last executing test programs: 16m47.785068615s ago: executing program 32 (id=467): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r3, &(0x7f0000000180)=""/22, 0x16, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 15m5.798992202s ago: executing program 5 (id=615): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 14m57.900329217s ago: executing program 5 (id=627): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 14m54.608903773s ago: executing program 5 (id=630): socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) clock_adjtime(0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r8, 0x0, 0x0) 14m51.828106805s ago: executing program 5 (id=632): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) syz_emit_ethernet(0x33, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@snap={0xab, 0x0, '`!', "0856bf", 0x88f7, "5b8e11bdec503866f2300152c42aa44fc11af855bde6f08a"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x7, 0x1, 0x6, 0x800100000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) 14m47.980153908s ago: executing program 5 (id=635): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@utf8}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@namecase}, {@discard}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2204000, &(0x7f0000000080)={[{@nobh}, {@errors_remount}, {@delalloc}]}, 0x1, 0x575, &(0x7f0000000d40)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$P9_ROPEN(r3, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18) prctl$PR_CAPBSET_DROP(0x18, 0x5) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) 14m32.877297994s ago: executing program 33 (id=635): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@utf8}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@namecase}, {@discard}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2204000, &(0x7f0000000080)={[{@nobh}, {@errors_remount}, {@delalloc}]}, 0x1, 0x575, &(0x7f0000000d40)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$P9_ROPEN(r3, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18) prctl$PR_CAPBSET_DROP(0x18, 0x5) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) 13m17.120043937s ago: executing program 1 (id=751): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x11, &(0x7f0000000280)=ANY=[], 0x1, 0x323, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) clock_settime(0xfffffffb, 0x0) r3 = semget$private(0x0, 0x3, 0x6) semop(r3, &(0x7f00000002c0), 0x2aaaab90) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') readv(r4, &(0x7f0000000240)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$IPC_RMID(r3, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc2a, &(0x7f0000001940)="$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") setrlimit(0x1, 0x0) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 13m9.67410676s ago: executing program 1 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) semop(0x0, &(0x7f0000000200)=[{0x3, 0x10, 0x800}], 0x1) semget(0x3, 0x4, 0x39c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/161}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000280)={0x7, 0x1b, 0x2}, 0x7) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x80800) splice(r4, 0x0, r7, 0x0, 0x20000000000002, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$eJzs289rHGUfAPDvTH60ffsjefv2VVurRosQFJMmrdqDBxUFkYqCHiqeYrItodtGkii2FBtF6kWQgp6LR9G/wJsoop4Er3rxJIWivbT1IJGZnU02293GJptszH4+MNnnmXlm5vnu/HrmeTYBdKyB7E8SsSMifo6Ivkp2aYGBysf1q+fGb1w9N57E/PzLvyd5uWtXz41Xi1bX215kBtOI9P2k2MlSM2fOnhwrl0vTRX549tQbwzNnzj7y1qmxE6UTpdOjR44cPjTy+GOjj9atmSQriTOL69q+d6b2733u1YsvjB+7+Pr3X2Qb2lEsr42jVQaywP+Yz9Uve7DVO2uznTXppLuNFeG2dEVEdrh68uu/L7pi8eD1xbPvtbVywJrKnk1bmi+emwc2sSTaXQOgPaoP+uz9tzqtU9NjQ7jyVOUFKIv7ejFVlnRHWpTpqXu/baWBiDg29+elbIo16ocAAKj14fgnR3sj5vtufP581vboW1iSxh3556/5313FGEp/RPw3InZHxP8iYk9E/D8iL3tnRNy1yvrc3P5JL69yk7eUtf+eKMa2lrb/qq2/6O8qcjvz+HuS45Pl0sHiOxmMni1ZfuQW+/jqmZ8+arastv2XTdn+j6VxabFEerm7roNuYmx2LG+UtsCVdyP2dTeKP1kYCUgiYm9E7Lu9Te+qJiYf+mx/s0IN4y/awstqwTjT/KdZeHNZ/HNRF39VUjs+OXnT+OTw1iiXDg5Xz4qb/fDjhZea7b9p/Os0hnalVPmsOf71RfqTxS+jND1z+/u48MsHTd9plj/+Dc//tDd5JR9n7i3mvT02Ozs9EtGbHM3zS+aP9i6sW8kvls/O/8EDja//3cU6WfB3R0R2Et8TEfc+GXFfUff7I+KBiDhwi/i/e7r5smr8ka7g/G+BLP6Jhve/hfM/O/6L4/UrSHSd/PbLZvv/Z8f/cJ4aLObk979lNKpOdknVV3A13x0AAAD8W6T5b+CTdGghnaZDQ5Xf8O+J/6TlqZnZh49PvXl6ovJb+f7oSas9XX1Ff2h5slwaSeaKLVb6R0eLvuJqf+mhot/4465teX5ofKo80ebYodNtb3L9Z37ranftgDW2reHcmjETYBOrH2tOl2bPvxhuBrBZ+X9t6FxNrv/q7HQ96wKsr5U+/19rcT2A9dfo+j9flzcWAJuT93/oXK5/6FDp1+2uAdBGnv/QkVbzf/1rmNg6PfPNxq7hGiY2dMgR1US6TOG/5jdKnTsssSVasZ0235gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa5O8AAAD///B74xQ=") r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x28000, 0x1cd) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000040)={0x8, 0x2, 0x400004, 0x8, 0x6}) 13m8.724582285s ago: executing program 1 (id=763): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 13m7.302153632s ago: executing program 1 (id=765): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) r1 = socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000) 13m5.108227977s ago: executing program 1 (id=767): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x81000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f0000000040)={0x0, 0xca21, 0x10000, 0x1, 0x212}, &(0x7f0000000180), &(0x7f0000ff4000), 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000001380)=0x9, 0x4) r8 = dup(r0) ioctl$KDSETKEYCODE(r8, 0x4b4d, &(0x7f0000000040)={0xaaa, 0x2}) ioctl$KVM_PPC_ALLOCATE_HTAB(r8, 0xc004aea7, &(0x7f0000000040)=0xd833) 12m58.861369393s ago: executing program 1 (id=773): mkdirat(0xffffffffffffff9c, 0x0, 0x19) r0 = io_uring_setup(0x63c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008880) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@xino_auto}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x32, 0x7, 0x2, 0x81, 0xff, 0x20, 0x57, 0x81, 0x6, 0x0, 0x3, 0x1, 0x8, 0x5b, 0xa, 0xfffffffd, [0x89, 0xffff]}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12m43.386221767s ago: executing program 34 (id=773): mkdirat(0xffffffffffffff9c, 0x0, 0x19) r0 = io_uring_setup(0x63c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008880) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@xino_auto}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x32, 0x7, 0x2, 0x81, 0xff, 0x20, 0x57, 0x81, 0x6, 0x0, 0x3, 0x1, 0x8, 0x5b, 0xa, 0xfffffffd, [0x89, 0xffff]}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 12m34.386625533s ago: executing program 3 (id=801): syz_io_uring_setup(0x77cf, &(0x7f00000000c0)={0x0, 0x55ee, 0x1, 0x2, 0x193}, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x2, 0x1d5}, 0x0, 0x0, &(0x7f0000000180)=0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x4, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x101}) write(r2, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, r1, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc2c45513, &(0x7f0000000040)={0xb, 0x3, 0x1, 0x5, '\x00', 0x6}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b41c842, 0x6, 0x1bc4, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, 0x0) r4 = openat$vsock(0xffffff9c, 0x0, 0x4000, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1c00, 0xffffffffc24b0432, 0x5, 0x0, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8}}, 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) 12m32.13595761s ago: executing program 3 (id=803): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000014000002000a402200000000bc6221b5654925a2ff4320134b503ebe00000000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x40}}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000280), 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0xffffbffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 12m28.726590122s ago: executing program 3 (id=806): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(0x0, r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 12m25.465962577s ago: executing program 3 (id=809): setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x2}, 