last executing test programs: 13.747406026s ago: executing program 2 (id=35): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x112) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) 12.639242076s ago: executing program 2 (id=38): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff99, @void, @value}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0xc0902, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0x3}, 0xffffffffffffff3f) r5 = dup(r3) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES8=r0, @ANYRESHEX=r2], 0x150}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 11.223668999s ago: executing program 2 (id=43): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 10.563724212s ago: executing program 2 (id=46): r0 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfb, 0x1bf, &(0x7f0000000480)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfca5, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}, @IFLA_MTU={0x8, 0x4, 0xa3df}]}, 0x50}}, 0x0) mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x440, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@bsdgroups}, {@resgid}, {@nouid32}, {@debug}, {@acl}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000001c0)="44f7cc", 0x3, 0x8000c61) fallocate(r4, 0x0, 0x0, 0x8000c62) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffdffffffd) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000a2da8114a0c26fbc00000003000a1000000000000000000000000000000000000000ffffffff00000000000000000000000a065f18a00f8b822400000000000000007fffffff000000000000020000000000ffffffff0100000003000000000000000000726f736530020000000000000000000069705f767469300000000000000000fc687064647001003800000000000400007465716c30000000000008000000eddcaaaaaaaaaa00ffff"]}, 0x12a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x9, 0x1, 0x6, '\x00', 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xa0c2, 0x51) setsockopt$inet6_tcp_int(r7, 0x6, 0x272ecd23681d8b1, &(0x7f00000000c0)=0x10, 0x4) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000000)={0xffff, 0x6}, 0x1) 8.887628456s ago: executing program 2 (id=49): r0 = socket(0xa, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c2000000080045140020000000000011000037c1000c907801000000"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000", @ANYBLOB='\x00\x00\x00\x00\v'], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x244, 0x30, 0x300, 0x70bd31, 0x25dfdbff, {}, [{0x230, 0x1, [@m_skbedit={0xfc, 0x19, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x7, 0x101}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xfff7}}]}, {0x85, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9f17c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a168eca666c86a6321ae76cba859e771aa7894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69890f61ef4f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x74, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "2e52a8e13a46456cb054b36ca51c8d04c40b13d8c717d2f6e6458227ad895e21059311b0d4b066fc3199e5e9db278fbc23372d15a1e06052124286f8f8f8ca5cab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x30, 0x33, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x244}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) sched_setscheduler(0x0, 0x2, 0x0) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902240001000000000904000004030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) read$FUSE(r3, &(0x7f0000004c80)={0x2020}, 0x2020) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r6, 0x11, 0xa, 0x0, &(0x7f0000000000)=0xfffffffffffffcee) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000350000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000012c0004802800018008000100666962001c00028008000140000000110800000000000000000102400000000114000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.698611692s ago: executing program 4 (id=50): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="02", 0x1, 0x20004040, &(0x7f0000000200)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f00000001c0)=0x10, 0x800) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001200)="569b4f14f1199a956a2fb8364657d323cf74cb9e414f8af409b322c4b0ae4c84b0a863747844c3d4c030ce0e1b4be65896d018c8b064ba0761de358225f34cb4945346cc06e657a8d4ea8c8f944ab46d18dcea9b00f1f563a0971620295f331e58677e3a3dce71a13f4119b90aa2fa1b577b3cd92938a01ec3b87142a48cad7d957722b59826da4294f652b76ed03b287f9859fdcbfce510145f7bc552eaf17569dce928673275de51f2a2e3e52b838553f9729b7c1d73529effec5e764fd0fdcdf50488ddbe0762a4a5294df0189570975f0fe1c78511fd8d1192a0b083850535ecaec8a8471d812b51348c4ddacdaa7cd7752b943f0ef9f62c5fb0ef7c606f3327a1d2e76909c05572b5b8d1a646895ae1a755be76ed3dfca0210be2a834e0e083737c949e6eb3cfa1cbd56cd492a9ecc3c9aae4ca9520c4a75cf2e2f722f6a7882b1bbfbdff8004b10170076550a9abcd3e9607ed46bf10e36bd65bd4fee01d277e4c94b7da220bbda76ae6027dab7f7ef7a916d5c4a087dbc0cea7671f01aa645bd1a5f6836e01501f61afbf36788897cebeb57e1e7666ce30eed63bba71e00068dde5990f9f1e449a870042c5ab4942400b7e6fe5a3bfbb4fcf0bf6fdaa6c481dcb42e191865243712e43dba9c5aef792c439bb34040dd93dd481f7560cba5a8fd79f821c86ca2e249dd4281dbe3d88c21c42506acd3dac93e8dc70129cc663a97fb90d24c86df856927dc4b9df18f2b4066237173d3e311d7f21cfc34f435f9bc6f17a1e4166f7e9a6372d0991e9f40b4087cbb97945c103ddd05abdb255d4057216041b591f03a36968a639a3a1237b1d3afbc3bec660ad90f01376a744fae230afa183b1eec81ab12e2ff7ce54e8c5c09c1face4d62e82581933862e54e3f36feed9a984d055e9dc198ebfb5d1c32d0b3660fee54d36d34454fb74cbccce64d5a40c27f260f25ec5398aa9d24dcb9c68cfdbfcaf373465c3e633601e12c87d7edaef1025e5d975597106125425a8224603e2ff543ec38616bbf1593f3dd1ad2beb14fdc9fb5f91aca5bc20d6a514575ad3859231e546f47687c59e879a26b02a4eb72ebbbfe08f78145ff6659638ff259c2c60c2c85a56cce24ec186d41c7b92c5699abbe2677e0d98b7405aae5341624b0378ac52f9989929bd333e7e98bcb488a54de4cb7a4d51b79d043a89caff99b224fe12857fb492e5c9166ccb42f6638644bb18307c197e36369cd089ec50a0a69ddf7f5110d4fd5a630fd852c7655a5e0ad27b85a103ef2cabdd72f21d8dd73a83fa6e2c2d47ccd33c85663dfddeecc835e003964ea6daaaa5a41f980a656cc2ebcb37d6ccc9b999376bc6facc173120aafe086dde9f4cc564dfdf9c097193539e909700a5a71dc19007bdb88179c73d875100a55d2535d5f169e1d70c9062a9098a63982c4e67e8602d00d70df13df4e325b07680cdf4b84d70e7c9da322e99345bed770faf9b6f110a62aeb30441072eb2b2063a899aa88c13707d66e1b44efa6da8951f3c0004eec3fab43d2ae0e4688942da76966cc2467b71c640b5ff04f2728a915e632ac1ca3aca9d3349b8a6d7ed6c0adb1231569ea82e5f7f49589b9e81fa4a4efc3a4df986e03024b3421ac4de45773bb60b2b63f4f9cc5e07ec251884183d897ed349e95e3247f790a3dc55dc1a72cf96b0720ddf268ab91b19e78cf3a76343de97ed214de91a7a3a140e459cba00f07ef7e89106bfafc08cb450cd8ed436f037b87f4c9333c38f795f6dfd2360ede981c1ac8046d980e58daf273b6d9e3778a2793149bc35b03be1356fd0fbeb56f6f187f292327bcb7376c018f1935ce5db43b328186b83b047590c1eaa5940c6ec6820a181652f0ad0fa08230683f1758c50448b01cb51422a91ccc84bc3680726cce1bd25c5680f0c98fe66779a6f88cfed1e3260cd1597776b04b732ae326b21d7778ab72fd1039c59e6e4069ab6c761a8f48018247c4bda120ec135596461c95b94f18d5434337187fe459270303f0fd5e0c85ea2729289128f9173fd4f938bdb36714d23e8fc469043c8da67619926627b798879aa69801da25ea3a424237dc114ce8af2d6d56a1be0b2edc5eecbd4edd85af8695886151aebbe234914763adf63645dbf85515067b3e2686b4f8e34b555fd31e784d65ed256e5083f04ecde534d1fd669553f15a8a4203b08d1b71fb08abf5d592d47e3a5976a17f9003b8528091808f8088d21dbacabae425ae66e092ab1a93e1eb1849837907407284f9ac12635f4e3a35dd28c3bd553af5b94568db441eb259c7600498de18b2711ef56c3a56ca24897f0caa50538122025411abd4689941ade8408de601497b8a0f050fb50809389a2e32d8f60092eddef849ec96083b58808725e526b67ced54ba7d67b972643cf69b34789168203fd8faef6b59d00ac18c11b45fe371ab546713cab57b81922b7d92ab3d8b840e09def7220b70f0e546a22fb88ac36a590333c2982e0193c4ff236b68e014004433b869ef40e284dc38f067de1f44309be82dd1e24e42863dc57713ef178bae2d9b0a347cb76406e6cbf83d07a29b6eabdf509c23517991bc61c09edd497f664f9eb30f1723ea755ab3cbb98068148aace0f2f44682fb5aaf883be043f34bf73fd133ea1f214f36ff12993df3f07fc0cd13f055285dd80467466f110ecc1627e74e70ded320aecbed826f8de49d7c3af9253e712aa3a5ec7eec425ae7f10026698882e2c409486524ce5cbcd74f958accc97e515507f8785481e97150a5cb8e2023d5e1a95f4adf8f45967e01e4b4049303668b0856e3f55307d1c5e742ce33db46b0ed3e5a0d7d13e9e03b33cc199ee9a44ffb8ceb4a99c62899d938287f1c915c1724bfe62a877dec284c0c81d92b30193ce11792b807670ab8c4c0e24bc1e70201c03809f5eb0dd87c1f15b94d65d87fed32009e044ca604295edeb5adca3afabc1deaf0d7292851ea31e08c05619ae0d626ad0d6a20514318d0cffba63b1151d9d64fabe2de6917d591dd6951ac8b201001cf43f33c9d94769a887e3283714a2f62503109ddd9fa1aed5b5832c7977752293153b22f4b7e0b31ab9f68272f2ec3a561bd4ec08060c75aa46b6a0776ec0d8c9ee66c97b35ef429d5aafcfab5b282b3ba304c072abe494985e983e440a142cb4dd3a6150418b4a32852384536a5678836dcbf7d36f0e02243cd4407bf6545b5ece36206b5ae18230439dcac8cb89c89d822e375e256bfbfbe5edefc09e616948c79688ec474776cb49dfa096b19041c5c7162c2c8f32c6d14b453f7265e25dc85b39b98068b6b174c914d4b6fb7671f4d718ee9935823d1e9a22006cd7ebd443bec84ac284bbd5311f49c4995434ab5779f92365941aae6f0043c32234f33cc14922210a3e03bb4b969077f3785549cb9335ad9f895c17e3d23dcde52c1d642c3d9c2c63faa88f836dabe82565a86795d1bd90cd307278ba9b02a051812131a385d17fe48bc510b4de062a9e8aac62cadee1d6bba4c8ce82a556bca0ea617bb119234b35d99cf58159c116b32b18015ebecaf93977396a940949d317a7516822becc93e59894bd81353e3bd80425819cf255886d5125aff6299b4a975fb19e181d09b47f7dbc8006589ed0f2fdfc7bfe3d758e7d46ae2795178a28d1cd1a40c733066b5caaac903bfd2e83f3de73b54268330af81f6b6aee3663026efafb2e3fa881b55022d216bfa68ceb162d4937d2a566402884087b9e4fb2fcc62c23462482f97093102066bc94bc61344350f7bc61