last executing test programs: 10m52.148218434s ago: executing program 32 (id=44): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 10m8.016310776s ago: executing program 33 (id=172): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 9m38.298400624s ago: executing program 34 (id=277): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000380)="5f0e", 0x2, 0x54002, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) unshare(0x2040400) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001800)=[{0x0}, {&(0x7f0000000300)=""/90, 0x5a}], 0x2}, 0x10000) 9m26.390050708s ago: executing program 35 (id=318): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffff}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 8m3.279568177s ago: executing program 0 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 8m1.122580561s ago: executing program 0 (id=562): r0 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 8m0.769482776s ago: executing program 8 (id=565): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 8m0.51289429s ago: executing program 8 (id=566): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES16=r2], 0x21c}}, 0x0) 8m0.161321925s ago: executing program 8 (id=567): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x400c084) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}}, 0x24}}, 0x400c084) 8m0.068285157s ago: executing program 0 (id=570): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 8m0.006615788s ago: executing program 8 (id=571): r0 = gettid() timer_create(0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 7m59.925489099s ago: executing program 8 (id=572): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x158) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="1200000007"], 0x10) 7m59.584785554s ago: executing program 8 (id=575): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 7m59.518815025s ago: executing program 36 (id=575): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 7m58.789351127s ago: executing program 0 (id=577): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="769363e4128b", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) r3 = dup2(r1, r0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) mount$9p_virtio(0x0, 0x0, 0x0, 0xa99001, 0x0) 7m56.055819949s ago: executing program 0 (id=596): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 7m53.780417754s ago: executing program 0 (id=598): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2c000, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) fsopen(&(0x7f0000000480)='hfs\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@ipv4_getroute={0x1c, 0x1a, 0x20, 0x70bd28, 0x25dfdbfe, {0x2, 0x10, 0x14, 0xc, 0xfd, 0x2, 0xff, 0x9, 0x300}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 7m38.159243947s ago: executing program 37 (id=598): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2c000, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) fsopen(&(0x7f0000000480)='hfs\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@ipv4_getroute={0x1c, 0x1a, 0x20, 0x70bd28, 0x25dfdbfe, {0x2, 0x10, 0x14, 0xc, 0xfd, 0x2, 0xff, 0x9, 0x300}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 7m38.117538217s ago: executing program 9 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) 7m37.124758723s ago: executing program 9 (id=648): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') read$FUSE(r0, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$eJzs3U1vW1kZAODXzpeTyUwywywAIaYMAwVVdRJ3JhrNAoYVQqgSokuQ2pC4URQ7jmKnNKGL9j8gUYkVLPkBrLviJyDYsYEFEh8RqKnE4qJ7bbduajduk9hp/DzS1b3nnmu/5yS559hvEp8ARtaliLgfEZMRcSsi5lrnc60tPm9u6XWPD+6tHh7cW81Fktz4Vy6rT89Fx2NSb7WesxARP/5+xM9yL8at7+1vrlQq5Z1mcXqhUd1eqO/tX92orqyX18tbpdLy0vLip9c+KZ1aXz+oTjYPxtIGfvsXabNmW3Wd/ThNza5PPI2TGo+IH55FsCEYa/VnctgN4bXkI+K9iPgwu//nYiz7bgIAF1mSzEUy11kGAC66fJYDy+WLrVzAbOTzxWIzh/d+zOQrtXrjyu3a7tZaM1c2HxP52xuV8mIrVzgfE7m0vJQdPyuXjpSvRcS7EfHLqemsXFytVdaG+cIHAEbYW0fm//9ONed/AOCCKwy7AQDAwJn/AWD0mP8BYPSY/wFg9Jj/AWD0mP8BYPSY/wFgpPzo+vV0Sw5bn3+9dmdvd7N25+paub5ZrO6uFldrO9vF9VptPfvMnupxz1ep1baXPo7du/Pf2a43Fup7+zertd2txs3sc71vlicG0isA4GXe/eDRn3MRcf+z6WyLjrUczNVwseWH3QBgaMaG3QBgaKz2BaPrBO/xpQfgguiyRO9zChExffTqJEmSs20WcIYuf0n+H0ZVR/7fXwHDiJH/h9HVb/7/uPwA8OZJkly/a/5HvxcCAOebHD/Q4/39e63971q/HPjp2tErHp5lqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8a6//W2ytBT4b+XyxGPF2RMzHRO72RqW8GBHvRMSfpiam0vLSkNsMAJxU/u+51vpfl+c+mj1aO5l7MpXtI+Lnv77xq7srjcbOH9Pz/356vvGwdb40jPYDAMdpz9PZvuON/OODe6vtbZDt+cf3IqLQjH94MBmHT+OPx3i2L8RERMz8J9cqN+U6chcncf9BRHyxW/9zMZvlQJornx6Nn8Z+e6Dx88/Fz2d1zX36tfjCK0dO5k6h+fBGe5SOP593u//ycSnbd7//C9kIdXKt8S99qtXDbAx8Fr89/o31GP8u9Rvj4z/8oHk0/WLdg4gvj0e0Yx92jD/t+Lke8T/qM/5fvvLVD3vVJb+JuBzd43fGWmhUtxfqe/tXN6or6+X18laptLy0vPjptU9KC1mOeqH3bPDPz66806su7f9Mj/iFY/r/jT77/9v/3frJ114S/1tf7xY/H++/JH46J36zz/grM78v9KpL46917X9b7/5f6TP+X/+2/8Ky4QDA8NT39jdXKpXyziAP2i8kBhrUwQU4SH9qzkEzuh58d1CxJuOVHpUkrxWr14hxGlk34Dxo3utJeScingy7MQAAAAAAAAAAAAAAQFeD+I+lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+v/AQAA//+XC86k") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@grpid}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x22) 7m36.62595813s ago: executing program 9 (id=649): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) 7m34.961443627s ago: executing program 9 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) inotify_init() lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x4, 0x1) 7m34.768447579s ago: executing program 38 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) inotify_init() lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x4, 0x1) 6m58.413897113s ago: executing program 4 (id=777): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x0, r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 6m57.488834597s ago: executing program 4 (id=780): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c000000140000", @ANYRES32=r1, @ANYBLOB="800202000a"], 0x48}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m56.091986389s ago: executing program 4 (id=787): r0 = socket$kcm(0x10, 0xce1068b99cd46df3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x24004800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x154, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0xffe0, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x11c, 0x2, [@TCA_FLOWER_ACT={0x118, 0x3, [@m_connmark={0x114, 0x1, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffc7, 0x0, 0x2, 0x3, 0x951}, 0xd495}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x3, 0x5, 0x1}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x0, 0x1, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0xb8, 0x4}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0xdcbb9f89ddd87698, 0xc, 0xffffffff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xffffff7f, 0xffffffffffffffff, 0xa, 0x766}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0xe, 0x8, 0x200, 0x2}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x3a4, 0x4, 0x4, 0x3}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x7}}]}, 0x154}}, 0x200080c4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m54.929505487s ago: executing program 4 (id=792): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 6m53.581895228s ago: executing program 4 (id=797): r0 = socket$rds(0x15, 0x5, 0x0) r1 = epoll_create1(0x0) unshare(0x20000400) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 6m52.417498616s ago: executing program 4 (id=801): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 6m52.216364219s ago: executing program 39 (id=801): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 5m15.620739217s ago: executing program 7 (id=1160): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) syz_emit_ethernet(0x3a, &(0x7f0000002040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x8}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@getlink={0x34, 0x12, 0x2fa9ccd93d5c0297, 0x0, 0x0, {0x7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_hsr\x00'}]}, 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x6e}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) 5m14.581413443s ago: executing program 7 (id=1165): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) 5m14.11139239s ago: executing program 7 (id=1166): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x450800}}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="d77c96c105134694", 0x8, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10) 5m11.569439477s ago: executing program 7 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r3}, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r3, 0x0) 5m10.101212139s ago: executing program 7 (id=1177): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 5m8.600158562s ago: executing program 7 (id=1183): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4m53.142613492s ago: executing program 40 (id=1183): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 14.83937005s ago: executing program 3 (id=2181): r0 = socket(0x10, 0x80002, 0x4) syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="b11bb95a0669a44491720e1677bac40408787a49d6b30c35b8682084574ab32b785fca5f5a50ee19eb69ffd4a9382bd9de4a7da09c764f615daf9c2bb6a49f7828e1147cd1003c097b9d2e8f257d6c85a58e4914f997f8ac898c0ca3bd208adc70da3582ca70bfd570c03c4f2e9f630b098a8a2c27c96a2e83c2c237e2d312f5253068fd16f8c5e35facef79ba0dad728e45c330ed712f751a27a456181d9c08ef5c65785f2d014f084535b0f046a5b4d6d6812fa928fb"], 0x1, 0x201, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) getdents(r2, 0x0, 0x58) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, 0x0) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x3ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x18, 0x13, 0x100, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 13.521439529s ago: executing program 1 (id=2182): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) 10.989507246s ago: executing program 3 (id=2186): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x7ff, 0xfffffc01}) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x9, 0x0, 0x2, 0x0, 0x100000, 0xfffffffe, 0x4000000, 0x0, 0x200, 0x0, 0x7fff, 0x4, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x400000, 0x353, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffffffb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x211d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x3]}) 10.76775698s ago: executing program 6 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x10000, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffff", 0x46}], 0x1) 8.889792268s ago: executing program 5 (id=2189): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 8.75096671s ago: executing program 2 (id=2190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.690021541s ago: executing program 1 (id=2191): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) r1 = eventfd2(0x400017f, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/189, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096, 0x1000}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7.706088185s ago: executing program 2 (id=2192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 7.705593775s ago: executing program 6 (id=2193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 7.649587566s ago: executing program 3 (id=2194): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 7.471217369s ago: executing program 5 (id=2195): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='rcu_utilization\x00', r1}, 0x18) syz_mount_image$exfat(&(0x7f0000000540), &(0x7f00000006c0)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x1532, &(0x7f0000004900)="$eJzs3Au4TWW3OPAx3vedbJe0klw2c7xjstLGS5LkkpBLkiRJkltCkiRJSG65JSEJuSe5J+3cYqftfr9fk3aOJElCQpL3/+zK53T6d3znfN95nO/s8Xueab3DXGOsd66x55qXZ+/1bedh1RvWqFKfmeEfoX5/7AUACQAwEACuBYAAAErnLJ0TECCLxl7/0IuIf7KHZl7tGYirSfqfsUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zSfyEysq2z8l0nS8Zdvu08rPqyv+v+v/3PV+NvD3L//3+TLFdYL8f//7P+rj1N+p+xSf8zNul/xib9z9ik/xmb9D9jk/5nbNJ/ITKyq33/+V9gufRWXe15XGEJ/lt5V/enTwghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFERnHOX2YA4NL4as9LCCGEEEIIIYQQ/zw+89WegRBCCCGEEEIIIf7nIYDRYCCATJAZEiALZIVskB2ugRxwLcTgOsgJ10MuuAFyQx7IC/kgEfJDAQiBwAJDBAWhEMTBe4CbIAmKQFEoBg6KQwm4GUrCLVAKboXSkLwY4HYoC+WgPFSAO6Ai3AmVoDJUgbugKlSD6lAD7oaacA/UgnuhNtwHdeB+qAsPQD14EOrDQ9AAHoaG8Ag0gkehMTSBptAMmv+38l+E7vAS9ICe0At6Qx94GfpCP+gPA2AgvAKD4FUYDK/BEBgKw+B1GA5vwAh4E0bCKBgNb8EYGAvjYDxMgIkwCd6GyfAOTIF3YSpMg+kwA2bCLJgN78EceB/mwgeQjADzYD4sgIWwCD6CxbAEUuBjWAqfQCosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu2A17Ku+FT2EffAb74XNIgy/+i/ln4Y/5XRAQUKFCgwYzYSZMwATMilkxO2bHHJgDYxjDnJgTc2EuzI25MS/mxURMxAJYAAkJGRkLYkGMYxwLY2FMwiQsikXRocMSWAJL4i1YCkthaSyNZbAMlsVyWA4rYAWsiBWxElbCKrfPB8CqWB2r4914N96DtbAW1sbaWAfrYF2si/WwHtbH+tgAG2BDbIiNsBE2xsbYFJtic2yOLbAFtsSW2BpbYxtsg22xLbbDdtge22MH7IAdsSN2wk7YGTtjF+yKXfFFfBFfwpewJ1ZVvbEP9sG+2Bf74wAcgK/gIHwVX8XXcAgOxWH4Or6Ob+AIPIMjcRSOxtFYUY3FcTgeWU3ESTgJJ+NknIJTcCpOw2k4A2fiLJyNs3EOvo/pe1gyfogf4nycjwtxES7CxbgEUzAFl+JZTMVluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwW24DXfgDtyFu3AP7sFP8VP8DD/DIZiGaXgAD+BBPIiH8BAexsN4BI9sywaAx/AYHsfjeAJP4ik8iafxNJ7Bs3gOz+F5PI8X8PnErxvsKbJuCKh0RhmVSWVSCSpBZVVZVXaVXeVQOVRMxVROlVPlUrlUbpVb5VV5VaJKVAVUAUWKFKtIFVQFVVzFVWFVWCWpJFVUFVVOOVVClVAlVUlVSpVSpdVtqoy6XZVV5VQrV0FVUBVVa1dJVVZVVBVVVVVT1VUNVUPVVDVVLVVL1Va1VR1VR9VVD6h6qjf2x4dUemcaqqHYSA3DxqqJaqqaqTfwMdVCjcCWqpVqrZ5Qo3AktlUtXDv1tGqvxmEH9WzCpQ+6zuoF1UV1Vd3Ui6q7aul6qJ5qKvZWfdQM7Kv6qf5qgJqD1dQHmIzV1WtqiBqqhqnX1UJ8Q41Qb6qRapQard5SY9RYNU6NVxPURDVJva0mq3fUFPWumqqmqelqhpqpZqnZ6j01R72v5qoPVLL6UM1T89UCtVAtUh+pxWqJSlEfq6XqE5WqlqnlaoVaqVap1WqNWqvWqfVqg9qoNqnNaovaqrap7WqH2ql2qd1qj9qrPlX71Gdqv/pcpakvVPrn90H1pTqkvlKH1dfqiPpGHVXfqmPqO3Vc9VQn1El1Sv2gTqsf1Rl1tvc59ZM6r35WF9Qv6qLyCjRqpbU2OtCZdGadoLPorDqbzq6v0Tn0tTqmr9M59fU6l75B59Z5dF6dTyfq/LqADjVpq1lHuqAupOP6Rl1Y36STdBFdVBfTThfXJfTNuqS+RZfSt+rS+jZdRt+uy+pyuryuoO/QFfWdupKurKvou3RVXU1X1zX03bqmvkfX0vfq2vo+XUffr+vqB3Q9/aCurx/SDfTDuqF+RDfSj+rGuoluqpvp5vox3UI/rlvqVrq1fkK30U/qtvop3U4/rdvrZ3QH/azuqJ/TnfTzurN+QXfRXXU3/Yu+qL3uoXvqXrq37qNf1n11P91fD9AD9St6kH5VD9av6SF6qB6mX9fD9Rt6hH5Tj9Sj9Gj9lh6jx+pxeryeoCfqSfptPVm/o6fod/VUPU1P15lhpp6l+/9eae7fkf/OH/Jn6PT8wb+++ha9VW/T2/UOvVPv0rv1Hr1X79X79D69X+/XaTpNH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9XJ/QJ/VP+gd9Wv+oz+iz+qz+SZ/X5/WF398DMGiU0caYwGQymU2CyWKymmwmu7nG5DDXmpi5zuQ015tc5gaT2+QxeU0+k2jymwImNGSsYROZgqaQiZsbTWFzk0kyRUxRU8w4U9yUMDebmEH4R/L/Yn4rpv+2T5vmprlpYVqYlqalaW1amzamjWlr2pp2pp1pb9qbDqaD6Wg6mk6mk+lsOpsupovpZrqZ7qa76YFgeplepo952fQ1/Ux/M8AMNK+Y9MKDzWAzxAwxw8wwM9wMNyPMCDPSjDTpK8eYMWacGWcmmAlmkplkJpvJZoqZYqaaqWa6mW5mmplmtplt5pg5Zq6Za5JNspln5pkFZoFZZBaZxWaxSTEpZqlZalLNMrPMrDArzCqzyqwxa8w6s85sMBvMJrPJpJqtZqvZbrabnWan2W12m71mr9ln9pn9Zr9JM2nmgDlgDpqD5pA5ZA6bw+aIOWKOmqPmmDlmjpvj5oQ5YU6ZU+a0OW3OmDPmnDlnzpvz5oK5YC6ai+mnfYEKVGACE2QKMgUJQUKQNcgaZA+yBzmCHEEsiAU5g5xBruCGIHeQJ8gb5AsSg/xBgSAMKLABB1FQMCgUxIMbg8LBTUFSUCQoGhQLXFA8KBHcHJQMbglKBbcGpYPbgjLB7UHZoFxQPqgQ3BFUDO4MKgWVgyrBXUHVoFpQPagR3B3UDO4JagX3BrWD+4I6wf1B3eCBoF7wYFA/yBY0CB4OGgaPBI2CR4PGQZOgadAsaP5Pq/9Q0CDw/kyex12PsGeYGXqHfcKXw75hv7B/OCAcGL4SDgpfDQeHr4VDwqHhsPD1cHj4RjgifDMcGY4KR4dvhWPCseG4cHw4IZwYTgrfDieH74RTwnfDqeG0cHo4I5wZzgpnh++Fc8L3w7nhB2Fy+GE4L5wfLggXhovCj8LF4ZIwJfw4XBp+EqaGy8Ll4YpwZbgqXB2uCdeG68L14YZwY7gp3BxuCbeG28Lt4Y5wZ7gr3B3uCfeGn4b7ws/C/eHnYVr4RXggvHTY+yo8HH4dHgm/CY+G34bHwu/C4+H34YnwZHgq/CE8Hf4YngnPhufCn8Lz4c/hhfCX8GLo00/u0w/vZMhQJspECZRAWSkrZafslINyUIxilJNyUi7KRbkpN+WlvJRIiVSAClA6JqaCVJDiFKfCVJiSKImKUlFy5KgElaCSVJJKUSkqTaWpDJWhslSWylN5uoPuoDvpTqpMlekuuouqUTWqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpADaghNaRG1IgaU2NqSk2pOTWnFtSCWlJLak2tqQ21obbUltpRO2pP7akDdaCO1JE6USfqTJ2pC3WhbtSNulN36kE9qBf1oj7Uh/pSX+pP/WkgDaRBNIgG02AaQkNoGA2j4TScRtAIGkmjaDS9RWNoLI2j8TSBJtIkmkSTaTJNoSk0labSdJpOM2kmzabZNIfm0FyaS8mUTPNoHi2gBbSIFtFiWkwplEJLaSmlUiotp+W0klbSalpNa2ktraf1tJE20mbaTFtpK22n7bSTdtJu2k17aS/to320n/ZTGqXRATpAB+kgHaJDdJgO0xE6QkfpKB2jY3ScjtMJOkGn6BSdptN0hs7QOTpH5+lnukC/0EXylGCz2Kw2m81ur7E57LX2P8Z5bT6baPPbAja0uW2eP8RkrU2yRWxRW8w6W9yWsDf/KS5ry9nytoK9w1a0d9pKv8cAl+Kaa3f+9ovo9j5bw95ta9p7bC17r61t77N17P22rn3E1rOP2vq2iW1gm9mG9hHbyD5qG9smtqltZtvYJ21b+5RtZ5+27e0zf4oX2yV2rV1n19sNdp/9zJ6zP9mj9lt73v5se9iedqB9xQ6yr9rB9jU7xA79UzzavmXH2LF2nB1vJ9iJf4qn2xl2pp1lZ9v37Bz7/p/iRfYjm2xT7Dw73y6wC3+N0+eUYj+2S+0nNtUus8vtCrvSrrKr7Zq/zXWF3WQ32y12r/3Ubrc77E67y+62e36N07djv/3cptkv7BH7jT1ov7SH7DF72H79a5y+fcfsd/a4/d6esCftKfuDPW1/tGfs2V+3P33bf7C/2IvWW2BkxZoNB5yJM3MCZ+GsnI2z8zWcg6/lGF/HOfl6zsU3cG7Ow3k5Hydyfi7AIRNbZo64IBfiON/