0xfd}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 12m24.300150802s ago: executing program 3 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r4, 0x2, {0x1, 0x1, 0x5}, 0xff}, 0x18) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x4, {0x0, 0x1, 0x6}, 0x2}, 0x18) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x1, {0x0, 0x1, 0x2}, 0xfd}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 12m23.186789485s ago: executing program 3 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fsmount(0xffffffffffffffff, 0x0, 0xe2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) r4 = io_uring_setup(0x102a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x8000, 0x1, 0xd3}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x6000, '\x00', 0xfffffffffffffffe, 0xfffffffffffffffe, 0x200, 0x0, {}, {0x5, 0x402}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRES32=0x0], 0x239) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010100, @multicast2, 0x1, "822fae6e6f6a5c07871a935c160087ab7d7cb2cd309844201641ee569e68692c", 0x3ff, 0x5, 0x8, 0x3}, 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d300000000000000800"], 0x34}}, 0x14) 12m7.224721962s ago: executing program 35 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fsmount(0xffffffffffffffff, 0x0, 0xe2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) r4 = io_uring_setup(0x102a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x8000, 0x1, 0xd3}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x6000, '\x00', 0xfffffffffffffffe, 0xfffffffffffffffe, 0x200, 0x0, {}, {0x5, 0x402}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRES32=0x0], 0x239) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010100, @multicast2, 0x1, "822fae6e6f6a5c07871a935c160087ab7d7cb2cd309844201641ee569e68692c", 0x3ff, 0x5, 0x8, 0x3}, 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d300000000000000800"], 0x34}}, 0x14) 6m30.798240398s ago: executing program 4 (id=1223): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x180000) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd52, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 6m22.414975305s ago: executing program 4 (id=1228): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB=' '], 0x16) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 6m21.023932621s ago: executing program 4 (id=1231): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x34, 0x0}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) mount(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) setns(0xc9, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}, 0x90}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fanotify_init(0xf00, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) 6m17.592251394s ago: executing program 4 (id=1237): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, 0x0) lchown(&(0x7f0000000040)='.\x02\x00', r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000200)=""/48}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x22, 0x4a, 0x0, 0x2}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x800) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000840)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xaf3, &(0x7f0000002400)="$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") mknod(0x0, 0x1000, 0x42) 6m13.537045966s ago: executing program 4 (id=1243): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r1, 0xfffffffffffffffd, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x83) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x100) listxattr(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r0, &(0x7f00000001c0), 0x0) 6m10.111615478s ago: executing program 4 (id=1245): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 5m54.88138102s ago: executing program 36 (id=1245): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 3m32.108100184s ago: executing program 7 (id=1429): socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}, 0x1, 0x7}, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) socket(0x1000000000000010, 0x4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0) 3m28.936347194s ago: executing program 7 (id=1433): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) signalfd4(r1, &(0x7f0000000c00)={[0x2]}, 0x8, 0xc00) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)=ANY=[], 0x44}}, 0x4) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 3m23.996307119s ago: executing program 7 (id=1440): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900"], 0x16) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 3m21.888343458s ago: executing program 7 (id=1443): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x5411, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000400)="0000e00698d9285bbd4fcac9a153f97b2a5ea7860f352af9abbee15360e012f2dc8fc3c30eb14c3ea9c8e9d7ad544f23ae98e2416000257e161b35568549feba6e160f03026926d9cb951916c539c23982e27b9b36033cab8cf3", 0x5a, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x410}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) 3m19.991468378s ago: executing program 7 (id=1448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r3, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) 3m18.876138681s ago: executing program 7 (id=1450): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) signalfd4(r1, &(0x7f0000000c00)={[0x2]}, 0x8, 0xc00) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)=ANY=[], 0x44}}, 0x4) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 3m3.667306473s ago: executing program 37 (id=1450): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) signalfd4(r1, &(0x7f0000000c00)={[0x2]}, 0x8, 0xc00) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)=ANY=[], 0x44}}, 0x4) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1m1.190592162s ago: executing program 6 (id=1598): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wlan1\x00', 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x946e) finit_module(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000011c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="04006e8004000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000100000000000000000000000000200037050000000000002b000000008000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000886dae6e90aa285a457bd0cc08a2d7afc36ad27f031b85e90e90462537989ea72438208cca11a78a3e363ff39c38d219e8021f4f7a6f1c1e854196ab34f70c824b392a33e4a37df232c8c1"], 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r4, 0x40104d05, &(0x7f0000000a00)) 57.966039124s ago: executing program 6 (id=1601): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 54.413289294s ago: executing program 6 (id=1606): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 49.855253645s ago: executing program 6 (id=1621): io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x18ba, 0x2, 0x1, 0x355}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x301, 0x0) writev(r0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mq_open(&(0x7f0000000000)='$\x00', 0x80, 0x120, &(0x7f00000000c0)={0xe, 0x7, 0x10, 0x2}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzs281uElEYgOFvAH/iysSdcWfV+lMGCpou9VKadmwap2qsmzYu9Aq8Bq/M3oALb0BMR8BEGCaRyAnyPKsvvEzmsDjM2UwAm6vzPLLIYutyvnP95udbWeoVASsySnz/HyMgnfZF6hUAaXx7EXEREV+/fziI9tbM8/myf5z01r3Z/inidmfcs/vx4I8++hLVZ7/69tzrb0z7w7l9++7k/o/icTyJnehGHr3oj/vh9PrhkqcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZVFt2mvvALrXh5XBa92n6l6v3afrXquw19UNuvVb178KY8XLRMYI7Wkvu/3bD/Ow37H0jn9Oz81X5ZFu8MBoNhOqT+ZwL+tfz9ydv89Ox85/hk/6g4Kl4P+8Nne4PB3tNeXp3s88Xne2B9/X7op14JAAAAAAAAAPC3dqP+3RoAAOD/sorXiVL/RgAAAAAAAAAAAAAAWHc/AwAA//8c7qwa") truncate(&(0x7f00000000c0)='./file1\x00', 0x3db1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000014800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x48000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r2, 0x0, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x10, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0x6, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x3, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x205, 