthread_blkcg+0xd0/0xd0 [ 636.723558][ T4431] ret_from_fork+0x1f/0x30 [ 636.727983][ T4431] [ 636.730983][ T4431] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 636.738241][ T4431] CPU: 0 PID: 4431 Comm: kworker/u4:10 Not tainted 6.1.130-syzkaller #0 [ 636.746541][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 636.756585][ T4431] Workqueue: events_unbound io_ring_exit_work [ 636.762655][ T4431] Call Trace: [ 636.765949][ T4431] [ 636.768870][ T4431] dump_stack_lvl+0x1e3/0x2cb [ 636.773540][ T4431] ? nf_tcp_handle_invalid+0x647/0x647 [ 636.778989][ T4431] ? panic+0x764/0x764 [ 636.783047][ T4431] ? 0xffffffffa000095c [ 636.787200][ T4431] ? vscnprintf+0x59/0x80 [ 636.791520][ T4431] panic+0x318/0x764 [ 636.795404][ T4431] ? __warn+0x169/0x520 [ 636.799550][ T4431] ? memcpy_page_flushcache+0xfc/0xfc [ 636.805005][ T4431] ? ret_from_fork+0x1f/0x30 [ 636.809591][ T4431] __warn+0x348/0x520 [ 636.813590][ T4431] ? io_ring_exit_work+0x31d/0x794 [ 636.818697][ T4431] report_bug+0x2af/0x500 [ 636.823016][ T4431] ? io_ring_exit_work+0x31d/0x794 [ 636.828125][ T4431] handle_bug+0x3d/0x70 [ 636.832266][ T4431] exc_invalid_op+0x16/0x40 [ 636.836762][ T4431] asm_exc_invalid_op+0x16/0x20 [ 636.841603][ T4431] RIP: 0010:io_ring_exit_work+0x31d/0x794 [ 636.847314][ T4431] Code: 78 23 e8 fb 79 da f6 48 8b 7c 24 30 48 8b 74 24 18 e8 0c 1a 0a 00 48 85 c0 75 3f e8 e2 79 da f6 e9 f9 fd ff ff e8 d8 79 da f6 <0f> 0b b8 70 17 00 00 48 89 44 24 18 eb cf 48 8b 4c 24 10 80 e1 07 [ 636.866910][ T4431] RSP: 0018:ffffc90004ccfae0 EFLAGS: 00010293 [ 636.872987][ T4431] RAX: ffffffff8ab01fa8 RBX: 00000001000082c3 RCX: ffff88802ac55940 [ 636.880952][ T4431] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 636.888920][ T4431] RBP: ffffc90004ccfc50 R08: ffffffff8ab01f7b R09: fffff52000999f4d [ 636.896904][ T4431] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000001000082c5 [ 636.904864][ T4431] R13: ffff888026144260 R14: 1ffff11004c2884c R15: dffffc0000000000 [ 636.912830][ T4431] ? io_ring_exit_work+0x2f0/0x794 [ 636.917935][ T4431] ? io_ring_exit_work+0x31d/0x794 [ 636.923051][ T4431] ? io_ring_ctx_wait_and_kill+0x314/0x314 [ 636.928859][ T4431] ? do_raw_spin_unlock+0x137/0x8a0 [ 636.934054][ T4431] ? process_one_work+0x806/0x1260 [ 636.939156][ T4431] process_one_work+0x917/0x1260 [ 636.944095][ T4431] ? worker_detach_from_pool+0x260/0x260 [ 636.949720][ T4431] ? _raw_spin_lock_irqsave+0x120/0x120 [ 636.955255][ T4431] ? kthread_data+0x4e/0xc0 [ 636.959762][ T4431] ? wq_worker_running+0x97/0x190 [ 636.964775][ T4431] worker_thread+0xa47/0x1200 [ 636.969450][ T4431] ? _raw_spin_unlock+0x40/0x40 [ 636.974298][ T4431] kthread+0x28d/0x320 [ 636.978353][ T4431] ? worker_clr_flags+0x190/0x190 [ 636.983373][ T4431] ? kthread_blkcg+0xd0/0xd0 [ 636.987952][ T4431] ret_from_fork+0x1f/0x30 [ 636.992372][ T4431] [ 636.995648][ T4431] Kernel Offset: disabled [ 637.000034][ T4431] Rebooting in 86400 seconds..