a7d3fe91fff417df6ceefef24c7552abd7000ee21f4a023eaee17d90eefc143aaf2eb1829dc79744c3c49633c713376b73c2a4febd7f7875feb4b66e1f852b61b3b71161e5e3e74af9cfdda08ac9560911abaf020e705665cd8dd043e1877ec2b601ebd78872aa04853a8e294eab169ae0beb0192a53248b8cbbc504e1a784f7aad59af20d3f0438d6b5a999dcef6f02bbd0be5d94c309a6f947a6c08bed421dde7c5f641254df9e97e2db062ab159399fc6d00991e1adb89cdd9227459dae932bdada6badd1cc0f3ea97a4839d18478899f64daa19bad8c012bcef7c398b06edfe0dabb1dcefcad954c8a779792ff692e538770fbd4c57def48ae566ee80d3baf2600c5d7f2b102d32ec616a01852f61b283bb54374be2bb423e97463404d6b9a7135901f3de4253e1ab8686531badd8471b26d57cee6e1085d19cadf1e8c318ed957bead2d7fbb3821e8aaabe1ce4d83bdf6141c317977c1ec4732e9565c8cb7b1340c19f1429433b2baeea80dc41aee19fc94660cdf56edaba03690e47cd32baeee2392e5ee272bdd3ce735842d55768e605f03c21d0b62743f56fca6cd51d97775862c166860629a31073b3d0666691355fc5a93aea0b44a0ef408896f2332d83d097325eaf68cb485e490675c7b2711726f292e060a4b17ada0c9d6c3d901f6f08a8998c548d6988b7f96dcb5ba225f5d973b24279a7e884a87f395d074f8ab9a369890ec4fa6c015c997351c13a60cd0ac5512f0e085c70c39cce28186001448a61f31aa222d221de4a3a2e8ce21ea9308a7dfe37110554802a038d6211eadf6bbe8f61d98dece893c1003a185a222ea772569c13b1c6d6438a167427621824ef6083411e565c0de94a83c02348cc59354561c30f075b043a8eabd477349a09b995bfe50a21b83de6849c84ff096cfadaca20b5aeddbe24c5c6d60e6e00d87f04542eb0d16da3f15ca1f53b0dffc887983f7827b35ed33dd138fb9ffbc6754eadd6e059834db42735c9f1e2350e1e2f2685d98b077b252b8678c145f0650c10380ae2d67ddc0f4b18a8f38d97faabf54844d923fbe907c59166cd8f9933681c46fec1ac2be7c598f74384cce6f3bc8b42b174549892d39e85a6746c947ee81777d7d22222f8a000f460a505b0a2665eeea42cdbeab4dfb1ae17d5410c8aefba6b1d7a38c79bd9bccdf959fa10474a61df190ae740de18c25f8251e3f50aba2e8c26ad76b956ae2830451f45d5e9f5c37916ac75fc5094f3541d5f6a89ca5c256b2913b416f0b2e19a8d9a59acce5fc0df36841df5900344ebd87d6f9dec9ed8e5ad921c6930fc38cf73d3cae699e039c0d77bc62cf032272fe207cdf6890319493753a16afe8a822862153d4eed663e851e94d5b85df7c7904401cf24efed005854d4cc0dc55ef39eeecba69d695b0200743cc38ca51004aad315d89b2f61f46809bb5f2a258c2849454723f62a78b7d1e029abb77098a4e97fda870004878d22850023cd53db21d78c2c3c1f05861f0a1ac842d6d4638a0d81ccd2a5d0116ef778307169444d97bb0bd330e33280c93e2d6fe3d0a010822bf75651499b00fdcb6817cfd1acdf756bd2d4131e55d7c4e3ed45ab7f15c771c4fe7d37a5e72e70357c315e98de72734d8e4bec4c98739cafd9175ac52c45331b9e0b0c6b879dbb7f6e986dabd2789715fc1295c9b00b465b4c49a5de30073fc2d5f80b2cfebedf9a54188a1c88fe2b71b3b22b06c2e2485ebafa52b8c5f2b500c4369c71d8e72fd434f3aef7609bee4c3cc900d891eac7ca790a73a9bbfa14ba74fd29b765d85f663f250e3130a66ca6a00e13c863b70a33d0317ebe0d536d5134e532fa6b79169eb249bce96ba7de7edb621f852e23ae02fc10179ee27f51aaa8c22c911b15ce29fce1361ed61f7c22f11f64dd41c569b3d0ac2c6a6119defe789b7c744b5ed7b7ffd99bdba64907c5b0c43d54f61643af4fcca052b54b552bd03f7882066d4f9cc60f7", 0x1000}], 0x1, 0x0, 0x0, 0x4000005}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$tipc(r2, &(0x7f0000000580)={&(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="3de976cf8b2f30", 0x7}, {&(0x7f0000000380)="784e22bdde522c237e646ca14dab18c5248c11e3be562e84d71726f11436bb78d32ab2dd35ac199b6565852f93efab577c6c99c66ed776ad0656c9573a495f4b9988e3fd3c397af9926d1f5520e6367c65ebe6df4acdb7d00319781ac6d388f7bcf6672241060aa0e253397f20ad123381280aa870f622e8bf2e7c81decedd61e30664", 0x83}], 0x2, &(0x7f0000000480)="d263256c07ddb3eeaca4f38d9ba843f463d637f2fc641f689532445ac81a6ecf330c7e1ab810c744b2287a037c441dc8338c8bf638a042de722e1480c4e7e0815775a6508e64d07a9144daf4caa0e0b8b3d8544d3a16051004b3c5e53b28af7f580fc0a1de29f1721050a82d6d1b654a3b4d4ec4a17861b2a00aafd7afe6d7848c274b2a43208c3fe2d360219c1b51392f7a427a562e35d24c9e084ad5ad458ff982688cd243d989ed32b3da7896ae88d1914feb60edbb791cb73d95f5616f8bdb61", 0xc2, 0x10}, 0x4000000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000011c0)) 8.303485814s ago: executing program 3 (id=52): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x240900, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}]}}]}, 0x44}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.159466926s ago: executing program 0 (id=53): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x6000) 7.500584739s ago: executing program 1 (id=54): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$tipc(0x1e, 0x5, 0x1e00, &(0x7f00000001c0)) 7.500455478s ago: executing program 0 (id=55): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) 6.920452022s ago: executing program 0 (id=56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$packet(0x11, 0x2, 0x300) lseek(r1, 0x0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0xfffc, 0x0, @mcast2, 0x4}, 0x1c) 6.895339076s ago: executing program 4 (id=57): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000005e94fa43000000181100009f0305ed4aa37ea753f0bb52e4f66d70ef05d254b010ee88a2e91ff75169c3dc2d201e91e1fc530000f98e0d77"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom(r2, &(0x7f0000000600)=""/219, 0xdb, 0x20, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 'bond_slave_1\x00'}}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="55410895", 0x4}, {&(0x7f00000005c0)="2a62e28901536bf2190c788a1c8fa50b3784f2abf203f81b8c26489f12b66edb12e7e92e0e4e173459df908e2cfa17", 0x2f}], 0x2, 0x0, 0x0, 0x1}, 0x200000c5) 6.579732727s ago: executing program 1 (id=58): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x106, 0xfec1ca40909e4cc1}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x2, 0x4, 0xf000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 5.876129978s ago: executing program 1 (id=59): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'wm\x00'}, 0x9) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x49d, &(0x7f0000000a40)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNBDmjYiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5sdnNos4ds+35Bu5NnvjPzzPPsc9idZwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKQTTx3v7rFm5wIAADTS2QvD3b2M/wAA3FUu8vkfAADgbmJy9L1MA8MFO+P9XZQ8nZu5sjgyMFj9sA7zjmzz4t1/yZ7evgMHDx0+Eryufnyt3aNzFy4ez5ycnZ6bz+bz2fHMyExubHY8Wz38vsqk8uMdrXr8OuzzCiAzffnK+MREPtO7v69s92L6l/YtXen+w13HnCB2ZGBw8EIkJha/7atXWGmGn5CjPTL99tCndlaSo4qyWKMsK63x3qm3Du8m9nk3MTIw6N3IVG50ZsHdORQUhOPfqy8RlFED6mL9qly0U3LzZYnafGaLy9Exmbp+Ltg5SW1BOTzqfTG8wlEmxWpy+dvm5vN5SQ9os9VZa2mXox9lmt6W1JCaXq1osJgcLcr0R3/Bzgc9zj632zz9TObpmYnZSOyQ+S2q1ceHRtrkfVNSjs56PX7BhpudGTScO1l6S6ZdH7/szSvkzUu39R9+4nxfdIaxe43zuLH7/fnjesbkuB87ZENmTu3vCwAAAAAAAIDUbo6+k6nwVSZMTJucyCPjpIoPhjLNySKAejFHb8t0frjgfQ0fXZfSFlnfU9Lqz/7qm/+O5MnZuaX53ORLC1X3p5LHX8wvzI+OVd+tDrefbYumrLWOZYPi5igh03N/fmSl6xb7f38pQJibD58M18wkl1/fe9/8v7ieKXiGdPTS7uh21SzfwvNR95pmjhZkOrFjj79WJaWKMlMx7nOZfn9vrx/nJNzMB6dNF884kZvKdruxX8v0/r9BrLcsSlv82J1hbI8bazK9eaY8dqsf2xnG9rqxgzLdfKF67K4wts+NfV2muV8zQWzKjQ1WqnWFsfvHZqfGqxUlcKvc9v+TTO92ZixoG7GyFV6R9v9KOBZcW36iFdr8Rtt/OpJ2zW/Xl9z2/9cery177d+p3v7fkOmTL/b6ccW2l/D3b/f+D9v/szJNflsem/Jjd4SxPesu2Bbh1v9emU7tulEqG7/+/RoIay1a//cuf3fUqf63R9LS/nXba3PrkJRfunp5dGoqO88GG2z4G0Gvtlny04yNJndMaAh3/P/MnUV9+UNpvuOP//7HlHBm9fer4fjfv/xEdRr/d0TS+v3ZSDwmJRem5+K7pWR+6epjuenRyexkduZA96HugweO9hw9Ek8Ek7twa8NldSdy6/8bmf7Zcr30ebd8/ld9/p9afqI61f/OSFqqbL6y4VuHX//XZbr/5o3S9xKrzf+D738eebD4Wmqfdar/zkha2r/u/2pz6wAAAAAAAAAAAAAAAADQ0uLm6AOZTj0es+C3ZutZ/1fxA7Q6rf/qiqSNN+j3ChsuVABoAY4cvSPTwyrYa27CVulM9BV3tP8CAAD//0OsH78=") 5.83215809s ago: executing program 0 (id=60): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$uac1(0x0, 0xa9, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902ad7cf93c6b1849d714b85c1897000301031008f953e57c0ba1b2ca0904000000010100000a2401d8b3000201020904010000010200000904010101010200000b2402010802ff09d677af072401066101100905010900020201f90725010103b42b090402000001020000090402010101020000072401010705000f2402020600010008f575328af6b8102402010f03058209000000"], &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xfd, 0x9, 0xff}, 0x8, &(0x7f0000000040)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc41}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40f}}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={@private2, @rand_addr=0x64010102, 0x10, 0x14}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000200"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000240012800b000100c6a98f8b71280f6331be576970766c616e000014000280060002000000000006", @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x2000c000) 5.385115024s ago: executing program 2 (id=61): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000d40)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000003080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800013, &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x9, 0x59b5, &(0x7f000000c3c0)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$PPPIOCATTACH(r3, 0x4010bc08, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x20, 0x23, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.384946112s ago: executing program 3 (id=62): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x9, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x1f, 0x0, @void}, 0x10) listen(0xffffffffffffffff, 0xfff) 5.300626814s ago: executing program 4 (id=63): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x112) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) 4.56759028s ago: executing program 3 (id=64): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4810, 0x0, 0x0) 4.440009118s ago: executing program 4 (id=65): setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000080)=0x0) setresuid(0x0, r0, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x8, {0x2, 