0x0, 0x4, 0x5, 0x9, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x4, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x42f, 0x1, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x20006, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0x9, 0x8, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xfff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x0, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x10001, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000007, 0x2, 0x6d03, 0x5, 0xd, 0x17, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0xb, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7fffffff, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x6, 0x2, 0x56, 0x4, 0x3, 0x101, 0x10003, 0x2, 0xfffff001, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffbfd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 48.271559122s ago: executing program 6 (id=1615): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x402000784853bb, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{0x0}, {0x0}, {&(0x7f0000004600)=""/4089, 0xff9}], 0x3}, 0x40000002}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_type(r6, &(0x7f0000000080), 0x2, 0x0) 45.768801513s ago: executing program 6 (id=1617): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 30.436713416s ago: executing program 38 (id=1617): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 19.506680925s ago: executing program 8 (id=1648): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x11, &(0x7f0000000280)=ANY=[], 0x1, 0x323, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) clock_settime(0xfffffffb, 0x0) r3 = semget$private(0x0, 0x3, 0x6) semop(r3, &(0x7f00000002c0), 0x2aaaab90) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') readv(r4, &(0x7f0000000240)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$IPC_RMID(r3, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc2a, &(0x7f0000001940)="$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") setrlimit(0x1, 0x0) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 18.679100095s ago: executing program 8 (id=1651): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c000780180001800800", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 17.865715644s ago: executing program 9 (id=1653): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x8000000}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 15.758050016s ago: executing program 9 (id=1656): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) 15.422602893s ago: executing program 0 (id=1657): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4430, 0x80000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa, 0x2}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x5591b}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x44045) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000000000000000000000008500000056000000180000000000000000000000000000009500000000000000846bdab3ee67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f0000009e40), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f00000026c0)='\\', 0x1) socket(0x400000000010, 0x3, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup3(r0, r7, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58}, 0xffffffffffffff0b) 14.627482121s ago: executing program 2 (id=1658): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) 14.627012741s ago: executing program 9 (id=1659): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0), 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 14.557531864s ago: executing program 8 (id=1660): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 13.448000569s ago: executing program 2 (id=1661): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x11, &(0x7f0000000280)=ANY=[], 0x1, 0x323, &(0x7f0000000640)="$eJzs3M+LG2Ucx/FPYjabpHQnB1EUpA960cuwG+9ikBbEgGVtxB8gTpuJhozJkgkrEXHbkxcP4h/hofTYW0H7B7gXb568eNuL4MEexJH5kWQSEzemyabtvl+wzMM83+/M88zshu8zS+bkvW8/azd9u+n0lS0YZSRpWyorq6FMss1G7bzSbuqVC3/88sI773/wVrVWu7xvzJXqtVcrJjMRpXvbOi5/dPJ75bfjZ46fO/n72qct37R80+n2jWOud3/tO9c91zRafts25qrnOr5rWh3f7cX9wZHkuabpdQ8OBsbpNC6WDnqu7xunMzBtd2D6XdPvDYzzidPqGNu2zcWScJr67f19p7pk8o0VDwZr0utVnackFdM7wx2q397YoAAAwMYk9f+o2s+GJf2DJer/3GT9b8zOpR8+//LOi/f7F969u5PU//fyYf0vper/j8fHck0jO6r/C5LG9X83Xh+suv4vruISPkK+mbw5CoJRMz8r/qHqfzwmwvq/lPz9Rm59eGc3alD/AwAAAAAAAAAAAAAAAAAAAADwOHgQBFYQBFa4LQbRl4JVUGBtR1spSPo3PU6sR/r+B6kf7v/5MH5xR25H8r4+rB/W420ScF+SJ1e7svRX9PuQCNv5myYKMqGyfvSOkvyjw3r8WVJtqhXl78lSeTo/CK68Wbu8Z2KT+VsqpfMrsvT07PzKdP5WuM3r5ZdS+bYs/XxDXXlqJN+MG+Z/tWfMG2/Xps5fjOIAAAAAAHgS2GZktH7fTvfb/+6P18dxf7y+zmn284F4fb07c32f0/O5Tc0aAAAAAIDzxR980XY8z+2tqXFL0ppPMacxnOGiWcMX5M6JySgzr2sFjeHJl0sPx7ay8WwtdMWySw31Uv5/3pQZjfF7qefF6OoyRw4s6WGv4bPfff/nf8fET8akRQ742t3CKTNNN37y4+duixw5f9pMt87o4wcAAADAGRoX/cM9r0+H8F96AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW7CxexbfpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPin8CAAD//7m+/zU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) clock_settime(0xfffffffb, 0x0) r2 = semget$private(0x0, 0x3, 0x6) semop(r2, &(0x7f00000002c0), 0x2aaaab90) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') readv(r3, &(0x7f0000000240)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc2a, &(0x7f0000001940)="$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") setrlimit(0x1, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 11.56689888s ago: executing program 0 (id=1662): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f000000ee00)={0x0, 0x0, &(0x7f000000edc0)={&(0x7f000000ed40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x102a000, 0x1c00, 0xfffffffc, 0x2}, 0x20) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x1, 0x4, 0x2, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r8, &(0x7f0000000500)}, 0x20) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000100)={0x3, 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 11.56650972s ago: executing program 2 (id=1663): r0 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x2) unshare(0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x62) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x141400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x749}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101501, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80883, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0xa, 0x2400) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xe, [0x81, 0x9, 0x3, 0x0, 0x10000, 0x6, 0x800, 0x4, 0x5, 0x2, 0x5, 0x7, 0x2, 0xfff, 0x81, 0x33, 0x9, 0xffffff7f, 0x3c4, 0x2, 0x1000, 0x80000000, 0x8, 0x5, 0x7, 0x3, 0x7, 0x99ee, 0x5, 0xffffffff, 0x7f, 0x9, 0xff, 0x125d829d, 0x0, 0x7, 0x8c5c, 0x4, 0xe, 0x4, 0x4, 0xfffff231, 0x7fffffff, 0x9, 0x7fffffff, 0x3, 0xffffffff, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x7, 0xffff8001, 0xb, 0x5, 0x1, 0xfffffffe, 0x6, 0x401, 0x8, 0x86, 0x24000, 0x75a, 0x4, 0x6, 0x0, 0x0, 0x0, 0xc25f, 0xfffffff8, 0x81, 0xd, 0x5, 0x100, 0x7, 0x0, 0x5, 0x4d, 0xfffffc01, 0x9, 0xc7, 0x7f, 0x1, 0x1, 0x3, 0x3, 0x4, 0xd7f, 0x6, 0x8001, 0x7fffffff, 0x1, 0x3, 0xffffff81, 0xe2, 0x80, 0x5a, 0x5, 0x9, 0x200, 0x7, 0x5, 0x4, 0x7, 0x1, 0x6, 0x10001, 0x8, 0x1, 0xc, 0x80000000, 0x1, 0xf, 0x0, 0x3f1, 0x1, 0x3, 0x101, 0x9, 0x8a, 0x3, 0x7, 0x5, 0x96, 0x7fb, 0x3, 0x3]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', 0x0}) 11.469649934s ago: executing program 9 (id=1664): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c850) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r6, &(0x7f0000000180)='nullb1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000280), 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000200)) 9.752655037s ago: executing program 9 (id=1665): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfa, 0x1511, &(0x7f0000002cc0)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x120008, &(0x7f00000001c0)=ANY=[], 0x1, 