IhfkmTuIiXJSLsePiXIJv5pJ8C5fi9LPX27gM385luRyX5wp8B1fkO7kSV+YqfBdX5WpcnWvw3VyT7+FafC/X5vu4Dt/PdfkBrscPcn1+iBvww9yQH+FG/Cg35ibclJtxc36MW/Dj3JJbcWt+gtvwk9yWn+J2/DS352e4Az/LHfk57sTPc2d+gbtwV+7GL3J3fol7cE/uxb25D7/Mfbkf9+cBPJBf4UH8Kg/m13gID+Vh/DoP5zd4BL/JI3kUj+a3eAyP5XE8nifwRJ7Eb/Nkfoen8Ls8lafxdJ7BM3kWz+b3eA6/z3P5A07mD3kez+cFvJAX8Ue8mJdwCn/MS/kTTuVlvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5W28nXcw8i7ezWj28qe8jz/j/fw5p/EXfID/jQ/yl3yIv+LD/DUf4W/4KH/Lx/g7Ps7f8wk+yaf4Bz7NP/IZPsvn+Cc+zz/zBf6FL7JniDBSkY5MFESZosxRQpQlyhpli7JH10Q5omujWHRdlDO6PsoV3RDljvJEeaN8UWKUPyoQhRFFNuIoigpGhaJ4dGNUOLopSoqKREWjYpGLikclopujktEtUano1qh0dFtUJro9KhuVix65r0J0R1QxujOqFFWOqkR3RVWjalH1qEZ0d1QzuieqFd0b1Y7ui0pF90d1oweietGDUX14KGoQPRw1jB6JGkWPRo2jJlHTqFnUPHosahE9HrWMWkWtoyeiNtGTUdvoqahd9HTUPnrmP1mfCQCeiXpFvaM+0cvRy5H39+oF8YXxRfGP4ovjS+Ip8Y/jS+OfxFPjy+LL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41vi3tfIDA6dctoZF7hMLrNLcFlcVpfNZXfXuBzuWhdz17mc7nqXy93gcrs8Lq/L5xJdflfAhY6cdewiV9AVcnF3oyvsbnJJrogr6oo554q7Eq6Za+6auxbucdfStXKt3RPuCfeke9I95Z5yT7v27hnXwT3rOrrnXCf3vHveveC6uK6um3vRdXcvuR6up+vlerk+ro/r6/q6/q6/G+gGukFukBvsBrshbogb5oa54W64G+FGuJFupBvtRrsxbowb58a5CW6Cm+Qmucluspvipripbqqb7qa7mW6mm+1muzlujpvr5rrkpGQ3z81zC9wCt8gtcovdYpfiUtxSt9SlulS33C13K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvdTrfb7XZ73V63z+1z+91+l+bS3AF34Jx3B90h95U77L52R9w37qj71h1z37nj7nt3wp10p9wP7rT70Z1xZ90595M77352F9wv7qLzblLs7djk2DuxKbF3Y1Nj02LTYzNiM2OzYrNj78XmxN6PzY19EEuOfRibF5sfWxBbGFsU+yi2OLYklhL7OLY09kksNbYstjy2IrYytirmff7tkS/oC/m4v9EX9jf5JF/EF/XFvPPFfQl/sy/pb/Gl/K2+tL/Nl/G3+7K+nC/vH/WNfRPf1Dfzzf1jvoV/3Lf0rXxr/4Rv45/0bf1Tvp1/2rf3z/gO/lnf0T/nO/nnfWf/gu/iu/pu/kXf3b/ke3jte/nevo9/2ff1/Xx/P8AP9K/4Qf5VP9i/5of4oX6Yf90P92/4Ef5NP9KP8qP9W36MH+vH+fF+gp/oJ/m3/WT/jp/i3/VT/TQ/3c/wM/0sP9u/5+f49/1c/4FP9h/6eX6+X+AX+kX+I7/YL/Ep/mO/1H/iU/0yv9yv8JCwyq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xOv8vv9nv8Xv+p3+c/8/v95z7Nf+EP+H/zB/2X/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/Uf5mTQghhBDi76KvsL73HyL1t3/V7//TBwCu2ZHv8H+suTH3b+N+KrFNDACe7tn5oUtL1aq9evX6/bmpGoJC8wEgdjk//QrsUrwMWsOT0A5aQcn/7/z6qa7n+Qr147cBZP13OQlwOb5c/5a/qD82+Yr15wMkFbqckwUux5frl/pT7eDX+nlaXKF+li8nAbT8d3nZ4XJ8uX4JeByegXZ/eKYQQgghhBBCCPGbfqp8xytd36ZfnyeayzmZ4XJ8petzIYQQQgghhBBCXH3Pde321GPt2rXq+BeDyn+9Sgb/KoMs/2CdTP8rtuKqDK64g/xXBgBXe3P+NkCAX2/x/fVzrvYnkxBCCCGEEOKf7fJJ/9WeiRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIkXH9j33BWGb5ZgEhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDikv8XAAD//6W0JNU=") open(&(0x7f00000001c0)='./file0\x00', 0x14927e, 0x0) r2 = syz_open_pts(r0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143142, 0x29) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) dup3(r2, r0, 0x0) ioctl$TCSETSW2(r2, 0x5437, 0x0) 6.180502178s ago: executing program 6 (id=2196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) openat(0xffffffffffffffff, 0x0, 0x101800, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 5.984958831s ago: executing program 2 (id=2197): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x5, 0x0) listen(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 5.189939692s ago: executing program 6 (id=2198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r3, &(0x7f0000000380)=""/62, 0x3e) 5.188467353s ago: executing program 3 (id=2199): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES64], 0x1, 0x495, &(0x7f000001c000)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000180)=""/147, 0x93}], 0x1, 0xfc43, 0x7) llistxattr(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)=""/24, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x2, 0x0, 0x7, 0x2, 0x81}}) 5.178324203s ago: executing program 1 (id=2200): mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000003030102000000000000000000000002080003400000000008000340"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) 5.093491384s ago: executing program 2 (id=2201): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 5.093072894s ago: executing program 5 (id=2202): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xb, &(0x7f0000000e00)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x50, &(0x7f0000000440)={[{@usrquota}, {}, {@nobh}, {@resuid}, {@dioread_nolock}]}, 0x0, 0x3eb, &(0x7f0000000880)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100090000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.654202806s ago: executing program 6 (id=2203): socket$inet(0x2, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f00000043c0)=ANY=[], 0x1, 0x1a0, &(0x7f0000000440)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = syz_open_dev$loop(0x0, 0x0, 0x335000) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = creat(0x0, 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.397116679s ago: executing program 5 (id=2204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') readv(r3, &(0x7f00000001c0), 0x1000000000000088) open$dir(0x0, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 2.505900623s ago: executing program 1 (id=2205): socket(0x840000000002, 0x3, 0xfa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.501066163s ago: executing program 2 (id=2206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x2000006, &(0x7f0000000540)=ANY=[@ANYBLOB="756e64656c6574652c756d61736b3d30303030303030303030303030303030303030303031302c7569643d666f726765742c6769643d66306cd1b0d9c22feb0fc6983ab26f726765742c766f6c756d653d30303030303030303030303030303030313032332c6e6f7672732c6164696e6963622c6c617374626c6f636b3d30303030303030303030303030303030303030302c696f6368"], 0x1, 0xc32, &(0x7f0000000e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 2.110913328s ago: executing program 6 (id=2207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.110150168s ago: executing program 1 (id=2208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/91, 0xfffffffffffffdff, 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) 1.683996905s ago: executing program 5 (id=2209): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x0, 0x0, 0x0) ioprio_set$pid(0x3, r0, 0x2004) llistxattr(&(0x7f0000000980)='./file0\x00', 0x0, 0x0) open(0x0, 0x8042, 0x0) 1.150957103s ago: executing program 3 (id=2210): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6}, 0x10) 14.44086ms ago: executing program 2 (id=2211): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141041) r1 = dup(r0) ioperm(0x2, 0x3, 0x7) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x21, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) socket$kcm(0x10, 0x2, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x11, 0x3, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 13.97411ms ago: executing program 3 (id=2212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f056bbee7, 0x80010, 0xffffffffffffffff, 0xf8d38000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x40000040, &(0x7f0000002e40)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 13.6063ms ago: executing program 1 (id=2213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x8, 0x4, 0x3, 0x7f}}, 0x20) setns(r3, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$eJzs3U1oHOf9B/DvrFay5T/Y+id24pZARAxpqaktWSitemjcUooPoQT30LOw5Vh4rQRJKUoojfpObz2k9/SgW6HQ0rshPbe3XEVPKYVechI9ZMuMZlcrafUWyXpJPh8zet5mnnme387O7MxiNsAX1p3raT7Je93y6spEa3Vl4lxdbCUp842kWVcVc0nxYXI760u+VFZ2Gnfaz/uzU3c/+mT14/VSs16q9Ru7bbc/y/WS0SQDdbrd4Gfq796W/l48+PiKzgzLgF07/HzhaLS3Wd7U/vvsesQ7juFzoFi/bm4zklyoTwDVZ4L67NA41sE9BcsnPQAAAAA4BpfWspalXDzpcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAZtJykqH/fv0yL0RQXkpxPMlTXpc6faU+Kkx4BAAAAAAAAAGzxat/a5m6bvLiWtSzlYqfcLqrv/F8qs+12u6z6v7ydhcxkPjeylOksZjHzGU8y0tPR0NL04uL8eLVlcjk7bvlpu++Wtw43dQAAAAAAAAD4wvn2ptLPc2fj+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNimRgPamWy538SBrNJOeTDJXrLSf/6ORPicaure1LfaufPKXBAAAAwGlyaS1rWcrFqjCctIvqnv+56r7/fN7OXBYzm8W0MpP71bOA9bv+xurKRGt1ZeJxuWzv9zv/OdAwhur794Gq1G/PV6s1hvMgs1XNjdzLm2nlfhrdO/+rnfH0H9fPyjEVr9b2ObL7dVrO/Hd1us3dTw8026MxUkVksBuRsc7Dm9LukTjgq7N1T+NpdJ/8XO6/p3als9LOMR9MxrZVXqjTMta/7on5ptj3Pnr654GmcwhbI3Gr5+h7bnMktm/8lb/+8UcPW3OPHj5YuN73MDpLtkZioicSz3ejUCTLfc4Pn6tIjFWRuNIt38n388Ncz2hez3xm8+NMZzEzGc33qtx0fRwXO797Om5vKr2+xyPO6i0x0j2LHmxML1XbXsxsfpA3cz8zeaX6dyvj+UYmM5mpnlf4yj7OtI2+7/rzOw3+2lfrzHCS39Tp6VDG9f974tp7zh2p2nprNqL0zKYoFVuvHWWUXmse7HrU/HKdKffxiz2feh+nrZEY74nEs7sfL39ol38XWnOP5h9Ov1VV/WnPrxZertMyqr/a6cq8q+aBt9ifcujPdPvffHSUbc/2bRuv2i532xrb2q502/Z6pw7Vn+G293Sranu+b9tE1Xa1p23z5633qs9bxxFBAA7lwtcuDA3/e/jvwx8M/3L44fBr57977pvnXhjK4N8Gv9UcG3i58ULx53yQn9b3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKEsvPPuo+nWQObXM62ZfWbO5QAr7yNT1D/kc2QdnupMGoec6WD98p34dM4lhzwS/vLb9amc+ItyFJlm+ZqUs/mM/aRxGmZRZfb8HS7gjLu5+PitmwvvvPv12cfTb8y8MTM3ODk5NTY1+crEzQezrZmx9b8nPUrgadi46Pdt/texDwgAAAAAAAAAAADY03H8d4KTniMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtt25nuaTFBkfuzFWlldXJlrl0slvrNlM0khS/CQpPkxuZ33JSE93xU77eX926u5Hn6x+vNFXs7N+2el/24eaxXK9ZDTJQJ0eVX/3Dt1f0Y1MGbBrncDBSftfAAAA//+gfAoT") timer_gettime(r1, &(0x7f00000000c0)) 0s ago: executing program 5 (id=2214): socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3694, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2016a}, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x67e8, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x5f9117fecd4dbe6c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x5ae7, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): e team_slave_1 added [ 283.131447][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.161550][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.248433][ T7219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.348625][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.355636][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.394072][ T7219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.594679][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.682'. [ 284.693721][ T7219] device hsr_slave_0 entered promiscuous mode [ 284.729847][ T7219] device hsr_slave_1 entered promiscuous mode [ 284.751873][ T7219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.776923][ T7219] Cannot create hsr debugfs directory [ 284.844640][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.854837][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.886352][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.988638][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 285.087443][ T26] audit: type=1326 audit(1750804647.901:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3617b3a929 code=0x0 [ 285.110425][ T4216] Bluetooth: hci2: command 0x0419 tx timeout [ 285.197170][ T7219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.224182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.245903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.275553][ T7219] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.297318][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.311553][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.321465][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.328600][ T4260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.345632][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.358821][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.380335][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.397821][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.406328][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.423503][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.430702][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.441144][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.450471][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.473171][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.499000][ T23] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 285.508291][ T7180] device veth0_vlan entered promiscuous mode [ 285.530985][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 285.557515][ T23] usb 6-1: SerialNumber: syz [ 285.608890][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.624705][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.667070][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.696772][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.727187][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.773162][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.787288][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.804702][ T7180] device veth1_vlan entered promiscuous mode [ 286.200633][ T7219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.728483][ T7219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.798867][ T23] usb 6-1: 0:2 : does not exist [ 286.817209][ T23] usb 6-1: USB disconnect, device number 5 [ 286.823830][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.845896][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.934925][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.953244][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.977186][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.007909][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.035766][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.038780][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.068543][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.747968][ T7180] device veth0_macvtap entered promiscuous mode [ 287.781947][ T7180] device veth1_macvtap entered promiscuous mode [ 287.825721][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.859348][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.897785][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.908649][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.918528][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.929306][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.939215][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.949733][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.959608][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.971016][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.983309][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.010767][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.027975][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.047311][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.076952][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.086866][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.096843][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.109782][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.120688][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.131087][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.141764][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.151946][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.162507][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.172400][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.183586][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.193576][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.204162][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.216197][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.226069][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.235403][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.244848][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.354898][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.375351][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.390093][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.416829][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.427888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.428440][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.448025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.456615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.474594][ T7219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.543963][ T317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.618301][ T317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.698163][ T317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.767221][ T317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.029444][ T7394] netlink: 44 bytes leftover after parsing attributes in process `syz.7.702'. [ 290.090388][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.097917][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.255106][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.289436][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.365939][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.387073][ T7402] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 290.392270][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.503163][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.541890][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.585653][ T7219] device veth0_vlan entered promiscuous mode [ 290.624065][ T7219] device veth1_vlan entered promiscuous mode [ 290.710046][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.724184][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.750427][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.766546][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.780582][ T7219] device veth0_macvtap entered promiscuous mode [ 291.786825][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.856581][ T7219] device veth1_macvtap entered promiscuous mode [ 291.906749][ T7420] 9pnet: Insufficient options for proto=fd [ 291.909916][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.958469][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.988436][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.029389][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.052218][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.087881][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.111588][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.123987][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.124368][ T7430] loop5: detected capacity change from 0 to 8 [ 292.133911][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.133934][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.133955][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.133969][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.135706][ T7219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.196816][ T7430] squashfs: Unknown parameter 'á' [ 292.245484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.285157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.320754][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.342325][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.355349][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.366186][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.376398][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.387337][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.397343][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.407817][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.417729][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.428278][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.438475][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.450168][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.463699][ T7219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.507697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.516751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.626039][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.647109][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.674526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.694152][ T4684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.705376][ T4684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.763710][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.071607][ T7452] loop2: detected capacity change from 0 to 2048 [ 293.100357][ T317] device hsr_slave_0 left promiscuous mode [ 293.270848][ T7452] UDF-fs: bad mount option "ÿ00000000000000000000" or missing value [ 293.373100][ T317] device hsr_slave_1 left promiscuous mode [ 293.560279][ T317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.892430][ T317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.966218][ T317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.998474][ T317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.029361][ T317] device bridge_slave_1 left promiscuous mode [ 294.037374][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.070749][ T317] device bridge_slave_0 left promiscuous mode [ 294.077038][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.137472][ T317] device veth1_macvtap left promiscuous mode [ 294.146231][ T317] device veth0_macvtap left promiscuous mode [ 294.160384][ T317] device veth1_vlan left promiscuous mode [ 294.166227][ T317] device veth0_vlan left promiscuous mode [ 294.486671][ T317] team0 (unregistering): Port device team_slave_1 removed [ 294.515899][ T317] team0 (unregistering): Port device team_slave_0 removed [ 295.093354][ T7484] loop7: detected capacity change from 0 to 2048 [ 295.352468][ T7497] loop2: detected capacity change from 0 to 256 [ 296.191001][ T7484] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.279864][ T7484] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.310719][ T26] audit: type=1800 audit(1750804659.131:47): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.718" name="file2" dev="loop2" ino=1048612 res=0 errno=0 [ 296.350104][ T7484] netlink: 'syz.7.717': attribute type 10 has an invalid length. [ 297.842668][ T7484] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.906972][ T7497] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 297.925662][ T7484] device team0 entered promiscuous mode [ 297.932297][ T7497] FAT-fs (loop2): Filesystem has been set read-only [ 297.944280][ T7484] device team_slave_0 entered promiscuous mode [ 297.951685][ T7484] device team_slave_1 entered promiscuous mode [ 297.959511][ T7484] bond0: (slave team0): Enslaving as an active interface with an up link [ 297.998882][ T7497] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 299.591348][ T7529] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 299.913656][ T7551] loop4: detected capacity change from 0 to 64 [ 300.800191][ T7551] netlink: 64 bytes leftover after parsing attributes in process `syz.4.738'. [ 300.995004][ T7564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.953232][ T7582] kAFS: unable to lookup cell ' [ 301.953232][ T7582] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 301.953232][ T7582] ' [ 304.841755][ T7627] 8021q: VLANs not supported on vcan0 [ 304.919754][ T7627] netlink: 788 bytes leftover after parsing attributes in process `syz.7.757'. [ 305.777387][ T7637] loop7: detected capacity change from 0 to 128 [ 307.192522][ T7637] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 307.268605][ T7637] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 307.644293][ T7637] EXT4-fs error (device loop7): dx_make_map:1328: inode #2: block 18: comm syz.7.759: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 308.294767][ T7637] EXT4-fs error (device loop7) in do_split:2095: Corrupt filesystem [ 310.946068][ T7687] loop2: detected capacity change from 0 to 1024 [ 312.208418][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 312.759565][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 313.272726][ T7708] loop7: detected capacity change from 0 to 65536 [ 313.339116][ T7716] netlink: 'syz.5.775': attribute type 1 has an invalid length. [ 313.442426][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.536384][ T7728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.589508][ T7708] XFS (loop7): Mounting V5 Filesystem [ 313.619849][ T7728] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 313.714812][ T7708] XFS (loop7): Ending clean mount [ 313.745672][ T7728] bond0: (slave vxcan1): Error -22 calling dev_set_mtu [ 313.816714][ T7716] device gretap1 entered promiscuous mode [ 313.917153][ T13] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 313.967880][ T7716] bond0: (slave gretap1): making interface the new active one [ 313.978707][ T13] XFS (loop7): Unmount and run xfs_repair [ 313.990321][ T7716] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 313.995226][ T13] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 314.014198][ T13] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 314.049588][ T13] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 314.703230][ T13] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 314.716391][ T13] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 314.731953][ T13] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 314.741608][ T13] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 314.777491][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 314.817658][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 314.865867][ T7708] XFS (loop7): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 314.888008][ T7708] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 314.904272][ T7708] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 316.115381][ T7783] netlink: 'syz.2.789': attribute type 8 has an invalid length. [ 316.182119][ T7784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.211076][ T7789] loop4: detected capacity change from 0 to 128 [ 316.217786][ T7783] bridge0: port 3(syz_tun) entered blocking state [ 316.246963][ T5603] XFS (loop7): Unmounting Filesystem [ 316.288818][ T7783] bridge0: port 3(syz_tun) entered disabled state [ 316.298687][ T7783] device syz_tun entered promiscuous mode [ 316.306040][ T7783] bridge0: port 3(syz_tun) entered blocking state [ 316.313324][ T7783] bridge0: port 3(syz_tun) entered forwarding state [ 317.470414][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.207344][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.807'. [ 322.303654][ T7843] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 323.784014][ T7835] chnl_net:caif_netlink_parms(): no params data found [ 324.049563][ T4736] Bluetooth: hci2: command 0x0409 tx timeout [ 324.067582][ T4324] device hsr_slave_0 left promiscuous mode [ 324.083938][ T4324] device hsr_slave_1 left promiscuous mode [ 324.090687][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.108405][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.129256][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.146485][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.184057][ T4324] device bridge_slave_1 left promiscuous mode [ 324.218049][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.247718][ T4324] device bridge_slave_0 left promiscuous mode [ 324.262146][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.302992][ T4324] device veth1_macvtap left promiscuous mode [ 324.309088][ T4324] device veth0_macvtap left promiscuous mode [ 324.337344][ T4324] device veth1_vlan left promiscuous mode [ 324.343547][ T4324] device veth0_vlan left promiscuous mode [ 324.583801][ T4324] team0 (unregistering): Port device team_slave_1 removed [ 324.597810][ T4324] team0 (unregistering): Port device team_slave_0 removed [ 324.616381][ T4324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.631533][ T4324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.706788][ T4324] bond0 (unregistering): Released all slaves [ 324.803933][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.811305][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.819222][ T7835] device bridge_slave_0 entered promiscuous mode [ 324.828428][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.835718][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.844853][ T7835] device bridge_slave_1 entered promiscuous mode [ 324.876727][ T7835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.889150][ T7835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.973954][ T7835] team0: Port device team_slave_0 added [ 324.984246][ T7835] team0: Port device team_slave_1 added [ 325.010538][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.017828][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.044245][ T7835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.057602][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.065082][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.091514][ T7835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.171455][ T7835] device hsr_slave_0 entered promiscuous mode [ 325.178603][ T7835] device hsr_slave_1 entered promiscuous mode [ 325.297302][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.304575][ T7835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.370938][ T7835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.390283][ T7835] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.398002][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.407593][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 325.421855][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.430109][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.489570][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.498779][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.515606][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.522775][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.538340][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.547322][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.554477][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.578274][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.596934][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.628650][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.637558][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.662358][ T7835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.681586][ T7835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.690131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.886157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.901991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.916597][ T7835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.130132][ T4736] Bluetooth: hci2: command 0x041b tx timeout [ 326.167718][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.177454][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.193552][ T7835] device veth0_vlan entered promiscuous mode [ 326.200960][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.209484][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.224207][ T7835] device veth1_vlan entered promiscuous mode [ 326.241060][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.249290][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.259093][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.268601][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.288522][ T7835] device veth0_macvtap entered promiscuous mode [ 326.306903][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.323798][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.338407][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.352862][ T7835] device veth1_macvtap entered promiscuous mode [ 326.387841][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.398508][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.416172][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.429732][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.447005][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.458352][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.481315][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.499547][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.510054][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.528168][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.548539][ T7835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.567869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.579422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.588868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.601590][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.618195][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.630651][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.648184][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.661084][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.677319][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.689172][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.701690][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.711666][ T7835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.722490][ T7835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.734540][ T7835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.743702][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.757209][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.869082][ T4684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.886060][ T4684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.911594][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.925686][ T317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.937590][ T317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.952079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.440794][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 328.531961][ T7925] netlink: 'syz.5.810': attribute type 1 has an invalid length. [ 331.115450][ T7939] loop7: detected capacity change from 0 to 4096 [ 331.431420][ T7959] Cannot find set identified by id 0 to match [ 332.093321][ T2303] Bluetooth: hci2: command 0x0419 tx timeout [ 332.150069][ T7965] loop6: detected capacity change from 0 to 256 [ 332.236210][ T7965] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 332.269895][ T7965] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 332.364601][ T7965] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 335.183874][ T4217] Process accounting resumed [ 335.387860][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 335.426619][ T4324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.548639][ T4324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.611317][ T8024] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 335.634446][ T8024] loop2: detected capacity change from 0 to 512 [ 335.768641][ T4324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.193946][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.841'. [ 336.511179][ T23] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 336.590150][ T4324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.666178][ T8024] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 336.695241][ T8024] EXT4-fs (loop2): 1 truncate cleaned up [ 336.710545][ T8024] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 336.773052][ T8024] EXT4-fs (loop2): Unrecognized mount option "ì¥YðÌÚ„yµ²Fm¤ïŠ©«±ZÉ1Ø(O[½Å [ 336.773052][ T8024] ^¥Æ+EïóªØ]0rQ#Íó{ØÌŽÎcÄpç6;æ°:ªPŸrïfè˜l¿íÐIG>Žá¦?