0x0, 0x0, 0x0, {0xd}, {0x3}, {0x4, 0x6}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x9, 0xc, 0x88, 0x0, 0x0, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x0, 0x4, 0x52b7d503, 0x1, 0x0, 0x10001}}, {0x4}}]}]}, 0x68}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r3, &(0x7f0000001180)=[{&(0x7f0000000040)='5j', 0x2}, {0x0}], 0x2, 0x7, 0x401, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 4.173001901s ago: executing program 1 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3.31581962s ago: executing program 3 (id=67): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x8}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0) 2.844846521s ago: executing program 4 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x4, 0x20000, 0x9, 0x1d, 0x100, &(0x7f00000000c0)="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"}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2c, 0x5, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000001000000080000001800028008000500149ee99a040004000800020000000000180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) 2.704118952s ago: executing program 1 (id=69): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f0, 0x1d8, 0x190, 0x1f0, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'vcan0\x00', '\x00', {0xff}, {}, 0x1, 0x0, 0x18}, 0x0, 0xd8, 0x140, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010", 0x80}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x7fffffff}}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x2, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x48) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x8000, 0x5, 0x1, 0xfffffffffffffffd, 0xffffffff, 0x6}) socket(0x10, 0x6, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000035c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x29}, {0x1, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x2e}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008001) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000100)="0f01cb2ef30f09f30f22e4baf80c66b8048adb8466efbafc0ced66b8000000000f23c00f21f86635000006000f23f8ba4100b000ee7800c05e00600fc7b744000ffd6c00", 0x44}], 0x1, 0x4, &(0x7f0000000180)=[@dstype0={0x6, 0xe}], 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) close(r2) socket$kcm(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r7, &(0x7f0000000200)}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x400000000640, 0x0, 0x0, 0x400000000670, 0x4000000006a0], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 2.156776366s ago: executing program 0 (id=70): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x10c18, &(0x7f0000003080)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x57c, &(0x7f0000000700)="$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") link(0x0, 0x0) 2.020606863s ago: executing program 3 (id=71): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xe0, @loopback}, 0x58) 1.481084013s ago: executing program 1 (id=72): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x88) (async) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast1, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 1.048586246s ago: executing program 4 (id=73): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000005e94fa43000000181100009f0305ed4aa37ea753f0bb52e4f66d70ef05d254b010ee88a2e91ff75169c3dc2d201e91e1fc530000f98e0d77"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom(r2, &(0x7f0000000600)=""/219, 0xdb, 0x20, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 'bond_slave_1\x00'}}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="55410895", 0x4}, {&(0x7f00000005c0)="2a62e28901536bf2190c788a1c8fa50b3784f2abf203f81b8c26489f12b66edb12e7e92e0e4e173459df908e2cfa17", 0x2f}], 0x2, 0x0, 0x0, 0x1}, 0x200000c5) 104.830846ms ago: executing program 0 (id=74): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000040)={0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r3, &(0x7f0000000180)=0x2000022, 0x12) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000003c0), 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0) sendto$inet6(r4, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000580)={0x0, 0x8}, &(0x7f0000000740)=0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x400085c}, 0x801) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_opts(r10, 0x0, 0xd, &(0x7f0000000100)="d9e38ff7d071f28d34dff701b51d28283b5d5f41c68e0b8cb8548eb51ba43338ab16896fe790c5f662ccb5232478535636bca1c875c7fb35e6b7d57a8931315ffbc09f6e431a2766abb063067796f8b7e04862532bfc3abdd0a0ed57e8a535486403af1e16368727f5bee6d86890e0a992c7684494d3ff6d8d2e841c2eda8ab6c2699756a4", 0x85) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x70, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x8b, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8001}]}, 0x70}}, 0x0) 0s ago: executing program 3 (id=75): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x112) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = dup3(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) kernel console output (not intermixed with test programs): forked to background, child pid 5438 [ 128.899214][ T5439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.935361][ T5439] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 131.233409][ T5525] sshd (5525) used greatest stack depth: 5168 bytes left OK syzkaller Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. syzkaller login: [ 172.879134][ T5769] cgroup: Unknown subsys name 'net' [ 173.020050][ T5769] cgroup: Unknown subsys name 'cpuset' [ 173.035473][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 217.547475][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 221.555129][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.563102][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.592898][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.601726][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.609612][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.619595][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.627943][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.640451][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.653760][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.662600][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.685659][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.698285][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.710925][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.724962][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.737044][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.737530][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.749212][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.772875][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.775511][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.790014][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.799508][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.809073][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.823171][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.832402][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.854727][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.873022][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.886339][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.912807][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.948158][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.972689][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.225760][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 223.253817][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 223.619241][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 223.824337][ T5793] Bluetooth: hci0: command tx timeout [ 223.843756][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 223.906556][ T5793] Bluetooth: hci1: command tx timeout [ 223.906682][ T5795] Bluetooth: hci2: command tx timeout [ 223.912190][ T5793] Bluetooth: hci3: command tx timeout [ 224.068991][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 224.157447][ T5795] Bluetooth: hci4: command tx timeout [ 224.320292][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.328803][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.336739][ T5785] bridge_slave_0: entered allmulticast mode [ 224.345766][ T5785] bridge_slave_0: entered promiscuous mode [ 224.403050][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.409707][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.536155][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.543976][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.551826][ T5785] bridge_slave_1: entered allmulticast mode [ 224.560826][ T5785] bridge_slave_1: entered promiscuous mode [ 224.576285][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.584093][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.591958][ T5786] bridge_slave_0: entered allmulticast mode [ 224.600818][ T5786] bridge_slave_0: entered promiscuous mode [ 224.704527][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.712509][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.720209][ T5786] bridge_slave_1: entered allmulticast mode [ 224.729248][ T5786] bridge_slave_1: entered promiscuous mode [ 224.896537][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.905793][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.913645][ T5792] bridge_slave_0: entered allmulticast mode [ 224.921802][ T5792] bridge_slave_0: entered promiscuous mode [ 224.943905][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.013228][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.025013][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.032774][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.040427][ T5792] bridge_slave_1: entered allmulticast mode [ 225.053070][ T5792] bridge_slave_1: entered promiscuous mode [ 225.072671][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.118202][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.215444][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.224133][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.231768][ T5791] bridge_slave_0: entered allmulticast mode [ 225.240397][ T5791] bridge_slave_0: entered promiscuous mode [ 225.374765][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.382511][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.390025][ T5791] bridge_slave_1: entered allmulticast mode [ 225.402585][ T5791] bridge_slave_1: entered promiscuous mode [ 225.497042][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.504862][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.512674][ T5801] bridge_slave_0: entered allmulticast mode [ 225.521685][ T5801] bridge_slave_0: entered promiscuous mode [ 225.555325][ T5786] team0: Port device team_slave_0 added [ 225.570956][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.596328][ T5785] team0: Port device team_slave_0 added [ 225.638184][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.646432][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.654502][ T5801] bridge_slave_1: entered allmulticast mode [ 225.663064][ T5801] bridge_slave_1: entered promiscuous mode [ 225.678172][ T5786] team0: Port device team_slave_1 added [ 225.729652][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.779639][ T5785] team0: Port device team_slave_1 added [ 225.796507][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.901871][ T5795] Bluetooth: hci0: command tx timeout [ 225.908316][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.957192][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.995605][ T5795] Bluetooth: hci3: command tx timeout [ 225.995731][ T5788] Bluetooth: hci2: command tx timeout [ 226.001159][ T5795] Bluetooth: hci1: command tx timeout [ 226.118697][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.130591][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.137887][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.164231][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.196293][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.203817][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.230171][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.232079][ T5795] Bluetooth: hci4: command tx timeout [ 226.246782][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.254259][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.280573][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.299511][ T5792] team0: Port device team_slave_0 added [ 226.362558][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.369693][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.395945][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.443877][ T5792] team0: Port device team_slave_1 added [ 226.499366][ T5801] team0: Port device team_slave_0 added [ 226.634473][ T5801] team0: Port device team_slave_1 added [ 226.647858][ T5791] team0: Port device team_slave_0 added [ 226.692310][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.699442][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.725705][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.749755][ T5785] hsr_slave_0: entered promiscuous mode [ 226.759425][ T5785] hsr_slave_1: entered promiscuous mode [ 226.776609][ T5791] team0: Port device team_slave_1 added [ 226.842221][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.849308][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.877694][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.939187][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.946730][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.973057][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.137424][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.146043][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.172445][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.190106][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.197483][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.223835][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.257094][ T5786] hsr_slave_0: entered promiscuous mode [ 227.266272][ T5786] hsr_slave_1: entered promiscuous mode [ 227.274667][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.282544][ T5786] Cannot create hsr debugfs directory [ 227.354001][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.361185][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.388539][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.466825][ T5792] hsr_slave_0: entered promiscuous mode [ 227.476418][ T5792] hsr_slave_1: entered promiscuous mode [ 227.484834][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.492775][ T5792] Cannot create hsr debugfs directory [ 227.747304][ T5801] hsr_slave_0: entered promiscuous mode [ 227.758354][ T5801] hsr_slave_1: entered promiscuous mode [ 227.766470][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.774327][ T5801] Cannot create hsr debugfs directory [ 227.866513][ T5791] hsr_slave_0: entered promiscuous mode [ 227.876118][ T5791] hsr_slave_1: entered promiscuous mode [ 227.884613][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.892474][ T5791] Cannot create hsr debugfs directory [ 227.988502][ T5795] Bluetooth: hci0: command tx timeout [ 228.068746][ T5795] Bluetooth: hci1: command tx timeout [ 228.074600][ T5793] Bluetooth: hci2: command tx timeout [ 228.074789][ T5788] Bluetooth: hci3: command tx timeout [ 228.315886][ T5788] Bluetooth: hci4: command tx timeout [ 228.653012][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.727439][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.798999][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.879649][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.059475][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.082079][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.159587][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.195824][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.297674][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.358658][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.472853][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.548958][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.577622][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.697785][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.763065][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.803435][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.830011][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.848282][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.903453][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.950070][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.064601][ T5788] Bluetooth: hci0: command tx timeout [ 230.144573][ T5788] Bluetooth: hci3: command tx timeout [ 230.148636][ T5795] Bluetooth: hci1: command tx timeout [ 230.150125][ T5788] Bluetooth: hci2: command tx timeout [ 230.193017][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.382350][ T5788] Bluetooth: hci4: command tx timeout [ 230.383570][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.533140][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.540802][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.640056][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.647832][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.049118][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.141352][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.174979][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.239940][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.338086][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.355725][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.399134][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.446425][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.454241][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.516054][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.523986][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.544945][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.552679][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.634941][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.714943][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.722707][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.742393][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.750011][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.764976][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.772715][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.939393][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.947171][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.105755][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.117688][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.165049][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.172958][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.921110][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.447079][ T5785] veth0_vlan: entered promiscuous mode [ 233.562386][ T5785] veth1_vlan: entered promiscuous mode [ 233.880386][ T5785] veth0_macvtap: entered promiscuous mode [ 233.967337][ T5785] veth1_macvtap: entered promiscuous mode [ 234.134773][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.167389][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.195054][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.259019][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.282516][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.331896][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.340951][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.350242][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.359361][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.426000][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.796297][ T5786] veth0_vlan: entered promiscuous mode [ 234.808730][ T5792] veth0_vlan: entered promiscuous mode [ 234.883474][ T5786] veth1_vlan: entered promiscuous mode [ 234.980577][ T5791] veth0_vlan: entered promiscuous mode [ 235.074741][ T5792] veth1_vlan: entered promiscuous mode [ 235.135134][ T5791] veth1_vlan: entered promiscuous mode [ 235.248096][ T5786] veth0_macvtap: entered promiscuous mode [ 235.315642][ T5786] veth1_macvtap: entered promiscuous mode [ 235.512718][ T5791] veth0_macvtap: entered promiscuous mode [ 235.548624][ T5792] veth0_macvtap: entered promiscuous mode [ 235.561309][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.573985][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.593232][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.650862][ T5791] veth1_macvtap: entered promiscuous mode [ 235.697460][ T5792] veth1_macvtap: entered promiscuous mode [ 235.749263][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.761046][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.775550][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.890007][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.902195][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.914248][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.925004][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.939504][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.971291][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.985515][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.995640][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.006406][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.016653][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.027430][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.042117][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.090872][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.100560][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.109794][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.118947][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.175907][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.187124][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.197466][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.208215][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.223850][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.291066][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.304559][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.317562][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.328429][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.338776][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.349647][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.364220][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.434684][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.443894][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.453095][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.463863][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.521306][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.533440][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.542669][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.551839][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.058898][ T5801] veth0_vlan: entered promiscuous mode [ 237.174401][ T5801] veth1_vlan: entered promiscuous mode [ 237.481347][ T5801] veth0_macvtap: entered promiscuous mode [ 237.566725][ T5801] veth1_macvtap: entered promiscuous mode [ 237.779668][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.792537][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.802840][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.813599][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.825332][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.836656][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.846821][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.857628][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.872106][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.988738][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.999695][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.010076][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.020885][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.031085][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.041910][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.052049][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.064206][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.080713][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.357674][ T5801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.368286][ T5801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.377500][ T5801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.386887][ T5801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.133357][ T4699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.141328][ T4699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.384615][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.392919][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.974591][ T5785] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 242.552047][ T5959] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 242.768219][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.777355][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.056375][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.065042][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.163882][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.172078][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.179990][ T5846] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 243.230561][ T3842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.240255][ T3842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.412229][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 243.482910][ T3842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.491089][ T3842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.513038][ T5846] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 243.523399][ T5846] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 243.533027][ T5846] usb 1-1: Product: syz [ 243.537408][ T5846] usb 1-1: Manufacturer: syz [ 243.542730][ T5846] usb 1-1: SerialNumber: syz [ 243.648274][ T5846] usb 1-1: config 0 descriptor?? [ 243.695529][ T5846] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 243.756868][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.765778][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.083669][ T5846] gspca_zc3xx: reg_r err -71 [ 244.088740][ T5846] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 244.183218][ T5846] usb 1-1: USB disconnect, device number 2 [ 245.208234][ T5978] loop3: detected capacity change from 0 to 32768 [ 245.513115][ T5978] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 245.684308][ T5981] loop2: detected capacity change from 0 to 32768 [ 245.762718][ T5978] XFS (loop3): Ending clean mount [ 245.786947][ T5978] XFS (loop3): Quotacheck needed: Please wait. [ 245.797679][ T5981] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 245.904951][ T5992] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 245.925866][ T5978] XFS (loop3): Quotacheck: Done. [ 246.008534][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.017344][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.038889][ T6001] loop0: detected capacity change from 0 to 8 [ 246.067416][ T5981] XFS (loop2): Ending clean mount [ 246.102886][ T5981] XFS (loop2): Quotacheck needed: Please wait. [ 246.122695][ T6001] squashfs: Unknown parameter '+Y "#?r{tҌemF#3iO Ŏ2Ci"rcq d9)^HLae' [ 246.217633][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.226189][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.267183][ T5981] XFS (loop2): Quotacheck: Done. [ 246.572507][ T5981] XFS (loop2): User initiated shutdown received. [ 246.579193][ T5981] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x1ab/0x210 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 246.595246][ T5981] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 246.776767][ T6009] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 246.973310][ T5792] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 