0x5e8, &(0x7f0000000cc0)="$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") rename(&(0x7f0000000080)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000e, 0x80010, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000000240)) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) ioctl$FIGETBSZ(r5, 0x2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 9.179030785s ago: executing program 0 (id=1666): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) 9.038132282s ago: executing program 8 (id=1667): socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x4b26e94}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) 8.934404407s ago: executing program 2 (id=1668): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c000780180001800800", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 8.856181141s ago: executing program 0 (id=1669): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.784590643s ago: executing program 8 (id=1670): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) 6.467377966s ago: executing program 0 (id=1671): ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) setrlimit(0xe, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f00000017c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 6.467040906s ago: executing program 8 (id=1672): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0xd) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020) pread64(r1, 0x0, 0x0, 0xab7f) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r3, &(0x7f0000000840), 0x36, 0x12022, 0x0) r4 = syz_open_dev$loop(0x0, 0x7, 0x20000) ioctl$BLKFRASET(r4, 0x1264, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 5.649207076s ago: executing program 2 (id=1673): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4430, 0x80000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa, 0x2}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x5591b}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x44045) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000000000000000000000008500000056000000180000000000000000000000000000009500000000000000846bdab3ee67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f0000009e40), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f00000026c0)='\\', 0x1) socket(0x400000000010, 0x3, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup3(r0, r7, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58}, 0xffffffffffffff0b) 34.604778ms ago: executing program 5 (id=1632): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) userfaultfd(0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x6}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) r5 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r5, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000200)={0x5, 0xffffffffffffffff, 0x30, {0xa, 0x8000000000000003}, 0xb}, 0x1) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x9, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r6, 0x1) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 32.853298ms ago: executing program 2 (id=1683): r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000004c0)=""/245, 0xf5}, {&(0x7f00000005c0)=""/115, 0x73}], 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(r3, 0x409, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r4, &(0x7f0000006e00)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000540)="857ec1", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="30f3", 0x2}], 0x1}}], 0x4, 0x40480c0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0x594d, &(0x7f00000002c0)={0x0, 0xd0ad, 0x2000, 0x0, 0x138}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002e00)={0x0, 0x2bb9, 0x1000, 0x0, 0x2a5}, &(0x7f0000002e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ded, 0x1000, 0x2, 0x39}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b46, 0x8000, 0x1, 0x1c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7b8, 0x8000, 0x3, 0xe3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b89, 0x2000, 0x2, 0x9}}], 0x4, &(0x7f0000004100)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff8}, 0x0, 0x0, '\x00', {0x0, 0x927, 0x0, &(0x7f0000003100)=@buf_4k="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"}}, &(0x7f0000004180)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611208000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="27010000000000000500feff00000008"], &(0x7f0000000180)='GPL\x00'}, 0x94) 5.02673ms ago: executing program 0 (id=1684): mkdirat(0xffffffffffffff9c, 0x0, 0x19) io_uring_setup(0x63c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000080)={r7}) ioprio_get$uid(0x3, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008880) 0s ago: executing program 9 (id=1685): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0x10000}, @IFLA_GRE_TTL={0x5, 0x8, 0x10}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000001d80), &(0x7f0000001d40)=r5}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) kernel console output (not intermixed with test programs): bound to dummy_udc driver [ 1047.621578][T11039] gadgetfs: suspended from state 2 [ 1048.215538][ T4322] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1049.842409][T11067] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1058.090280][T11118] overlayfs: missing 'lowerdir' [ 1059.159803][T11104] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1240'. [ 1062.405554][ T4438] rpcbind: server 127.0.0.1 not responding, timed out [ 1062.526234][ T4360] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 1064.843655][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.862001][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.003824][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1251'. [ 1065.290546][ T4360] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1065.398009][ T4360] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1065.423605][ T4360] usb 9-1: can't read configurations, error -71 [ 1065.846876][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1253'. [ 1070.387002][T11189] sctp: failed to load transform for md5: -2 [ 1070.585534][T11188] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 1072.142329][T11219] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1073.467543][T11224] futex_wake_op: syz.2.1258 tries to shift op by 144; fix this program [ 1073.484424][T11224] loop2: detected capacity change from 0 to 256 [ 1073.543494][T11224] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1073.575080][ T27] audit: type=1800 audit(1789190995.022:82): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1258" name="file1" dev="loop2" ino=1048628 res=0 errno=0 [ 1073.663745][T11227] syz.2.1258: attempt to access beyond end of device [ 1073.663745][T11227] loop2: rw=0, sector=184, nr_sectors = 120 limit=256 [ 1073.706190][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.706190][T11224] loop2: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 1073.721893][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.721893][T11224] loop2: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 1073.736567][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.736567][T11224] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1073.750324][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.750324][T11224] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1073.763659][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.763659][T11224] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1073.777185][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.777185][T11224] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1073.790676][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.790676][T11224] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1073.804632][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.804632][T11224] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1073.818388][T11224] syz.2.1258: attempt to access beyond end of device [ 1073.818388][T11224] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 1075.446097][ T7] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 1077.684312][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1077.822174][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1077.830228][ T7] usb 7-1: can't read configurations, error -71 [ 1077.868916][ T4579] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.025363][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1078.039320][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1078.051192][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1078.074513][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1078.087725][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1078.095340][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1078.166532][T11247] netlink: 'syz.7.1264': attribute type 10 has an invalid length. [ 1079.160001][T11259] input: syz1 as /devices/virtual/input/input11 [ 1079.272447][T11259] loop2: detected capacity change from 0 to 1024 [ 1079.334247][T11259] hfsplus: invalid btree flag [ 1079.344166][T11259] hfsplus: failed to load catalog file [ 1081.222913][T11247] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1081.267997][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 1082.888858][T11275] comedi comedi1: Minor 4 could not be opened [ 1082.926860][ T4579] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.020549][T11277] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1083.086336][T11277] loop7: detected capacity change from 0 to 1024 [ 1083.328071][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 1083.696475][T11277] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #2: comm syz.7.1269: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1083.716917][T11277] EXT4-fs (loop7): Remounting filesystem read-only [ 1083.723534][T11277] EXT4-fs (loop7): get root inode failed [ 1083.729347][T11277] EXT4-fs (loop7): mount failed [ 1084.368167][ T4579] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.396509][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 1085.508204][T11290] loop8: detected capacity change from 0 to 128 [ 1085.539223][T11290] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1085.550818][T11290] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.614207][ T4579] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.885650][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 1087.454273][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1272'. [ 1087.476804][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 1088.578794][T11251] chnl_net:caif_netlink_parms(): no params data found [ 1088.926289][ T5460] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 1089.321008][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1090.536596][T11251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.675104][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.919476][T11251] device bridge_slave_0 entered promiscuous mode [ 1091.436630][ T5460] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1091.450529][ T5460] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1091.458518][ T5460] usb 3-1: can't read configurations, error -71 [ 1091.459158][T11251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.515038][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.523760][T11251] device bridge_slave_1 entered promiscuous mode [ 1091.933721][T11344] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1278'. [ 1092.152066][T11345] loop8: detected capacity change from 0 to 512 [ 1092.486656][T11345] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1092.618524][T11251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.640404][T11345] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1092.642013][T11251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.695323][T11342] Cannot find add_set index 0 as target [ 1092.790689][T11350] overlayfs: conflicting options: nfs_export=on,index=off [ 1093.080221][T11345] EXT4-fs (loop8): Remounting filesystem read-only [ 1093.087747][T11345] EXT4-fs (loop8): 1 truncate cleaned up [ 1093.093473][T11345] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1094.861557][T11251] team0: Port device team_slave_0 added [ 1094.947262][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1095.691344][T11251] team0: Port device team_slave_1 added [ 1096.283705][T11251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.313170][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.563741][T11251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.017624][T11251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.024669][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.070236][T11372] null_blk: zone_size must be power-of-two [ 1097.539051][T11251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.651852][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1288'. [ 1097.776494][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 1098.347128][ T4357] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1100.241506][T11251] device hsr_slave_0 entered promiscuous mode [ 1100.258337][T11251] device hsr_slave_1 entered promiscuous mode [ 1102.879390][T11413] capability: warning: `syz.8.1292' uses deprecated v2 capabilities in a way that may be insecure [ 1103.512926][T11416] loop2: detected capacity change from 0 to 256 [ 1103.680253][T11416] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 1103.999775][ T27] audit: type=1800 audit(1789191025.366:83): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1294" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0 [ 1104.561293][T11416] overlayfs: missing 'lowerdir' [ 1105.985555][T11439] loop8: detected capacity change from 0 to 8 [ 1106.035751][T11439] SQUASHFS error: Failed to read block 0x6de: -5 [ 1106.042420][T11439] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 1106.050163][T11439] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1110.116195][ T9020] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1110.361828][ T9020] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.553706][ T9020] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1110.893704][ T4579] device hsr_slave_0 left promiscuous mode [ 1110.908901][ T9020] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.104715][ T9020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1111.251339][ T9020] usb 3-1: SerialNumber: syz [ 1111.483678][ T4579] device hsr_slave_1 left promiscuous mode [ 1111.571957][ T9020] hub 3-1:1.0: bad descriptor, ignoring hub [ 1111.657173][ T9020] hub: probe of 3-1:1.0 failed with error -5 [ 1111.745553][ T9020] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1111.848546][ T9020] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1111.918335][ T9020] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 1114.690253][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.701454][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.710376][ T4579] device bridge_slave_1 left promiscuous mode [ 1114.717436][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.758740][ T4579] device bridge_slave_0 left promiscuous mode [ 1114.774367][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.848022][T11463] 9pnet_fd: Insufficient options for proto=fd [ 1114.858925][ T4579] device veth1_macvtap left promiscuous mode [ 1114.865054][ T4579] device veth0_macvtap left promiscuous mode [ 1114.871583][ T4579] device veth0_vlan left promiscuous mode [ 1115.852056][ T4287] Bluetooth: Wrong link type (-57) [ 1116.942420][ T4579] team0 (unregistering): Port device team_slave_1 removed [ 1117.006818][ T4579] team0 (unregistering): Port device team_slave_0 removed [ 1117.067098][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.128051][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.526939][ T4579] bond0 (unregistering): Released all slaves [ 1118.116600][ T7] usb 3-1: USB disconnect, device number 53 [ 1118.371504][T11251] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1118.742230][T11487] random: crng reseeded on