Ï…-H"’&Fþ)ð!Iˆ|.z" or missing value [ 337.063442][ T8052] overlayfs: failed to clone upperpath [ 337.071941][ T4324] tipc: Left network mode [ 337.081121][ T2303] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 337.091848][ T23] usb 7-1: config 7 has an invalid interface number: 252 but max is 0 [ 337.100229][ T23] usb 7-1: config 7 has no interface number 0 [ 337.117406][ T23] usb 7-1: config 7 interface 252 has no altsetting 0 [ 337.363337][ T23] usb 7-1: string descriptor 0 read error: -22 [ 337.372558][ T23] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 337.388815][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.501218][ T2303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.551313][ T2303] usb 3-1: not running at top speed; connect to a high speed hub [ 337.604021][ T4324] bond1: (slave gretap1): Releasing backup interface [ 337.643660][ T2303] usb 3-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 337.674592][ T2303] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 337.690599][ T4458] usb 7-1: USB disconnect, device number 2 [ 337.851547][ T2303] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.878521][ T2303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.925140][ T2303] usb 3-1: Product: syz [ 337.960663][ T2303] usb 3-1: Manufacturer: syz [ 337.965892][ T2303] usb 3-1: SerialNumber: syz [ 338.654364][ T2303] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 338.877748][ T8089] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 338.933396][ T2303] usb 3-1: unit 5 not found! [ 338.960284][ T2303] usb 3-1: USB disconnect, device number 2 [ 340.083795][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.104941][ T4324] device hsr_slave_0 left promiscuous mode [ 340.154302][ T4324] device hsr_slave_1 left promiscuous mode [ 340.182921][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.190457][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.232875][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.240471][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.256781][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 340.315492][ T4324] device bridge_slave_1 left promiscuous mode [ 340.351661][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.411314][ T4324] device bridge_slave_0 left promiscuous mode [ 340.423054][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.492514][ T4324] device veth1_macvtap left promiscuous mode [ 340.498617][ T4324] device veth0_macvtap left promiscuous mode [ 340.552936][ T4324] device veth1_vlan left promiscuous mode [ 340.558803][ T4324] device veth0_vlan left promiscuous mode [ 340.924762][ T8130] loop5: detected capacity change from 0 to 512 [ 341.054074][ T4324] bond1 (unregistering): Released all slaves [ 341.119274][ T8130] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 341.142011][ T8130] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.633244][ T8130] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 342.067812][ T4324] team0 (unregistering): Port device team_slave_1 removed [ 342.450849][ T4324] team0 (unregistering): Port device team_slave_0 removed [ 342.489019][ T4324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.542652][ T4324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.717675][ T4324] bond0 (unregistering): Released all slaves [ 342.777568][ T8146] loop7: detected capacity change from 0 to 32768 [ 342.818051][ T8146] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.867 (8146) [ 342.871157][ T8152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 342.929996][ T8146] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 342.965390][ T8146] BTRFS info (device loop7): setting nodatasum [ 342.994046][ T8146] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 343.023329][ T8161] syz.6.871 sent an empty control message without MSG_MORE. [ 343.059311][ T8146] BTRFS info (device loop7): force lzo compression, level 0 [ 343.088265][ T8146] BTRFS info (device loop7): unrecognized rescue option 'ignoresuperflags' [ 343.132265][ T8146] BTRFS error (device loop7): unrecognized rescue value ignoresuperflags [ 343.196731][ T8146] BTRFS error (device loop7): open_ctree failed: -22 [ 343.893896][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 345.504612][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.879'. [ 345.542265][ T8198] netlink: 68 bytes leftover after parsing attributes in process `syz.6.880'. [ 345.673129][ T8202] netlink: 'syz.2.882': attribute type 4 has an invalid length. [ 346.315968][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.884'. [ 346.609341][ T8229] MPTCP: addr_signal error, add_addr=1, echo=0 [ 348.531421][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.894'. [ 348.571549][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.6.894'. [ 348.587972][ T26] audit: type=1107 audit(1750804711.403:48): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 348.620008][ T8255] device geneve2 entered promiscuous mode [ 355.417486][ T8374] loop6: detected capacity change from 0 to 256 [ 355.537517][ T8378] tmpfs: Unknown parameter 'fscontext' [ 356.188281][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.935'. [ 359.016145][ T8432] tipc: Started in network mode [ 359.021174][ T8432] tipc: Node identity ac14140f, cluster identity 4711 [ 359.029895][ T8432] tipc: New replicast peer: 172.30.1.6 [ 359.037062][ T8432] tipc: Enabled bearer , priority 10 [ 359.316241][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.945'. [ 360.043948][ T4215] tipc: Node number set to 2886997007 [ 360.999574][ T8458] loop6: detected capacity change from 0 to 1024 [ 361.202458][ T8472] net_ratelimit: 1052 callbacks suppressed [ 361.202480][ T8472] netlink: zone id is out of range [ 361.228615][ T8458] EXT4-fs (loop6): Ignoring removed orlov option [ 361.273675][ T8472] netlink: zone id is out of range [ 361.282822][ T8458] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 361.324428][ T8472] netlink: zone id is out of range [ 361.329752][ T8472] netlink: zone id is out of range [ 361.335078][ T8472] netlink: zone id is out of range [ 361.340502][ T8472] netlink: zone id is out of range [ 361.345746][ T8472] netlink: zone id is out of range [ 361.354377][ T8472] netlink: zone id is out of range [ 361.359538][ T8472] netlink: zone id is out of range [ 361.427249][ T8482] netlink: 48 bytes leftover after parsing attributes in process `syz.3.953'. [ 361.445214][ T8472] netlink: zone id is out of range [ 361.469920][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.7.954'. [ 361.517880][ T8484] device ipvlan2 entered promiscuous mode [ 361.543942][ T26] audit: type=1804 audit(1750804724.351:49): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.949" name="/newroot/29/bus/bus" dev="loop6" ino=18 res=1 errno=0 [ 363.019569][ T8515] MPTCP: addr_signal error, add_addr=1, echo=0 [ 363.031380][ T8515] MPTCP: addr_signal error, add_addr=1, echo=0 [ 365.126566][ T8527] netlink: 'syz.6.962': attribute type 10 has an invalid length. [ 365.172790][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.180299][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.335879][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.343042][ T8527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.350564][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.357670][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.827184][ T8527] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 365.954818][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.962'. [ 365.991999][ T8530] device bridge_slave_1 left promiscuous mode [ 365.998857][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.545433][ T8563] MPTCP: addr_signal error, add_addr=1, echo=0 [ 367.707209][ T8530] device bridge_slave_0 left promiscuous mode [ 367.720674][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.761493][ T8530] bond0: (slave bridge0): Releasing backup interface [ 367.831517][ T8571] tipc: Enabling of bearer rejected, failed to enable media [ 370.473988][ T8646] device gretap0 entered promiscuous mode [ 370.491588][ T8646] device vlan2 entered promiscuous mode [ 370.752273][ T8653] tipc: Enabling of bearer rejected, failed to enable media [ 370.863687][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 372.335611][ T8681] loop7: detected capacity change from 0 to 2048 [ 372.496259][ T8681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.152959][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 373.248348][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 373.459294][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 373.685959][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 373.732317][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 373.774760][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 373.783236][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 373.792262][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 373.814168][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.835344][ T8692] net_ratelimit: 23 callbacks suppressed [ 373.835369][ T8692] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 377.351476][ T8746] overlayfs: failed to clone lowerpath [ 378.549852][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.424427][ T8789] loop6: detected capacity change from 0 to 2048 [ 382.159017][ T8789] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 382.538407][ T8798] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.557989][ T8789] attempt to access beyond end of device [ 382.557989][ T8789] loop6: rw=524288, want=33554432, limit=2048 [ 382.678722][ T8789] attempt to access beyond end of device [ 382.678722][ T8789] loop6: rw=0, want=9437256, limit=2048 [ 382.733662][ T8789] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=0) [ 382.891032][ T8791] attempt to access beyond end of device [ 382.891032][ T8791] loop6: rw=0, want=33554432, limit=2048 [ 383.424822][ T8791] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 383.515010][ T8791] NILFS (loop6): error -5 reading inode: ino=15 [ 383.548589][ T8806] attempt to access beyond end of device [ 383.548589][ T8806] loop6: rw=0, want=9437256, limit=2048 [ 383.570091][ T8806] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=0) [ 384.271485][ T8831] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.1027'. [ 384.293078][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1027'. [ 384.542774][ T26] audit: type=1326 audit(1750804747.349:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.6.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7fc00000 [ 386.309751][ T8856] netlink: 'syz.3.1034': attribute type 10 has an invalid length. [ 386.335427][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.342785][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.412603][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 386.484447][ T8859] device bridge_slave_1 left promiscuous mode [ 386.520564][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.543404][ T8859] device bridge_slave_0 left promiscuous mode [ 386.575794][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.325586][ T8905] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1046'. [ 388.375149][ T8905] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1046'. [ 388.552508][ T8916] x_tables: duplicate underflow at hook 1 [ 388.595459][ T8922] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1049'. [ 391.019686][ T8955] netlink: 'syz.2.1056': attribute type 10 has an invalid length. [ 391.092246][ T8955] bridge0: port 3(syz_tun) entered disabled state [ 391.098961][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.106416][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.152439][ T8955] bridge0: port 3(syz_tun) entered blocking state [ 391.159002][ T8955] bridge0: port 3(syz_tun) entered forwarding state [ 391.165807][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.172959][ T8955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.180393][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.187572][ T8955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.224175][ T8955] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 391.426636][ T8968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.530584][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 391.544011][ T8959] device syz_tun left promiscuous mode [ 391.554282][ T8959] bridge0: port 3(syz_tun) entered disabled state [ 391.569717][ T8959] device bridge_slave_1 left promiscuous mode [ 391.583845][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.753421][ T8959] device bridge_slave_0 left promiscuous mode [ 391.763566][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.925103][ T8959] bond0: (slave bridge0): Releasing backup interface [ 392.038781][ T8973] loop6: detected capacity change from 0 to 65536 [ 392.151900][ T8973] XFS (loop6): Mounting V5 Filesystem [ 392.183949][ T8968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.247557][ T8973] XFS (loop6): Ending clean mount [ 392.313255][ T4458] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 392.355204][ T4458] XFS (loop6): Unmount and run xfs_repair [ 392.409695][ T4458] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 392.419401][ T4458] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 392.645547][ T4458] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 392.654741][ T4458] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 392.663793][ T4458] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 392.672926][ T4458] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 392.891525][ T4458] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 392.942159][ T4458] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.000882][ T4458] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.717174][ T8973] XFS (loop6): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 393.735646][ T8973] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 393.752364][ T8973] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 393.856677][ T7835] XFS (loop6): Unmounting Filesystem [ 393.892906][ T8968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.945840][ T8995] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 394.046308][ T8995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.081500][ T8998] bond1: (slave