247.368938][ T5978] XFS (loop3): User initiated shutdown received. [ 247.376116][ T5978] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x1ab/0x210 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 247.390554][ T5978] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 247.655863][ T5791] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 247.671100][ T6016] loop1: detected capacity change from 0 to 64 [ 247.913792][ T29] audit: type=1800 audit(1740703385.444:2): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 248.060685][ T6020] bridge_slave_0: left allmulticast mode [ 248.078989][ T6020] bridge_slave_0: left promiscuous mode [ 248.085907][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.474113][ T6022] vlan0: entered promiscuous mode [ 249.166839][ T3354] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 249.374289][ T3354] usb 5-1: Using ep0 maxpacket: 8 [ 249.395524][ T3354] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 249.405780][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 249.409604][ T6032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18'. [ 249.415081][ T3354] usb 5-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.415230][ T3354] usb 5-1: config 2 interface 0 has no altsetting 0 [ 249.482249][ T3354] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 249.491888][ T3354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.500133][ T3354] usb 5-1: Product: syz [ 249.504687][ T3354] usb 5-1: Manufacturer: syz [ 249.509497][ T3354] usb 5-1: SerialNumber: syz [ 249.756107][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.765934][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.952298][ T3354] usb 5-1: USB disconnect, device number 2 [ 249.995250][ T8] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 250.088025][ T6039] capability: warning: `syz.0.20' uses deprecated v2 capabilities in a way that may be insecure [ 250.174056][ T8] usb 4-1: device descriptor read/64, error -71 [ 250.360286][ T6037] loop2: detected capacity change from 0 to 4096 [ 250.372850][ T6037] ntfs3: Unknown parameter '(' [ 250.442531][ T8] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 250.539540][ T5846] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 250.604522][ T8] usb 4-1: device descriptor read/64, error -71 [ 250.723322][ T8] usb usb4-port1: attempt power cycle [ 250.783540][ T5846] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.795485][ T5846] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.808222][ T5846] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.816269][ T5846] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 250.825813][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.193209][ T5846] usb 1-1: config 0 descriptor?? [ 251.233368][ T8] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 251.489538][ T8] usb 4-1: device descriptor read/8, error -71 [ 251.944353][ T8] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 252.097084][ T8] usb 4-1: device descriptor read/8, error -71 [ 252.264204][ T8] usb usb4-port1: unable to enumerate USB device [ 254.852393][ T5846] usbhid 1-1:0.0: can't add hid device: -71 [ 254.859009][ T5846] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 255.032498][ T5846] usb 1-1: USB disconnect, device number 3 [ 255.362977][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 255.981160][ T6162] loop0: detected capacity change from 0 to 4096 [ 256.014889][ T6162] ntfs3: Bad value for 'umask' [ 256.391231][ T6172] loop3: detected capacity change from 0 to 2048 [ 256.473471][ T6172] nilfs2: Unknown parameter 'wlan0' [ 257.180228][ T6174] loop1: detected capacity change from 0 to 40427 [ 257.201145][ T6174] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 257.208662][ T6174] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 257.231298][ T6174] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1fffff [ 257.240528][ T6174] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 257.267889][ T6174] F2FS-fs (loop1): invalid crc value [ 257.330265][ T6174] F2FS-fs (loop1): Found nat_bits in checkpoint [ 257.362968][ T6180] loop4: detected capacity change from 0 to 2048 [ 257.393728][ T6180] ======================================================= [ 257.393728][ T6180] WARNING: The mand mount option has been deprecated and [ 257.393728][ T6180] and is ignored by this kernel. Remove the mand [ 257.393728][ T6180] option from the mount to silence this warning. [ 257.393728][ T6180] ======================================================= [ 257.429876][ T6180] EXT4-fs: inline encryption not supported [ 257.645066][ T6180] EXT4-fs (loop4): stripe (216) is not aligned with cluster size (16), stripe is disabled [ 257.740185][ T6174] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 257.747687][ T6174] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 257.788735][ T6180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.922476][ T5786] syz-executor: attempt to access beyond end of device [ 257.922476][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.937016][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 258.583193][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.124863][ T6198] pimreg: entered allmulticast mode [ 259.602236][ T6206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.460785][ T6218] loop1: detected capacity change from 0 to 8 [ 260.484635][ T6218] squashfs: Unknown parameter '' [ 260.788368][ T6222] loop2: detected capacity change from 0 to 256 [ 260.819568][ T6223] netlink: 244 bytes leftover after parsing attributes in process `syz.0.45'. [ 261.149809][ T6222] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 261.608546][ T6218] loop1: detected capacity change from 0 to 4096 [ 261.649182][ T6218] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 263.015683][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 263.303543][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.315588][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.328519][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 263.342266][ T8] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 263.351680][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.370231][ T8] usb 3-1: config 0 descriptor?? [ 263.798401][ T8] hid (null): nested delimiters [ 263.872672][ T8] hid-led 0003:27B8:01ED.0001: nested delimiters [ 263.879752][ T8] hid-led 0003:27B8:01ED.0001: item 0 1 2 10 parsing failed [ 263.966455][ T8] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -22 [ 264.144712][ T5846] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 264.235551][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 264.432608][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 264.532483][ T5846] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 264.542119][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.550349][ T5846] usb 4-1: Product: syz [ 264.554959][ T5846] usb 4-1: Manufacturer: syz [ 264.559771][ T5846] usb 4-1: SerialNumber: syz [ 264.585641][ T5846] usb 4-1: config 0 descriptor?? [ 264.633084][ T5846] gspca_main: se401-2.14.0 probing 047d:5003 [ 264.686941][ T8] usb 3-1: USB disconnect, device number 2 [ 265.435650][ T6270] loop1: detected capacity change from 0 to 128 [ 265.531940][ T6270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 265.629062][ T5846] gspca_se401: read req failed req 0x06 error -19 [ 265.631026][ T6270] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 265.656596][ T6270] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 265.671156][ T6270] UDF-fs: Scanning with blocksize 512 failed [ 265.706837][ T5846] usb 4-1: USB disconnect, device number 6 [ 265.753827][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 265.755188][ T6270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 265.846849][ T6270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 265.859635][ T6270] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 265.868566][ T6270] UDF-fs: Scanning with blocksize 1024 failed [ 265.910569][ T6270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 265.969662][ T6270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 265.980062][ T6270] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 265.996507][ T6270] UDF-fs: Scanning with blocksize 2048 failed [ 266.016369][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 266.077428][ T25] usb 1-1: config index 0 descriptor too short (expected 31917, got 151) [ 266.086291][ T25] usb 1-1: config 60 has too many interfaces: 249, using maximum allowed: 32 [ 266.095450][ T25] usb 1-1: config 60 has an invalid descriptor of length 215, skipping remainder of the config [ 266.106116][ T25] usb 1-1: config 60 has 0 interfaces, different from the descriptor's value: 249 [ 266.159447][ T6270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 266.203401][ T6270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 266.213647][ T6270] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 266.222317][ T6270] UDF-fs: Scanning with blocksize 4096 failed [ 266.228583][ T6270] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 266.271187][ T8] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 266.298141][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.308501][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.316882][ T25] usb 1-1: Product: Џ [ 266.321171][ T25] usb 1-1: Manufacturer: ు [ 266.326169][ T25] usb 1-1: SerialNumber: syz [ 