gretap1): making interface the new active one [ 394.106423][ T8998] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 394.135283][ T8968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.198658][ T8998] syz.3.1066 (8998) used greatest stack depth: 19112 bytes left [ 394.211921][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 394.415121][ T8968] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.447731][ T8968] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.480544][ T8968] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.505783][ T8968] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.191991][ T9079] netlink: 'syz.7.1085': attribute type 1 has an invalid length. [ 401.280995][ T9079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.337753][ T9087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.356120][ T9087] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 401.367648][ T9087] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 401.540394][ T9079] device gretap2 entered promiscuous mode [ 401.600297][ T9079] bond1: (slave gretap2): making interface the new active one [ 401.608701][ T9079] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 402.362510][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 403.021805][ T9119] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1088'. [ 403.236963][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 404.880735][ T9133] futex_wake_op: syz.5.1100 tries to shift op by -1; fix this program [ 405.027359][ T9152] netlink: 'syz.6.1104': attribute type 29 has an invalid length. [ 405.067558][ T9152] netlink: 'syz.6.1104': attribute type 29 has an invalid length. [ 405.087192][ T9159] netlink: 'syz.6.1104': attribute type 29 has an invalid length. [ 405.345553][ T9167] Cannot find del_set index 2 as target [ 409.651492][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1126'. [ 410.936517][ T9262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1134'. [ 411.121791][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1136'. [ 411.146218][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 411.999946][ T9303] overlayfs: failed to clone upperpath [ 414.536136][ T26] audit: type=1326 audit(1750804777.345:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7fc00000 [ 414.793418][ T26] audit: type=1326 audit(1750804777.345:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f57f643a929 code=0x7fc00000 [ 414.952941][ T26] audit: type=1326 audit(1750804777.345:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7fc00000 [ 415.012954][ T9352] device geneve2 entered promiscuous mode [ 417.904089][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 417.945506][ T9375] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 421.030591][ T9438] fuse: Bad value for 'fd' [ 421.224024][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 422.539402][ T9454] overlayfs: failed to clone lowerpath [ 422.548295][ T9459] xt_hashlimit: size too large, truncated to 1048576 [ 423.473285][ T9462] tmpfs: Unknown parameter 'usrquota' [ 423.567788][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 425.015006][ T9499] overlayfs: failed to clone upperpath [ 425.123455][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 426.154107][ T9524] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1193'. [ 427.043267][ T9531] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 428.390864][ T9531] device bond2 entered promiscuous mode [ 428.411737][ T9531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.443315][ T9533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.611224][ T9533] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 428.622649][ T9533] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 428.688447][ T9533] bond2: (slave ip6gre1): making interface the new active one [ 428.696774][ T9533] device ip6gre1 entered promiscuous mode [ 428.710344][ T9533] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 428.729654][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 428.753946][ T9548] netlink: 'syz.5.1199': attribute type 10 has an invalid length. [ 432.664947][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1213'. [ 432.807228][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1208'. [ 438.067305][ T9651] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1233'. [ 439.551763][ T9675] xt_TCPMSS: Only works on TCP SYN packets [ 440.184406][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.699715][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1245'. [ 440.709159][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1245'. [ 441.047837][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 441.502430][ T4736] Bluetooth: hci5: command 0x0409 tx timeout [ 442.339287][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.437751][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.674748][ T9660] device bridge_slave_0 entered promiscuous mode [ 442.726550][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.743348][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.755679][ T9660] device bridge_slave_1 entered promiscuous mode [ 442.846208][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.883017][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.041461][ T9660] team0: Port device team_slave_0 added [ 443.070475][ T9660] team0: Port device team_slave_1 added [ 443.141153][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.149215][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.201884][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.215153][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.222255][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.249064][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.520174][ T9660] device hsr_slave_0 entered promiscuous mode [ 443.583999][ T4478] Bluetooth: hci5: command 0x041b tx timeout [ 443.600401][ T9660] device hsr_slave_1 entered promiscuous mode [ 443.640149][ T9660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.699366][ T9660] Cannot create hsr debugfs directory [ 443.733956][ T26] audit: type=1326 audit(1750804806.502:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 443.895499][ T26] audit: type=1326 audit(1750804806.512:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 444.027306][ T26] audit: type=1326 audit(1750804806.512:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 444.273115][ T26] audit: type=1326 audit(1750804806.512:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 444.295398][ T26] audit: type=1326 audit(1750804806.512:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 444.317956][ T26] audit: type=1326 audit(1750804806.512:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 444.348783][ T26] audit: type=1326 audit(1750804806.512:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 444.427463][ T26] audit: type=1326 audit(1750804806.532:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 444.482087][ T26] audit: type=1326 audit(1750804806.532:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 444.532401][ T26] audit: type=1326 audit(1750804806.532:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 445.664500][ T4736] Bluetooth: hci5: command 0x040f tx timeout [ 447.485227][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.541163][ T9788] tipc: Enabling of bearer rejected, already enabled [ 447.598666][ T4478] Bluetooth: hci2: command 0x0406 tx timeout [ 448.669690][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.670293][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.686747][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.729646][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 448.794606][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.795326][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.795807][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.795845][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.796338][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 448.799843][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 448.800403][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.800784][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.800818][ T7977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.806127][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 448.810080][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 448.852789][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 448.855821][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 448.978128][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 448.993277][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.139974][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.171401][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 450.449163][ T9660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.459597][ T9660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.476872][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.565328][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.715194][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.829296][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.950544][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.361770][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1277'. [ 452.965731][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.973289][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 453.185879][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.174430][ T9855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.640953][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 454.640970][ T26] audit: type=1326 audit(1750804817.440:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.6.1295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x0 [ 454.932896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 454.949640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 454.978917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 454.995396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.008380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.022308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.034440][ T9660] device veth0_vlan entered promiscuous mode [ 455.066250][ T9660] device veth1_vlan entered promiscuous mode [ 455.102208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 455.120363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 455.129876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 455.146779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 455.159864][ T9660] device veth0_macvtap entered promiscuous mode [ 455.173848][ T9660] device veth1_macvtap entered promiscuous mode [ 455.205729][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.219688][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.230274][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.243432][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.254173][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.265409][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.278414][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.289375][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.301368][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.321427][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.348347][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.388129][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.448808][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.458792][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.469363][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.479653][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.491013][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.515236][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.761040][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.893726][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.001998][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.371819][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.482831][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.526072][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.557103][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.576679][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.752952][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.809276][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.869390][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.598618][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.682109][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 458.818503][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.996176][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.058575][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 461.326529][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.336436][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.345902][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.355636][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.364937][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.374197][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.383308][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.392443][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.401549][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 461.410628][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 467.424424][T10036] overlayfs: failed to clone upperpath [ 467.990949][T10047] bridge0: port 1(syz_tun) entered blocking state [ 468.035328][ T4752] Process accounting resumed [ 468.213182][T10047] bridge0: port 1(syz_tun) entered disabled state [ 468.520179][T10055] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 468.715460][T10047] device syz_tun entered promiscuous mode [ 468.811012][T10055] overlayfs: missing 'lowerdir' [ 468.868221][T10063] device vlan3 entered promiscuous mode [ 468.883894][T10063] __nla_validate_parse: 36 callbacks suppressed [ 468.883910][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 469.946712][T10060] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.954336][T10060] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.052967][T10067] device bridge_slave_1 left promiscuous mode [ 470.070283][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.100950][T10067] device bridge_slave_0 left promiscuous mode [ 470.196523][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.263037][T10096] xt_TCPMSS: Only works on TCP SYN packets [ 474.148114][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1367'. [ 476.330486][T10140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'. [ 476.370537][T10140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'. [ 478.190570][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1382'. [ 478.729762][T10174] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 478.756063][T10174] CIFS mount error: No usable UNC path provided in device string! [ 478.756063][T10174] [ 478.766680][T10174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 483.555414][T10202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.563807][T10202] IPv6: NLM_F_CREATE should be set when creating new route [ 487.066572][T10225] overlayfs: failed to clone upperpath [ 488.113692][T10206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.170155][T10206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.321155][T10206] device geneve2 left promiscuous mode [ 488.339080][T10233] netlink: 'syz.3.1401': attribute type 2 has an invalid length. [ 488.357794][T10237] device lo entered promiscuous mode [ 488.421017][T10237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.480633][T10243] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 488.505315][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1404'. [ 488.670417][T10256] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1408'. [ 488.716566][T10256] tipc: Started in network mode [ 488.750234][T10256] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 488.776830][T10256] tipc: Enabled bearer , priority 10 [ 488.791695][T10262] tipc: Resetting bearer [ 488.962086][T10262] tipc: Disabling bearer [ 491.692165][T10314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 491.732508][T10314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 491.760115][T10314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 491.784319][T10314] bond0: (slave bond_slave_0): Releasing backup interface [ 491.824357][T10314] bond0: (slave bond_slave_1): Releasing backup interface [ 491.923656][T10314] team0: Port device team_slave_0 removed [ 491.981470][T10314] team0: Port device team_slave_1 removed [ 492.007149][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.015622][T10314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.048194][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.066561][T10314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.549630][T10355] netlink: 'syz.1.1440': attribute type 11 has an invalid length. [ 494.966565][T10355] xt_SECMARK: invalid mode: 2 [ 496.359351][T10395] netlink: 'syz.1.1453': attribute type 1 has an invalid length. [ 496.557762][T10395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.273693][T10405] bond1: (slave ip6erspan0): making interface the new active one [ 497.284036][T10405] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 497.310424][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 498.957439][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 498.999042][T10459] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 499.092847][T10459] netlink: 'syz.3.1471': attribute type 2 has an invalid length. [ 499.855782][T10477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.868064][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 499.879433][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 502.060745][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.183513][T10517] netlink: 'syz.2.1486': attribute type 10 has an invalid length. [ 503.210558][ T4217] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 503.268961][T10517] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 503.317865][T10520] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1486'. [ 503.341129][ C0] Illegal XDP return value 16128, expect packet loss! [ 503.474752][T10520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.617839][T10520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.791582][T10520] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 503.913460][T10520] bond0 (unregistering): Released all slaves [ 504.264352][ T4217] usb 2-1: Using ep0 maxpacket: 32 [ 504.391414][ T4217] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 505.279061][ T4217] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 505.288286][ T4217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.297397][ T4217] usb 2-1: Product: syz [ 505.302865][ T4217] usb 2-1: Manufacturer: syz [ 505.307500][ T4217] usb 2-1: SerialNumber: syz [ 505.315689][ T4217] usb 2-1: config 0 descriptor?? [ 505.351264][ T4217] usb 2-1: can't set config #0, error -71 [ 505.365833][ T4217] usb 2-1: USB disconnect, device number 4 [ 505.438620][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 505.455289][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 505.465192][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 505.508522][ T26] audit: type=1326 audit(1750804868.304:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 505.565589][ T26] audit: type=1326 audit(1750804868.304:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 505.608513][ T26] audit: type=1326 audit(1750804868.334:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 505.633060][T10572] MPTCP: kernel_bind error, err=-99 [ 505.648903][ T26] audit: type=1326 audit(1750804868.334:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 505.650688][T10572] siw: device registration error -23 [ 505.746963][ T4217] syzkaller0 speed is unknown, defaulting to 1000 [ 505.756567][ T26] audit: type=1326 audit(1750804868.334:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 505.791255][T10557] infiniband syz1: set down [ 505.811404][T10557] infiniband syz1: added syzkaller0 [ 505.828808][ T26] audit: type=1326 audit(1750804868.334:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 505.859340][ T26] audit: type=1326 audit(1750804868.334:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 505.917628][ T26] audit: type=1326 audit(1750804868.334:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 506.423069][ T26] audit: type=1326 audit(1750804868.344:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 507.339848][ T26] audit: type=1326 audit(1750804868.344:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655c767929 code=0x7ffc0000 [ 508.382701][T10557] RDS/IB: syz1: added [ 508.400755][T10557] smc: adding ib device syz1 with port count 1 [ 508.415243][T10557] smc: ib device syz1 port 1 has pnetid [ 508.429774][ T4459] syzkaller0 speed is unknown, defaulting to 1000 [ 509.066399][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 509.179123][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1509'. [ 509.413910][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 510.511830][T10628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.017440][T10629] bond0: (slave bond_slave_0): Releasing backup interface [ 511.051042][T10629] bond0: (slave bond_slave_1): Releasing backup interface [ 511.130332][T10629] team0: Port device team_slave_0 removed [ 511.170515][T10629] team0: Port device team_slave_1 removed [ 511.185851][T10629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.198579][T10629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.234093][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 512.522498][T10643] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1521'. [ 513.565088][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 514.416626][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 514.895577][T10557] syzkaller0 speed is unknown, defaulting to 1000 [ 517.767240][T10698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.027127][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 518.027143][ T26] audit: type=1326 audit(1750804880.823:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 518.072896][ T26] audit: type=1326 audit(1750804880.823:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 518.120116][ T26] audit: type=1326 audit(1750804880.823:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 518.180617][ T26] audit: type=1326 audit(1750804880.823:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 518.244865][ T26] audit: type=1326 audit(1750804880.823:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 518.296951][ T26] audit: type=1326 audit(1750804880.833:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 518.320620][ T26] audit: type=1326 audit(1750804880.833:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 518.343696][ T26] audit: type=1326 audit(1750804880.833:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 519.474564][ T26] audit: type=1326 audit(1750804880.833:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 519.499670][ T26] audit: type=1326 audit(1750804880.833:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f643a929 code=0x7ffc0000 [ 519.654731][T10725] tipc: Cannot configure node identity twice [ 521.074988][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1547'. [ 521.131189][T10750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1552'. [ 521.296379][T10750] netlink: 'syz.1.1552': attribute type 11 has an invalid length. [ 521.838137][T10750] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1552'. [ 523.320558][T10781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1562'. [ 523.515447][T10786] tipc: Started in network mode [ 523.523179][T10786] tipc: Node identity 6, cluster identity 4711 [ 523.538449][T10786] tipc: Node number set to 6 [ 526.003905][T10816] nftables ruleset with unbound chain [ 526.206823][T10826] 9pnet: Insufficient options for proto=fd [ 527.019099][T10837] rdma_rxe: rxe_register_device failed with error -23 [ 527.028522][T10837] rdma_rxe: failed to add syzkaller0 [ 528.051968][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1579'. [ 529.294191][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 531.315127][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1593'. [ 531.553248][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 535.064517][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 535.064536][ T26] audit: type=1326 audit(1750804897.831:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.2.1603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x0 [ 535.567564][T10939] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 536.343725][T10969] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1610'. [ 536.533238][ T26] audit: type=1326 audit(1750804899.321:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 536.563164][ T26] audit: type=1326 audit(1750804899.351:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 536.607174][ T26] audit: type=1326 audit(1750804899.381:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 536.638951][ T26] audit: type=1326 audit(1750804899.381:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 536.729646][ T26] audit: type=1326 audit(1750804899.381:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 536.753298][ T26] audit: type=1326 audit(1750804899.381:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 536.784805][ T26] audit: type=1326 audit(1750804899.381:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 536.845162][ T26] audit: type=1326 audit(1750804899.381:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 536.869454][ T26] audit: type=1326 audit(1750804899.381:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 542.417469][T11033] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 542.438135][T11033] overlayfs: missing 'lowerdir' [ 543.022423][ T1347] Process accounting resumed [ 547.419330][T11092] bridge0: port 1(batadv1) entered blocking state [ 547.485999][T11092] bridge0: port 1(batadv1) entered disabled state [ 547.511072][T11092] device batadv1 entered promiscuous mode [ 547.536927][T11100] netlink: zone id is out of range [ 547.646420][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 547.729426][T11116] netlink: 'syz.5.1649': attribute type 1 has an invalid length. [ 547.822627][T11116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.882341][ T21] usb 2-1: device descriptor read/64, error -71 [ 548.272915][ T4315] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 548.283055][ T4315] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 548.511566][T11121] bond1: (slave gretap2): making interface the new active one [ 548.532209][T11121] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 548.717055][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 549.036825][T11141] syzkaller0 speed is unknown, defaulting to 1000 [ 550.253242][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.260706][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.154894][T11178] device bridge_slave_1 left promiscuous mode [ 551.174452][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.272772][T11178] device bridge_slave_0 left promiscuous mode [ 551.321404][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.495124][T11178] batman_adv: batadv0: Interface deactivated: macsec1 [ 551.542527][T11178] batman_adv: batadv0: Removing interface: macsec1 [ 551.653112][T11192] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 551.709643][T11192] 8021q: adding VLAN 0 to HW filter on device bond4 [ 552.594811][T11202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1669'. [ 552.638519][T11202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1669'. [ 553.667004][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 556.202154][T11216] syzkaller0 speed is unknown, defaulting to 1000 [ 556.561927][T11240] device lo entered promiscuous mode [ 556.580659][T11240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.395324][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 560.335091][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 560.613633][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1703'. [ 562.543015][T11293] device lo entered promiscuous mode [ 562.559469][T11293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.884301][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.886325][T11326] syzkaller0 speed is unknown, defaulting to 1000 [ 564.968504][ T5529] Bluetooth: hci5: command 0x0406 tx timeout [ 567.451072][T11372] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1715'. [ 570.769865][T11400] netlink: 'syz.6.1725': attribute type 12 has an invalid length. [ 571.171588][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 571.171603][ T26] audit: type=1326 audit(1750804933.957:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.156552][ T26] audit: type=1326 audit(1750804933.957:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.179719][ T26] audit: type=1326 audit(1750804933.957:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.205963][ T26] audit: type=1326 audit(1750804933.957:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.231508][ T26] audit: type=1326 audit(1750804933.957:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.254859][ T26] audit: type=1326 audit(1750804933.957:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.278106][ T26] audit: type=1326 audit(1750804933.957:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.301051][ T26] audit: type=1326 audit(1750804933.967:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.329490][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1733'. [ 572.338574][ T26] audit: type=1326 audit(1750804933.967:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.361775][ T26] audit: type=1326 audit(1750804933.967:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f39b1965929 code=0x7ffc0000 [ 572.412554][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1733'. [ 573.579865][T11440] netlink: 'syz.1.1739': attribute type 3 has an invalid length. [ 574.546529][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 574.663701][T11449] netlink: 'syz.6.1741': attribute type 1 has an invalid length. [ 574.784220][T11449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.833350][T11456] bond1: (slave gretap1): making interface the new active one [ 574.914951][T11456] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 574.925976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 574.935610][T11461] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 574.950078][T11461] netlink: 'syz.3.1746': attribute type 4 has an invalid length. [ 574.958069][T11461] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1746'. [ 575.090748][T11463] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 575.675065][T11463] netlink: 'syz.3.1746': attribute type 4 has an invalid length. [ 575.699685][T11463] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1746'. [ 575.977645][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 582.415696][T11510] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.442043][T11510] team0: Failed to send port change of device macvlan2 via netlink (err -105) [ 582.479710][T11510] team0: Failed to send options change via netlink (err -105) [ 582.499933][T11510] team0: Port device macvlan2 added [ 583.144504][T11530] overlayfs: failed to clone lowerpath [ 583.646489][T11531] blk_update_request: I/O error, dev loop13, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 585.123369][T11531] isofs_fill_super: bread failed, dev=loop13, iso_blknum=16, block=32 [ 585.242836][T11535] syzkaller0 speed is unknown, defaulting to 1000 [ 588.578831][T11561] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1773'. [ 588.621272][T11561] tipc: Started in network mode [ 588.637709][T11561] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 588.682654][T11561] tipc: Enabled bearer , priority 10 [ 588.777230][T11565] tipc: Disabling bearer [ 589.452579][ T5532] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 589.464379][ T5532] Bluetooth: hci3: Injecting HCI hardware error event [ 589.474560][ T4183] Bluetooth: hci3: hardware error 0x00 [ 592.275694][T11597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.348924][T11597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.954717][T11597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.991949][T11597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.975766][T11638] xt_TPROXY: Can be used only with -p tcp or -p udp [ 596.010232][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1796'. [ 