266.484937][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 266.494836][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.574409][ T8] usb 3-1: config 0 descriptor?? [ 266.673757][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 266.682975][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.60'. [ 267.866818][ T25] usb 1-1: USB disconnect, device number 4 [ 268.061823][ T6276] loop2: detected capacity change from 0 to 32768 [ 268.406552][ T6276] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 1791,nojournal_transaction_names,read_only [ 268.433506][ T6276] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 268.445828][ T6276] bcachefs (loop2): Version upgrade required: [ 268.445828][ T6276] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 268.445828][ T6276] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 268.445828][ T6276] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 268.876711][ T6276] bcachefs (loop2): error validating btree node at btree inodes level 0/0 [ 268.876858][ T6276] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 268.876963][ T6276] node offset 16/24 bset u64s 110 bset byte offset 280: keys out of order: u64s 18 type inode_v3 670014898176:4098:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0, fixing [ 268.930483][ T6276] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 670014898176:4098:U32_MAX len 0 ver 0: (unpack error) [ 268.930584][ T6276] nonzero k.p.inode: delete?, fixing [ 268.954962][ T6276] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 268.954962][ T6276] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 269.068842][ T6276] bcachefs (loop2): error validating btree node at btree alloc level 0/0 [ 269.068991][ T6276] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 269.069150][ T6276] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 269.112983][ T6276] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 269.112983][ T6276] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 269.195780][ T6276] bcachefs (loop2): error validating btree node on loop2 at btree freespace level 0/0 [ 269.195937][ T6276] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 269.196093][ T6276] node offset 0/32: incorrect min_key: got POS_MIN should be 0:3703155162349568:0 [ 269.239743][ T6276] bcachefs (loop2): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 269.252155][ T6276] bcachefs (loop2): flagging btree freespace lost data [ 269.265755][ T6276] error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 269.288249][ T6276] bcachefs (loop2): error validating btree node on loop2 at btree backpointers level 0/0 [ 269.288410][ T6276] u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4294967168 len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 269.288566][ T6276] node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX [ 269.322680][ T6276] bcachefs (loop2): flagging btree backpointers lost data [ 269.344388][ T6276] error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 269.368682][ T6276] bcachefs (loop2): check_topology... done [ 269.382380][ T6276] bcachefs (loop2): accounting_read... done [ 269.399402][ T6276] bcachefs (loop2): alloc_read... done [ 269.407011][ T6276] bcachefs (loop2): stripes_read... done [ 269.413448][ T6276] bcachefs (loop2): snapshots_read... done [ 269.420291][ T6276] bcachefs (loop2): check_allocations... [ 269.485838][ T6276] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 269.486001][ T6276] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 269.614586][ T6276] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 269.614730][ T6276] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 269.672810][ T6276] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 269.672959][ T6276] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 281474976710656: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 269.734878][ T6276] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 269.735036][ T6276] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 269.854542][ T6309] loop0: detected capacity change from 0 to 1024 [ 269.862019][ T6276] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 269.870989][ T6276] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 269.884549][ T6276] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 269.893595][ T6276] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 269.902544][ T6309] EXT4-fs: Ignoring removed orlov option [ 269.909457][ T6309] EXT4-fs: Ignoring removed orlov option [ 269.911180][ T6276] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 269.926231][ T6276] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 269.937791][ T6276] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 269.952603][ T6276] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 269.955666][ T6309] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 269.969843][ T6276] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 269.978924][ T6276] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 269.990534][ T6276] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 269.999527][ T6276] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.011059][ T6276] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.020165][ T6276] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.031999][ T6276] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.040895][ T6276] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 270.057122][ T6276] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 270.068844][ T6276] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 270.080604][ T6276] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 270.090349][ T6276] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 270.102222][ T6276] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 270.111825][ T6276] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 270.123711][ T6276] bucket 0:12 gen 0 has wrong data_type: got free, should be journal, fixing [ 270.133258][ T6276] bucket 0:12 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 270.145218][ T6276] bucket 0:13 gen 0 has wrong data_type: got free, should be journal, fixing [ 270.162046][ T6276] bucket 0:13 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 270.173884][ T6276] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 270.183487][ T6276] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 270.195274][ T6276] bucket 0:15 gen 0 has wrong data_type: got free, should be journal, fixing [ 270.204928][ T6276] bucket 0:15 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 270.217015][ T6276] bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.226371][ T6276] bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.238030][ T6276] bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.247267][ T6276] bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.259776][ T6313] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 270.278537][ T6276] bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.287718][ T6276] bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.299427][ T6276] bucket 0:19 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.305957][ T6313] netlink: 9 bytes leftover after parsing attributes in process `syz.1.72'. [ 270.317507][ T6313] net veth1_virt_wifi 70: renamed from virt_wifi0 [ 270.318302][ T6276] bucket 0:19 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.337089][ T6276] bucket 0:20 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.346211][ T6276] bucket 0:20 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.362988][ T6276] bucket 0:21 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.374014][ T6276] bucket 0:21 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.385753][ T6276] bucket 0:22 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.395046][ T6276] bucket 0:22 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.406733][ T6276] bucket 0:23 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.415928][ T6276] bucket 0:23 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.427386][ T6276] bucket 0:24 gen 0 has wrong data_type: got free, should be journal, fixing [ 270.437030][ T6276] bucket 0:24 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 270.449173][ T6276] bucket 0:26 gen 0 has wrong data_type: got free, should be btree, fixing [ 270.457093][ T6313] net veth1_virt_wifi 70: entered allmulticast mode [ 270.471330][ T6276] bucket 0:26 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 270.477235][ T6313] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 270.497707][ T6276] bucket 0:31 gen 0 data type btree has wrong dirty_sectors: got 14848, should be 256, fixing [ 270.509707][ T6276] bucket 0:32 gen 0 has wrong data_type: got sb, should be btree, fixing [ 270.520006][ T6276] bucket 0:35 gen 0 has wrong data_type: got free, should be btree, fixing [ 270.529689][ T6276] bucket 0:35 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 270.556713][ T6276] bucket 0:37 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 270.572294][ T6276] bucket 0:37 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 270.586071][ T6276] bucket 0:38 gen 0 has wrong data_type: got free, should be btree, fixing [ 270.595595][ T6276] bucket 0:38 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 270.607733][ T6276] bucket 0:41 gen 0 has wrong data_type: got free, should be btree, fixing [ 270.617250][ T6276] bucket 0:41 