596.122043][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1796'. [ 597.234771][T11670] overlayfs: failed to clone upperpath [ 597.264867][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 597.264882][ T26] audit: type=1804 audit(1750804960.054:216): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1803" name="file1" dev="ramfs" ino=56664 res=1 errno=0 [ 597.804442][T11685] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 598.728255][T11685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.806630][T11689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.832873][T11689] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 598.877935][T11689] bond2: (slave vti0): Error -95 calling set_mac_address [ 606.339026][T11739] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1824'. [ 606.357779][T11739] tipc: Enabling of bearer rejected, failed to enable media [ 607.708749][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 608.878872][T11775] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 608.952444][T11775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.828191][T11779] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.871080][T11779] bond5: (slave vti1): The slave device specified does not support setting the MAC address [ 609.894692][T11784] 9pnet: p9_client_clunk (11784): Trying to clunk with invalid fid [ 609.909098][T11779] bond5: (slave vti1): Error -95 calling set_mac_address [ 609.916622][T11784] CPU: 0 PID: 11784 Comm: syz.1.1838 Not tainted 5.15.185-syzkaller #0 [ 609.924896][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.934991][T11784] Call Trace: [ 609.938296][T11784] [ 609.941243][T11784] dump_stack_lvl+0x168/0x230 [ 609.945958][T11784] ? show_regs_print_info+0x20/0x20 [ 609.951185][T11784] ? load_image+0x3b0/0x3b0 [ 609.955717][T11784] ? v9fs_fid_find+0x2d1/0x320 [ 609.960529][T11784] p9_client_clunk+0x2b3/0x380 [ 609.965334][T11784] v9fs_statfs+0x192/0x350 [ 609.969781][T11784] ? v9fs_drop_inode+0x130/0x130 [ 609.974762][T11784] vfs_statfs+0x13d/0x2c0 [ 609.979126][T11784] ovl_get_lowerstack+0x1fd/0x1bf0 [ 609.984275][T11784] ? ovl_get_upper+0x580/0x580 [ 609.989076][T11784] ? ovl_get_workdir+0x11a0/0x11a0 [ 609.994248][T11784] ovl_fill_super+0x174d/0x2ae0 [ 609.999162][T11784] ? ovl_mount+0x30/0x30 [ 610.003428][T11784] ? preempt_count_add+0x8d/0x190 [ 610.008501][T11784] ? sget+0x427/0x440 [ 610.012518][T11784] ? free_anon_bdev+0x20/0x20 [ 610.017222][T11784] ? ovl_mount+0x30/0x30 [ 610.021496][T11784] mount_nodev+0x52/0xe0 [ 610.025785][T11784] legacy_get_tree+0xe6/0x180 [ 610.030487][T11784] ? virtio_fs_zero_page_range+0x120/0x120 [ 610.036318][T11784] vfs_get_tree+0x88/0x270 [ 610.040767][T11784] do_new_mount+0x24a/0xa40 [ 610.045310][T11784] __se_sys_mount+0x2d6/0x3c0 [ 610.050021][T11784] ? __x64_sys_mount+0xc0/0xc0 [ 610.054821][T11784] ? lockdep_hardirqs_on+0x94/0x140 [ 610.060046][T11784] ? __x64_sys_mount+0x1c/0xc0 [ 610.064836][T11784] do_syscall_64+0x4c/0xa0 [ 610.069284][T11784] ? clear_bhb_loop+0x30/0x80 [ 610.073982][T11784] ? clear_bhb_loop+0x30/0x80 [ 610.078688][T11784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 610.084624][T11784] RIP: 0033:0x7faacd5da929 [ 610.089067][T11784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.108710][T11784] RSP: 002b:00007faacb442038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 610.117162][T11784] RAX: ffffffffffffffda RBX: 00007faacd801fa0 RCX: 00007faacd5da929 [ 610.125169][T11784] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 610.133172][T11784] RBP: 00007faacd65cb39 R08: 0000200000000400 R09: 0000000000000000 [ 610.141171][T11784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.149170][T11784] R13: 0000000000000000 R14: 00007faacd801fa0 R15: 00007fff1dc429a8 [ 610.157191][T11784] [ 610.224216][T11784] overlayfs: statfs failed on './file0' [ 610.995972][T11796] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 611.122871][T11796] team0: Port device dummy0 added [ 611.128981][T11802] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 611.145298][T11802] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 611.281454][T11802] team0: Failed to send options change via netlink (err -105) [ 611.298319][T11802] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 611.349331][T11802] team0: Port device dummy0 removed [ 612.097400][T11804] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 612.355857][T11798] netlink: 'syz.6.1843': attribute type 24 has an invalid length. [ 613.435835][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1854'. [ 614.434884][T11843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.223516][T11860] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 617.300381][T11866] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 620.478212][T11903] netlink: 'syz.1.1871': attribute type 10 has an invalid length. [ 622.580875][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.619021][T11903] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 622.932068][T11894] bond0: (slave batadv0): Releasing backup interface [ 624.983434][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.353613][T11952] ptrace attach of "./syz-executor exec"[7180] was attempted by " [ 626.689176][T11970] lo speed is unknown, defaulting to 1000 [ 626.730505][T11974] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 626.985071][ T26] audit: type=1326 audit(1750804989.750:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.032887][ T26] audit: type=1326 audit(1750804989.750:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.070389][ T26] audit: type=1326 audit(1750804989.750:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.094194][ T26] audit: type=1326 audit(1750804989.750:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.124208][ T26] audit: type=1326 audit(1750804989.750:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.155497][ T26] audit: type=1326 audit(1750804989.750:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.298208][ T26] audit: type=1326 audit(1750804989.750:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.773905][ T26] audit: type=1326 audit(1750804989.750:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.805030][ T26] audit: type=1326 audit(1750804989.750:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.870330][ T26] audit: type=1326 audit(1750804989.750:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3617b3a929 code=0x7ffc0000 [ 627.914820][T11970] lo speed is unknown, defaulting to 1000 [ 627.947571][T11970] lo speed is unknown, defaulting to 1000 [ 627.962798][T11993] tipc: Enabling of bearer rejected, failed to enable media [ 627.977800][T11993] tipc: Enabling of bearer rejected, failed to enable media [ 627.977951][T11970] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 628.040919][T11970] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 628.099198][T11970] lo speed is unknown, defaulting to 1000 [ 628.113045][T11970] lo speed is unknown, defaulting to 1000 [ 628.122533][T11970] lo speed is unknown, defaulting to 1000 [ 628.130160][T11970] lo speed is unknown, defaulting to 1000 [ 628.151108][T12000] netlink: 41326 bytes leftover after parsing attributes in process `syz.6.1894'. [ 628.170949][T11970] lo speed is unknown, defaulting to 1000 [ 628.186344][T11970] lo speed is unknown, defaulting to 1000 [ 628.196129][T11970] lo speed is unknown, defaulting to 1000 [ 628.297321][T12003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.445582][T12003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.606477][T12002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.512178][T12023] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 629.544586][T12023] netlink: 'syz.6.1901': attribute type 16 has an invalid length. [ 629.572722][T12023] netlink: 'syz.6.1901': attribute type 3 has an invalid length. [ 629.794161][T12023] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1901'. [ 631.479587][T12036] QAT: Device 7 not found [ 631.831720][T12044] cgroup: Unknown subsys name 'obj_role' [ 635.319643][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 635.319659][ T26] audit: type=1800 audit(1750804998.080:275): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1915" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 637.646590][T12096] device syz_tun left promiscuous mode [ 637.663032][T12096] bridge0: port 1(syz_tun) entered disabled state [ 638.414393][T12104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1922'. [ 638.752611][T12113] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1925'. [ 638.796389][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1925'. [ 639.041289][ T26] audit: type=1800 audit(1750805001.819:276): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1929" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 639.968713][T12137] netlink: 'syz.5.1933': attribute type 10 has an invalid length. [ 640.974080][T12145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.987121][T12145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.027641][T12145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.066823][T12145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.165451][T12156] 9pnet: Insufficient options for proto=fd [ 643.475846][T12196] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 646.690826][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1960'. [ 646.783994][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1960'. [ 649.655237][T12256] netlink: 'syz.2.1969': attribute type 32 has an invalid length. [ 649.664316][T12254] mip6: mip6_rthdr_init_state: state's mode is not 2: 4 [ 649.738046][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1967'. [ 649.931846][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 650.026519][T12258] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 651.129919][T12272] syz.2.1973[12272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.130024][T12272] syz.2.1973[12272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.123983][T12308] xt_connbytes: Forcing CT accounting to be enabled [ 655.142653][T12308] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 655.155007][T12308] xt_bpf: check failed: parse error [ 657.828885][T12329] syz.5.1990[12329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 657.828985][T12329] syz.5.1990[12329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 658.043489][T12335] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 658.145163][T12338] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 658.413413][T12338] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 659.225006][T12338] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 659.347608][T12338] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 659.379613][T12338] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 659.438131][T12338] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 659.474928][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1994'. [ 659.566735][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1995'. [ 659.674722][T12356] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 659.708394][T12360] device macvlan0 left promiscuous mode [ 659.723284][T12356] kvm: pic: single mode not supported [ 659.723749][T12356] kvm: pic: non byte read [ 659.746034][T12360] netlink: 'syz.5.1995': attribute type 1 has an invalid length. [ 659.763880][T12356] kvm: pic: level sensitive irq not supported [ 659.763990][T12360] netlink: 'syz.5.1995': attribute type 2 has an invalid length. [ 659.764072][T12356] kvm: pic: non byte read [ 659.826910][T12356] kvm: pic: level sensitive irq not supported [ 659.826992][T12356] kvm: pic: non byte read [ 659.865427][T12356] kvm: pic: level sensitive irq not supported [ 659.866179][T12356] kvm: pic: non byte read [ 664.919817][T12413] netlink: 'syz.2.2012': attribute type 32 has an invalid length. [ 666.935112][T12419] netlink: 'syz.6.2014': attribute type 10 has an invalid length. [ 666.958082][T12419] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2014'. [ 666.988900][T12419] netlink: 'syz.6.2014': attribute type 10 has an invalid length. [ 667.012928][T12419] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2014'. [ 670.807528][T12483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.199878][T12531] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 674.208092][T12511] syzkaller0 speed is unknown, defaulting to 1000 [ 674.212618][T12531] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 674.229631][T12531] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 674.491114][T12540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2049'. [ 674.937325][T12531] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 674.982434][T12531] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 674.990812][T12531] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 674.999145][T12531] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 675.082401][T12531] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 675.160933][T12545] netlink: 'syz.6.2054': attribute type 4 has an invalid length. [ 675.288799][T12511] lo speed is unknown, defaulting to 1000 [ 675.355817][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2057'. [ 675.572892][T12511] chnl_net:caif_netlink_parms(): no params data found [ 675.686458][ T5532] Bluetooth: hci4: command 0x0409 tx timeout [ 676.547332][T12511] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.570788][T12511] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.610945][T12511] device bridge_slave_0 entered promiscuous mode [ 676.642148][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2061'. [ 676.748489][T12511] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.782132][T12511] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.814743][T12511] device bridge_slave_1 entered promiscuous mode [ 678.217412][T12511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.219846][T12511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.312681][T12511] team0: Port device team_slave_0 added [ 678.315334][T12511] team0: Port device team_slave_1 added [ 678.353378][T12511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.353397][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.353424][T12511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.355664][T12511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.355714][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.355741][T12511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.400893][T12511] device hsr_slave_0 entered promiscuous mode [ 678.402096][T12511] device hsr_slave_1 entered promiscuous mode [ 678.402896][T12511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.403065][T12511] Cannot create hsr debugfs directory [ 680.062721][ T5529] Bluetooth: hci4: command 0x041b tx timeout [ 680.134513][T12595] device batadv1 left promiscuous mode [ 680.161783][T12595] bridge0: port 1(batadv1) entered disabled state [ 680.959558][T12595] bond1: (slave gretap1): Releasing active interface [ 681.041227][T12598] team0: Mode changed to "loadbalance" [ 681.068748][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 681.920216][T12511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.949820][T11770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.973847][T11770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 682.038634][T12511] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.065277][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 682.085201][ T5532] Bluetooth: hci4: command 0x040f tx timeout [ 682.086159][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 682.120772][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.127945][T11942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.161547][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 682.363111][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.383674][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 682.393250][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 682.401854][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.408990][ T7977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.418300][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 682.435178][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 682.451408][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 682.467794][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 682.532736][T12632] xt_hashlimit: Unknown mode mask 258, kernel too old? [ 682.725259][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 683.199626][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 683.234530][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.263910][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 683.302921][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.476207][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 683.918320][T11942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 684.104506][T12511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 684.318183][ T5532] Bluetooth: hci4: command 0x0419 tx timeout [ 685.407893][T12511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.472631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.487666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.780226][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.567706][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 686.604731][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 686.623447][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 686.654587][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 686.714774][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 686.722489][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 686.762232][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 686.806611][T12681] bond1: (slave gretap1): Releasing active interface [ 686.854786][T12681] bond2: (slave ip6gre1): Releasing backup interface [ 686.862126][T12681] device ip6gre1 left promiscuous mode [ 686.895983][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 687.025912][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 687.045840][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 687.131084][T12511] device veth0_vlan entered promiscuous mode [ 687.145087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 687.159679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 687.172764][T12511] device veth1_vlan entered promiscuous mode [ 687.928508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 687.945482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 687.965003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 688.131374][T12697] netlink: 'syz.3.2093': attribute type 4 has an invalid length. [ 688.151141][T12697] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2093'. [ 688.187870][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 688.198373][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 688.210623][T12511] device veth0_macvtap entered promiscuous mode [ 688.956725][T12511] device veth1_macvtap entered promiscuous mode [ 688.970884][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 689.155914][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 689.188028][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.352077][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.445412][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.223426][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.396651][T12511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.410602][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.421326][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.431205][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.442622][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.454505][T12511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.476036][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.533971][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.565014][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 692.208893][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 694.036437][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.052280][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.066837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 695.007100][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.016325][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.042126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 698.377040][T12797] xt_hashlimit: max too large, truncated to 1048576 [ 698.552640][T12791] syzkaller0 speed is unknown, defaulting to 1000 [ 698.987598][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2121'. [ 701.016344][T12791] lo speed is unknown, defaulting to 1000 [ 701.069208][T12827] delete_channel: no stack [ 703.715758][ T26] audit: type=1804 audit(1750807644.480:277): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2138" name="/newroot/7/file1" dev="fuse" ino=1 res=1 errno=0 [ 703.741657][ T26] audit: type=1800 audit(1750807644.480:278): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2138" name="/" dev="fuse" ino=1 res=0 errno=0 [ 703.762609][ T26] audit: type=1804 audit(1750807644.490:279): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2138" name="/newroot/7/file1" dev="fuse" ino=1 res=1 errno=0 [ 703.783537][ T26] audit: type=1800 audit(1750807644.490:280): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2138" name="/" dev="fuse" ino=1 res=0 errno=0 [ 704.622551][T12863] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 706.605971][T12890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 706.660676][T12890] team0: Port device team_slave_0 removed [ 706.687419][T12890] team0: Port device team_slave_1 removed [ 707.503045][T12890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.535153][T12890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.605052][T12890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.646857][T12890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.569773][T12890] team0: Port device macvlan2 removed [ 708.609960][T12890] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 708.790497][T12895] team0: Mode changed to "loadbalance" [ 709.069450][ T1347] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 710.074534][ T1347] usb 2-1: Using ep0 maxpacket: 16 [ 711.678408][ T1347] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.709437][ T1347] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.161661][ T1347] usb 2-1: string descriptor 0 read error: -71 [ 713.183881][ T1347] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.221561][ T1347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.310977][ T1347] usb 2-1: can't set config #1, error -71 [ 713.375328][ T1347] usb 2-1: USB disconnect, device number 7 [ 727.157814][T13093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2200'. [ 727.623876][T13088] netlink: zone id is out of range [ 727.652988][T13088] netlink: zone id is out of range [ 728.502470][T13088] netlink: zone id is out of range [ 728.578135][T13088] netlink: set zone limit has 4 unknown bytes [ 731.082442][T13120] tipc: Cannot configure node identity twice [ 836.099252][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 836.106280][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11770/1:b..l [ 836.115247][ C1] (detected by 1, t=10502 jiffies, g=48885, q=172) [ 836.121857][ C1] task:kworker/u4:15 state:R running task stack:25760 pid:11770 ppid: 2 flags:0x00004000 [ 836.135137][ C1] Workqueue: bat_events batadv_nc_worker [ 836.140836][ C1] Call Trace: [ 836.144139][ C1] [ 836.147106][ C1] __schedule+0x11b8/0x43b0 [ 836.151643][ C1] ? mark_lock+0x94/0x320 [ 836.156094][ C1] ? mark_lock+0x94/0x320 [ 836.160545][ C1] ? release_firmware_map_entry+0x190/0x190 [ 836.166483][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 836.172500][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 836.177913][ C1] preempt_schedule_irq+0xb1/0x150 [ 836.183052][ C1] ? __cond_resched+0xb0/0xb0 [ 836.187760][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 836.193600][ C1] irqentry_exit+0x63/0x70 [ 836.198043][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 836.203529][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 836.208841][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 836.229098][ C1] RSP: 0018:ffffc900024d7a40 EFLAGS: 00000206 [ 836.235216][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6b34c26ebefe5f00 [ 836.243219][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2460 RDI: ffffffff8a59a740 [ 836.251233][ C1] RBP: ffffc900024d7b58 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 836.259321][ C1] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffffffff8c11bfa0 [ 836.267325][ C1] R13: 1ffff9200049af54 R14: 0000000000000246 R15: dffffc0000000000 [ 836.275354][ C1] ? rcu_lock_release+0x5/0x20 [ 836.280154][ C1] ? read_lock_is_recursive+0x10/0x10 [ 836.285561][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 836.290792][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 836.296115][ C1] ? batadv_nc_purge_paths+0x316/0x3b0 [ 836.301604][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 836.308134][ C1] ? batadv_nc_process_nc_paths+0x350/0x350 [ 836.314334][ C1] rcu_lock_acquire+0x2a/0x30 [ 836.319036][ C1] ? rcu_lock_acquire+0x5/0x30 [ 836.323824][ C1] batadv_nc_process_nc_paths+0xb2/0x350 [ 836.329495][ C1] batadv_nc_worker+0x3e5/0x5c0 [ 836.334377][ C1] process_one_work+0x863/0x1000 [ 836.339356][ C1] ? worker_detach_from_pool+0x240/0x240 [ 836.345014][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 836.350344][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 836.355418][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 836.360836][ C1] ? wq_worker_running+0x97/0x170 [ 836.365896][ C1] worker_thread+0xaa8/0x12a0 [ 836.370601][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 836.376528][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 836.381763][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 836.387792][ C1] kthread+0x436/0x520 [ 836.391888][ C1] ? rcu_lock_release+0x20/0x20 [ 836.396762][ C1] ? kthread_blkcg+0xd0/0xd0 [ 836.401378][ C1] ret_from_fork+0x1f/0x30 [ 836.405839][ C1] [ 836.408878][ C1] rcu: rcu_preempt kthread starved for 10361 jiffies! g48885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 836.420094][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 836.430079][ C1] rcu: RCU grace-period kthread stack dump: [ 836.435986][ C1] task:rcu_preempt state:R running task stack:27584 pid: 15 ppid: 2 flags:0x00004000 [ 836.446896][ C1] Call Trace: [ 836.450222][ C1] [ 836.453176][ C1] __schedule+0x11b8/0x43b0 [ 836.457715][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 836.463122][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 836.469137][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 836.475223][ C1] ? _raw_spin_unlock+0x40/0x40 [ 836.480202][ C1] ? rcu_is_watching+0x11/0xa0 [ 836.485001][ C1] ? release_firmware_map_entry+0x190/0x190 [ 836.490939][ C1] schedule+0x11b/0x1e0 [ 836.495128][ C1] schedule_timeout+0x15c/0x280 [ 836.500012][ C1] ? console_conditional_schedule+0x40/0x40 [ 836.506020][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 836.511940][ C1] ? update_process_times+0x200/0x200 [ 836.517347][ C1] ? prepare_to_swait_event+0x331/0x350 [ 836.522929][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 836.527809][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 836.533034][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 836.539215][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 836.544006][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 836.549231][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 836.554457][ C1] rcu_gp_kthread+0x98/0x350 [ 836.559171][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 836.564308][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 836.570272][ C1] ? __kthread_parkme+0x157/0x1b0 [ 836.575331][ C1] kthread+0x436/0x520 [ 836.579437][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 836.584573][ C1] ? kthread_blkcg+0xd0/0xd0 [ 836.589201][ C1] ret_from_fork+0x1f/0x30 [ 836.594068][ C1] [ 836.597115][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 836.603649][ C1] Sending NMI from CPU 1 to CPUs 0: [ 836.608903][ C0] NMI backtrace for cpu 0 [ 836.608914][ C0] CPU: 0 PID: 13141 Comm: syz.1.2213 Not tainted 5.15.185-syzkaller #0 [ 836.608932][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 836.608941][ C0] RIP: 0010:lock_release+0x13c/0x870 [ 836.608965][ C0] Code: c0 0f 85 28 05 00 00 41 83 3e 00 0f 85 58 04 00 00 48 89 5c 24 18 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 <48> 8b 84 24 a0 00 00 00 48 89 44 24 50 fa 48 c7 c7 c0 1f 0b 8a e8 [ 836.608980][ C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00000046 [ 836.608994][ C0] RAX: 0000000000000000 RBX: ffff888028718000 RCX: 17fa3a5545f80d00 [ 836.609006][ C0] RDX: 0000000000000000 RSI: ffffffff8a59a720 RDI: ffffffff8a59a6e0 [ 836.609017][ C0] RBP: ffffc90000007c10 R08: dffffc0000000000 R09: fffffbfff1ad157e [ 836.609030][ C0] R10: fffffbfff1ad157e R11: 1ffffffff1ad157d R12: ffff888024708940 [ 836.609042][ C0] R13: dffffc0000000000 R14: ffff888028718aec R15: 1ffff92000000f6c [ 836.609054][ C0] FS: 00007f81e29626c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 836.609069][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.609080][ C0] CR2: 00007f3617d2a2d8 CR3: 000000007aa30000 CR4: 00000000003506f0 [ 836.609094][ C0] DR0: 0000000000000009 DR1: 0000000000000047 DR2: 0000000000000004 [ 836.609103][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 836.609113][ C0] Call Trace: [ 836.609120][ C0] [ 836.609130][ C0] ? rcu_lock_release+0x5/0x20 [ 836.609156][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 836.609173][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 836.609193][ C0] ? _raw_spin_lock+0x40/0x40 [ 836.609216][ C0] __lock_task_sighand+0x272/0x290 [ 836.609237][ C0] send_sigqueue+0x177/0x620 [ 836.609256][ C0] posix_timer_fn+0x16a/0x3d0 [ 836.609278][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 836.609301][ C0] ? common_timer_wait_running+0x10/0x10 [ 836.609324][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 836.609342][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 836.609363][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 836.609394][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 836.609413][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 836.609433][ C0] [ 836.609437][ C0] [ 836.609442][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.609459][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 836.609478][ C0] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 9a b1 f7 48 89 df e8 56 6f b2 f7 e8 a1 13 d3 f7 fb bf 01 00 00 00 86 93 a6 f7 65 8b 05 27 a3 57 76 85 c0 74 02 5b c3 e8 d4 ad 55 [ 836.609490][ C0] RSP: 0018:ffffc9000459fbc0 EFLAGS: 00000282 [ 836.609503][ C0] RAX: 17fa3a5545f80d00 RBX: ffff888024708940 RCX: 17fa3a5545f80d00 [ 836.609515][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 [ 836.609526][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10048e1129 [ 836.609537][ C0] R10: ffffed10048e1129 R11: 1ffff110048e1128 R12: ffff888024708940 [ 836.609549][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 836.609570][ C0] get_signal+0x11d6/0x12c0 [ 836.609597][ C0] arch_do_signal_or_restart+0xc1/0x1300 [ 836.609616][ C0] ? _copy_from_user+0x111/0x170 [ 836.609636][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 836.609658][ C0] ? load_gs_index+0x120/0x120 [ 836.609677][ C0] ? get_sigframe_size+0x10/0x10 [ 836.609706][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 836.609727][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 836.609746][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 836.609766][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 836.609785][ C0] do_syscall_64+0x58/0xa0 [ 836.609809][ C0] ? clear_bhb_loop+0x30/0x80 [ 836.609823][ C0] ? clear_bhb_loop+0x30/0x80 [ 836.609839][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 836.609858][ C0] RIP: 0033:0x7f81e4b3c927 [ 836.609873][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 836.609886][ C0] RSP: 002b:00007f81e29620e8 EFLAGS: 00000246 [ 836.609898][ C0] RAX: 00000000000000ca RBX: 00007f81e4d64168 RCX: 00007f81e4b3c929 [ 836.609909][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81e4d64168 [ 836.609919][ C0] RBP: 00007f81e4d64160 R08: 0000000000000000 R09: 0000000000000000 [ 836.609929][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81e4d6416c [ 836.609939][ C0] R13: 0000000000000000 R14: 00007fffa94d5000 R15: 00007fffa94d50e8 [ 836.609958][ C0]