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 270.638639][ T6276] bucket 0:120 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.647918][ T6276] bucket 0:120 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.659631][ T6276] bucket 0:121 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.674279][ T6276] bucket 0:121 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.688050][ T6276] bucket 0:122 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.697352][ T6276] bucket 0:122 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.709126][ T6276] bucket 0:123 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.718358][ T6276] bucket 0:123 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.730002][ T6276] bucket 0:124 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.739229][ T6276] bucket 0:124 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.751286][ T6276] bucket 0:125 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.760421][ T6276] bucket 0:125 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.777073][ T6276] bucket 0:126 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.788106][ T6276] bucket 0:126 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.799845][ T6276] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing [ 270.809283][ T6276] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 270.831774][ T6276] done [ 270.856820][ T6276] bcachefs (loop2): going read-write [ 270.879929][ T6276] bcachefs (loop2): journal_replay... [ 270.994675][ T4075] ===================================================== [ 271.011674][ T4075] BUG: KMSAN: uninit-value in bch2_bucket_alloc_early+0xe70/0x2950 [ 271.019795][ T4075] bch2_bucket_alloc_early+0xe70/0x2950 [ 271.039919][ T4075] bch2_bucket_alloc_trans+0x9c5/0x3290 [ 271.046180][ T4075] bch2_bucket_alloc_set_trans+0x92c/0x1620 [ 271.052874][ T4075] __open_bucket_add_buckets+0x1e6e/0x30f0 [ 271.059045][ T4075] open_bucket_add_buckets+0x328/0x530 [ 271.065010][ T4075] bch2_alloc_sectors_start_trans+0x1730/0x32b0 [ 271.071683][ T4075] bch2_btree_reserve_get+0x9d6/0x2290 [ 271.085992][ T4075] bch2_btree_update_start+0x1af9/0x2d60 [ 271.092472][ T4075] bch2_btree_node_rewrite+0x1d7/0x1ae0 [ 271.098330][ T4075] async_btree_node_rewrite_work+0x74c/0x1aa0 [ 271.108731][ T4075] process_scheduled_works+0xc1a/0x1e80 [ 271.117708][ T4075] worker_thread+0xea7/0x14f0 [ 271.123035][ T4075] kthread+0x6b9/0xef0 [ 271.127416][ T4075] ret_from_fork+0x6d/0x90 [ 271.127584][ T4075] ret_from_fork_asm+0x1a/0x30 [ 271.127743][ T4075] [ 271.127766][ T4075] Uninit was created at: [ 271.127977][ T4075] ___kmalloc_large_node+0x22c/0x370 [ 271.128137][ T4075] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 271.128303][ T4075] __kmalloc_node_noprof+0xc96/0x1250 [ 271.128462][ T4075] __kvmalloc_node_noprof+0xc0/0x2d0 [ 271.128641][ T4075] __bch2_btree_node_mem_alloc+0x2be/0xa80 [ 271.128831][ T4075] bch2_fs_btree_cache_init+0x4f0/0xb60 [ 271.129146][ T4075] bch2_fs_open+0x4d84/0x5ba0 [ 271.129338][ T4075] bch2_fs_get_tree+0x98a/0x24e0 [ 271.129523][ T4075] vfs_get_tree+0xb1/0x5a0 [ 271.129688][ T4075] do_new_mount+0x71f/0x15e0 [ 271.129859][ T4075] path_mount+0x742/0x1f10 [ 271.130026][ T4075] __se_sys_mount+0x71f/0x800 [ 271.130206][ T4075] __x64_sys_mount+0xe4/0x150 [ 271.130383][ T4075] x64_sys_call+0x39bf/0x3c30 [ 271.130544][ T4075] do_syscall_64+0xcd/0x1e0 [ 271.130708][ T4075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.130896][ T4075] [ 271.130946][ T4075] CPU: 0 UID: 0 PID: 4075 Comm: kworker/u8:21 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 271.131115][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.131187][ T4075] Workqueue: btree_node_rewrite async_btree_node_rewrite_work [ 271.131531][ T4075] ===================================================== [ 271.131563][ T4075] Disabling lock debugging due to kernel taint [ 271.131601][ T4075] Kernel panic - not syncing: kmsan.panic set ... [ 271.131667][ T4075] CPU: 0 UID: 0 PID: 4075 Comm: kworker/u8:21 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 271.131789][ T4075] Tainted: [B]=BAD_PAGE [ 271.131825][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.131895][ T4075] Workqueue: btree_node_rewrite async_btree_node_rewrite_work [ 271.132033][ T4075] Call Trace: [ 271.132071][ T4075] [ 271.132114][ T4075] dump_stack_lvl+0x216/0x2d0 [ 271.132210][ T4075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 271.132356][ T4075] dump_stack+0x1e/0x24 [ 271.132439][ T4075] panic+0x4e2/0xcf0 [ 271.132582][ T4075] ? kmsan_get_metadata+0x71/0x1c0 [ 271.132730][ T4075] kmsan_report+0x2c7/0x2d0 [ 271.132864][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.132994][ T4075] ? __msan_warning+0x95/0x120 [ 271.133113][ T4075] ? bch2_bucket_alloc_early+0xe70/0x2950 [ 271.133257][ T4075] ? bch2_bucket_alloc_trans+0x9c5/0x3290 [ 271.133387][ T4075] ? bch2_bucket_alloc_set_trans+0x92c/0x1620 [ 271.133521][ T4075] ? __open_bucket_add_buckets+0x1e6e/0x30f0 [ 271.133667][ T4075] ? open_bucket_add_buckets+0x328/0x530 [ 271.133800][ T4075] ? bch2_alloc_sectors_start_trans+0x1730/0x32b0 [ 271.133943][ T4075] ? bch2_btree_reserve_get+0x9d6/0x2290 [ 271.134075][ T4075] ? bch2_btree_update_start+0x1af9/0x2d60 [ 271.134198][ T4075] ? bch2_btree_node_rewrite+0x1d7/0x1ae0 [ 271.134319][ T4075] ? async_btree_node_rewrite_work+0x74c/0x1aa0 [ 271.134451][ T4075] ? process_scheduled_works+0xc1a/0x1e80 [ 271.134598][ T4075] ? worker_thread+0xea7/0x14f0 [ 271.134688][ T4075] ? kthread+0x6b9/0xef0 [ 271.134789][ T4075] ? ret_from_fork+0x6d/0x90 [ 271.134899][ T4075] ? ret_from_fork_asm+0x1a/0x30 [ 271.135007][ T4075] ? bch2_bucket_alloc_early+0x192/0x2950 [ 271.135157][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.135290][ T4075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 271.135437][ T4075] ? filter_irq_stacks+0x164/0x1a0 [ 271.135572][ T4075] ? stack_depot_save_flags+0x2c/0x750 [ 271.135706][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.135838][ T4075] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 271.135968][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.136105][ T4075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 271.136248][ T4075] __msan_warning+0x95/0x120 [ 271.136363][ T4075] bch2_bucket_alloc_early+0xe70/0x2950 [ 271.136517][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.136676][ T4075] ? bch2_bucket_alloc_early+0x192/0x2950 [ 271.136821][ T4075] ? bch2_bucket_alloc_early+0x192/0x2950 [ 271.136977][ T4075] ? bch2_bucket_alloc_early+0x192/0x2950 [ 271.526304][ T4075] bch2_bucket_alloc_trans+0x9c5/0x3290 [ 271.532084][ T4075] ? bch2_bucket_alloc_trans+0xbb8/0x3290 [ 271.538032][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.543511][ T4075] ? bch2_bucket_alloc_trans+0xbb8/0x3290 [ 271.549469][ T4075] bch2_bucket_alloc_set_trans+0x92c/0x1620 [ 271.555590][ T4075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 271.561595][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.566982][ T4075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 271.572995][ T4075] ? min_vruntime_cb_rotate+0x20a/0x4f0 [ 271.578736][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.584133][ T4075] ? filter_irq_stacks+0x60/0x1a0 [ 271.589372][ T4075] __open_bucket_add_buckets+0x1e6e/0x30f0 [ 271.595398][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.600876][ T4075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 271.606888][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.612975][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.618388][ T4075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 271.624396][ T4075] ? bch2_btree_path_verify_locks+0x1859/0x1980 [ 271.630868][ T4075] ? bch2_trans_verify_locks+0x5bc/0x630 [ 271.636741][ T4075] open_bucket_add_buckets+0x328/0x530 [ 271.642425][ T4075] ? __bch2_trans_relock+0x6bb/0x730 [ 271.647917][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.653315][ T4075] bch2_alloc_sectors_start_trans+0x1730/0x32b0 [ 271.659778][ T4075] ? __bch2_trans_relock+0x6bb/0x730 [ 271.665255][ T4075] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 271.671296][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.676687][ T4075] bch2_btree_reserve_get+0x9d6/0x2290 [ 271.682347][ T4075] ? __bch2_fs_usage_read_short+0xad6/0xc10 [ 271.688473][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.693881][ T4075] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 271.700469][ T4075] bch2_btree_update_start+0x1af9/0x2d60 [ 271.706310][ T4075] ? bch2_btree_node_rewrite+0x1d7/0x1ae0 [ 271.712232][ T4075] bch2_btree_node_rewrite+0x1d7/0x1ae0 [ 271.717962][ T4075] ? bch2_btree_iter_peek_node+0xf2b/0x10f0 [ 271.724086][ T4075] ? kmsan_get_metadata+0x13e/0x1c0 [ 271.729485][ T4075] async_btree_node_rewrite_work+0x74c/0x1aa0 [ 271.735750][ T4075] ? async_btree_node_rewrite_work+0x280/0x1aa0 [ 271.742198][ T4075] ? __pfx_async_btree_node_rewrite_work+0x10/0x10 [ 271.748890][ T4075] process_scheduled_works+0xc1a/0x1e80 [ 271.754680][ T4075] worker_thread+0xea7/0x14f0 [ 271.759527][ T4075] kthread+0x6b9/0xef0 [ 271.763752][ T4075] ? __pfx_worker_thread+0x10/0x10 [ 271.769034][ T4075] ? __pfx_kthread+0x10/0x10 [ 271.773783][ T4075] ret_from_fork+0x6d/0x90 [ 271.778362][ T4075] ? __pfx_kthread+0x10/0x10 [ 271.783112][ T4075] ret_from_fork_asm+0x1a/0x30 [ 271.788056][ T4075] [ 271.791442][ T4075] Kernel Offset: disabled [ 271.795829][ T4075] Rebooting in 86400 seconds..