system resumption [ 1119.089429][T11251] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1119.104204][T11483] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1119.245055][T11251] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1119.324002][T11251] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1121.982249][T11507] loop6: detected capacity change from 0 to 512 [ 1121.994362][T11507] FAT-fs (loop6): Directory bread(block 199916) failed [ 1122.001502][T11507] FAT-fs (loop6): Directory bread(block 199917) failed [ 1122.008567][T11507] FAT-fs (loop6): Directory bread(block 199918) failed [ 1122.015821][T11507] FAT-fs (loop6): Directory bread(block 199919) failed [ 1122.023186][T11507] FAT-fs (loop6): Directory bread(block 199920) failed [ 1122.030266][T11507] FAT-fs (loop6): Directory bread(block 199921) failed [ 1122.037374][T11507] FAT-fs (loop6): Directory bread(block 199922) failed [ 1122.044440][T11507] FAT-fs (loop6): Directory bread(block 199923) failed [ 1122.103017][T11507] FAT-fs (loop6): FAT read failed (blocknr 128) [ 1122.756182][T11251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.505083][T11521] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1124.575179][T11518] 9pnet_virtio: no channels available for device syz [ 1124.900207][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1124.921319][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1124.960239][T11523] loop7: detected capacity change from 0 to 8 [ 1125.007377][T11251] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.022581][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1125.034754][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1125.056540][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.063826][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.953855][ T27] audit: type=1800 audit(1789191047.326:84): pid=11529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1315" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1126.192159][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1126.203908][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1126.214211][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1126.223762][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.230991][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.254448][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1126.281272][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.288171][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.321070][T11536] SET target dimension over the limit! [ 1126.778473][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1127.064781][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1127.182527][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1128.436238][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1128.555710][T11548] tipc: Enabling of bearer rejected, failed to enable media [ 1128.674444][T11554] ALSA: mixer_oss: invalid OSS volume '' [ 1128.707881][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1128.902021][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1128.957134][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1128.966347][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1128.989841][T11251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.087272][T11251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1129.113082][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1129.137147][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1130.048107][ T27] audit: type=1800 audit(1789191051.496:85): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1322" name="zoned" dev="configfs" ino=58305 res=0 errno=0 [ 1130.409485][ T27] audit: type=1800 audit(1789191051.526:86): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1322" name="power" dev="configfs" ino=58306 res=0 errno=0 [ 1133.119850][ T4287] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 1138.164952][T11607] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1330'. [ 1140.207928][T11635] Cannot find add_set index 0 as target [ 1140.290366][T11636] overlayfs: conflicting options: nfs_export=on,index=off [ 1140.547708][T11629] loop7: detected capacity change from 0 to 128 [ 1140.566797][T11629] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1140.580001][T11629] hpfs: filesystem error: improperly stopped [ 1140.586207][T11629] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1140.594732][T11629] hpfs: You really don't want any checks? You are crazy... [ 1140.604355][T11629] hpfs: hpfs_map_sector(): read error [ 1140.610081][T11629] hpfs: code page support is disabled [ 1140.633098][T11629] hpfs: hpfs_map_4sectors(): unaligned read [ 1140.639588][T11629] hpfs: hpfs_map_4sectors(): unaligned read [ 1140.645519][T11629] hpfs: filesystem error: unable to find root dir [ 1141.598274][T11642] loop2: detected capacity change from 0 to 64 [ 1143.467004][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1143.480532][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1143.490674][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1143.498882][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1143.506677][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1143.514080][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1143.983307][T11672] tmpfs: Unknown parameter 'usrquota' [ 1145.556148][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 1147.636051][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 1148.900062][T11683] netlink: 'syz.6.1342': attribute type 2 has an invalid length. [ 1148.908488][T11683] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1342'. [ 1149.726044][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 1152.760214][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 1153.059204][T11702] loop7: detected capacity change from 0 to 128 [ 1153.317212][ T27] audit: type=1804 audit(1789191074.756:87): pid=11702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1346" name="/newroot/119/file0/file1" dev="loop7" ino=1048631 res=1 errno=0 [ 1153.375270][T11701] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 1153.384055][T11701] FAT-fs (loop7): Filesystem has been set read-only [ 1154.361786][ T8387] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 1155.134076][T11716] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.667714][T11717] Cannot find add_set index 0 as target [ 1155.742592][T11719] overlayfs: conflicting options: nfs_export=on,index=off [ 1156.469333][T11724] loop2: detected capacity change from 0 to 128 [ 1156.489420][T11724] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1156.501772][T11724] hpfs: filesystem error: improperly stopped [ 1156.508266][T11724] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1156.516633][T11724] hpfs: You really don't want any checks? You are crazy... [ 1156.525682][T11724] hpfs: hpfs_map_sector(): read error [ 1156.531251][T11724] hpfs: code page support is disabled [ 1156.539332][T11724] hpfs: hpfs_map_4sectors(): unaligned read [ 1156.548961][T11724] hpfs: hpfs_map_4sectors(): unaligned read [ 1156.554984][T11724] hpfs: filesystem error: unable to find root dir [ 1157.125081][T11658] chnl_net:caif_netlink_parms(): no params data found [ 1158.012628][ T4287] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1158.021845][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1158.032844][ T4290] CPU: 0 PID: 4290 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 1158.040461][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.050555][ T4290] Workqueue: hci2 hci_rx_work [ 1158.055276][ T4290] Call Trace: [ 1158.058589][ T4290] [ 1158.061594][ T4290] dump_stack_lvl+0x188/0x24e [ 1158.066317][ T4290] ? show_regs_print_info+0x12/0x12 [ 1158.071557][ T4290] ? load_image+0x410/0x410 [ 1158.076100][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 1158.081251][ T4290] ? __lock_acquire+0x7c40/0x7c40 [ 1158.086311][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 1158.091033][ T4290] ? do_raw_spin_unlock+0x11d/0x230 [ 1158.096273][ T4290] kobject_add_internal+0x617/0xca0 [ 1158.101516][ T4290] kobject_add+0x160/0x230 [ 1158.105975][ T4290] ? kobject_init+0x1c0/0x1c0 [ 1158.110690][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 1158.115999][ T4290] ? klist_children_get+0x50/0x50 [ 1158.121061][ T4290] ? get_device_parent+0x121/0x3e0 [ 1158.126208][ T4290] device_add+0x470/0x1050 [ 1158.130665][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 1158.135731][ T4290] le_conn_complete_evt+0xfac/0x15c0 [ 1158.141059][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1158.147344][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1158.153005][ T4290] ? mutex_unlock+0x10/0x10 [ 1158.157534][ T4290] ? skb_pull_data+0xec/0x1f0 [ 1158.162263][ T4290] hci_le_conn_complete_evt+0x183/0x440 [ 1158.167858][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 1158.173958][ T4290] hci_event_packet+0x7b3/0x1290 [ 1158.178938][ T4290] ? lock_chain_count+0x20/0x20 [ 1158.183829][ T4290] ? hci_conn_valid+0x220/0x220 [ 1158.188709][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1158.194646][ T4290] ? kcov_remote_start+0x50f/0x810 [ 1158.199808][ T4290] ? lockdep_hardirqs_on+0x94/0x140 [ 1158.205038][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 1158.210285][ T4290] hci_rx_work+0x3eb/0xd40 [ 1158.214834][ T4290] ? process_one_work+0x7b4/0x1160 [ 1158.219991][ T4290] process_one_work+0x8ab/0x1160 [ 1158.224978][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 1158.230647][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1158.235701][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1158.241281][ T4290] ? wq_worker_running+0x97/0x190 [ 1158.246346][ T4290] worker_thread+0xaf5/0x12a0 [ 1158.251066][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1158.257010][ T4290] kthread+0x29d/0x330 [ 1158.261102][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 1158.266153][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 1158.270786][ T4290] ret_from_fork+0x1f/0x30 [ 1158.275254][ T4290] [ 1158.285976][ T4290] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1158.299317][ T4290] Bluetooth: hci2: failed to register connection device [ 1158.660914][T11737] loop8: detected capacity change from 0 to 512 [ 1158.680814][T11737] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1159.268398][T11744] loop7: detected capacity change from 0 to 128 [ 1159.404997][T11737] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1159.423819][T11737] Quota error (device loop8): write_blk: dquota write failed [ 1159.431857][T11737] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 1159.441161][T11737] Quota error (device loop8): write_blk: dquota write failed [ 1159.448857][T11737] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1159.459163][T11737] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1354: Failed to acquire dquot type 1 [ 1159.475636][T11737] EXT4-fs (loop8): 1 truncate cleaned up [ 1159.481500][T11737] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1159.487728][T11744] FAT-fs (loop7): invalid media value (0x07) [ 1159.519766][T11744] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1159.553826][T11751] Quota error (device loop8): write_blk: dquota write failed [ 1159.563055][T11751] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1159.573316][T11751] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1354: Failed to acquire dquot type 1 [ 1159.602733][T11751] Quota error (device loop8): write_blk: dquota write failed [ 1159.610431][T11751] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1159.620533][T11751] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1354: Failed to acquire dquot type 1 [ 1159.790026][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1159.983280][T11758] loop6: detected capacity change from 0 to 128 [ 1159.991356][T11758] FAT-fs (loop6): invalid media value (0x07) [ 1159.998026][T11758] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1160.468043][T11760] loop7: detected capacity change from 0 to 2048 [ 1160.562121][T11658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.569645][T11658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.599134][T11658] device bridge_slave_0 entered promiscuous mode [ 1160.616549][T11658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.624139][T11658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.642437][T11658] device bridge_slave_1 entered promiscuous mode [ 1160.835870][T11658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.861537][T11658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.982129][T11658] team0: Port device team_slave_0 added [ 1161.015232][T11658] team0: Port device team_slave_1 added [ 1161.122116][T11658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.140896][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.208823][T11658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.245007][T11658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.261178][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.329753][T11658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.512517][T11658] device hsr_slave_0 entered promiscuous mode [ 1161.530934][T11658] device hsr_slave_1 entered promiscuous mode [ 1161.600426][T11760] UDF-fs: warning (device loop7): udf_fill_super: No partition found (2) [ 1161.938466][T11658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1162.084070][T11658] Cannot create hsr debugfs directory [ 1166.088462][T11779] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1166.639961][T11732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1168.063036][ T4589] device hsr_slave_0 left promiscuous mode [ 1168.678680][ T4589] device hsr_slave_1 left promiscuous mode [ 1168.752591][ T4589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.859242][T11804] loop7: detected capacity change from 0 to 64 [ 1168.934557][ T4589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.073792][ T4589] device bridge_slave_1 left promiscuous mode [ 1169.145841][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.378119][ T4589] device bridge_slave_0 left promiscuous mode [ 1169.384749][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.123757][T11813] loop6: detected capacity change from 0 to 512 [ 1170.169683][T11813] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1170.394781][T11813] EXT4-fs (loop6): 1 truncate cleaned up [ 1170.406079][T11813] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1170.415462][T11820] loop2: detected capacity change from 0 to 128 [ 1170.847701][T11820] FAT-fs (loop2): invalid media value (0x07) [ 1170.969384][T11820] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1171.109733][ T9713] EXT4-fs (loop6): unmounting filesystem. [ 1171.116726][T10824] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1171.146017][ T9616] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 1171.518919][T11827] loop2: detected capacity change from 0 to 2048 [ 1171.678102][T11827] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 1171.884463][ T7] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1172.102949][ T4589] team0 (unregistering): Port device team_slave_1 removed [ 1172.147185][ T7] usb 8-1: not running at top speed; connect to a high speed hub [ 1172.181524][ T7] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1172.225449][ T7] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1172.270569][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1172.309327][ T7] usb 8-1: Product: syz [ 1172.320062][ T7] usb 8-1: Manufacturer: syz [ 1172.984125][T11732] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1173.021458][ T7] usb 8-1: USB2VGA dongle found at address 22 [ 1173.040201][ T7] usb 8-1: Allocated 8 output buffers [ 1173.045860][ T7] usb 8-1: Not attached to USB 2.0 hub, deferring init [ 1173.099802][ T4589] team0 (unregistering): Port device team_slave_0 removed [ 1173.346041][ T4589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.383867][T11839] usb 8-1: Device not attached to USB 2.0 hub [ 1173.400286][ T9616] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1173.426206][ T9616] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1173.433993][ T9616] usb 9-1: can't read configurations, error -71 [ 1173.612729][ T4589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.691362][T11843] loop8: detected capacity change from 0 to 128 [ 1173.719564][T11843] FAT-fs (loop8): invalid media value (0x07) [ 1173.725729][T11843] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1174.079858][T11847] loop8: detected capacity change from 0 to 2048 [ 1174.089407][T11847] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1175.853504][T11855] loop8: detected capacity change from 0 to 2048 [ 1175.864347][T11855] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1181.034545][T11876] loop8: detected capacity change from 0 to 64 [ 1181.425434][ T4589] bond0 (unregistering): Released all slaves [ 1181.781606][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1382'. [ 1182.284011][ T9618] usb 8-1: USB disconnect, device number 22 [ 1182.426322][ T7] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 1182.798274][T11885] loop2: detected capacity change from 0 to 128 [ 1182.840137][T11885] FAT-fs (loop2): invalid media value (0x07) [ 1182.860436][T11885] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1182.950018][T11886] 9pnet_virtio: no channels available for device syz [ 1183.466484][T11888] loop2: detected capacity change from 0 to 2048 [ 1183.476708][T11888] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1185.491851][ T7] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1185.532797][ T7] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1185.576035][ T7] usb 9-1: can't read configurations, error -71 [ 1186.154288][T11658] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1186.188820][T11658] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1186.237900][T11658] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1186.265278][T11896] loop2: detected capacity change from 0 to 128 [ 1186.299256][T11658] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1186.502108][T11896] FAT-fs (loop2): invalid media value (0x07) [ 1186.654695][T11896] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1187.356409][T11904] loop2: detected capacity change from 0 to 2048 [ 1187.368173][T11904] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1188.757823][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.764267][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.231920][T10713] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1190.055032][T11732] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1190.712478][T11658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.840387][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1190.859973][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1190.989697][T11658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.715751][ T4281] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1191.806208][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1192.004161][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1192.019880][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.027127][ T4435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.138979][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1192.303440][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1192.358598][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.365819][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.412082][T11945] loop8: detected capacity change from 0 to 512 [ 1192.753058][T11945] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1192.775484][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1193.214326][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1193.315186][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1193.354429][T11945] EXT4-fs (loop8): 1 truncate cleaned up [ 1193.361013][T11945] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1193.377109][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1193.443794][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1193.606966][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1193.657047][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1193.665706][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1193.911979][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1395'. [ 1193.955451][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1194.011526][T11732] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1194.152063][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1194.232282][T11531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1194.255659][T11531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1194.313242][T11658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1194.513420][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1196.577633][T11990] Can't find a SQUASHFS superblock on nullb0 [ 1199.308092][T11997] loop6: detected capacity change from 0 to 128 [ 1199.410085][T11997] FAT-fs (loop6): invalid media value (0x07) [ 1199.426141][T11997] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1200.103583][T12004] loop6: detected capacity change from 0 to 2048 [ 1200.877892][T12004] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2) [ 1202.315288][T12019] loop6: detected capacity change from 0 to 512 [ 1202.353000][T12019] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1202.469898][T12019] EXT4-fs (loop6): 1 truncate cleaned up [ 1202.475805][T12019] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1202.855671][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1408'. [ 1202.923766][ T4281] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1203.424524][ T9713] EXT4-fs (loop6): unmounting filesystem. [ 1203.812939][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1203.842482][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1203.853524][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1204.230063][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1204.240891][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1204.369533][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1205.435300][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1414'. [ 1206.440199][T12045] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1206.516235][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 1207.031576][T12074] Can't find a SQUASHFS superblock on nullb0 [ 1208.596017][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 1208.987994][T12079] loop8: detected capacity change from 0 to 128 [ 1209.025551][T12079] FAT-fs (loop8): invalid media value (0x07) [ 1209.066229][T12079] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1209.303933][T12083] loop6: detected capacity change from 0 to 512 [ 1209.312140][T12083] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1209.475609][T12088] loop8: detected capacity change from 0 to 2048 [ 1210.282475][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1420'. [ 1210.620919][T12083] EXT4-fs (loop6): 1 truncate cleaned up [ 1210.645541][T12088] UDF-fs: warning (device loop8): udf_fill_super: No partition found (2) [ 1211.168214][T12083] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1211.577885][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 1212.276215][T10713] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1212.589910][T12101] blktrace: Concurrent blktraces are not allowed on loop4 [ 1212.773728][T12037] chnl_net:caif_netlink_parms(): no params data found [ 1212.796564][T11732] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1213.245570][ T27] audit: type=1800 audit(1789191134.686:88): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1424" name="zoned" dev="configfs" ino=60296 res=0 errno=0 [ 1214.198012][T11732] Bluetooth: hci1: command 0x0419 tx timeout [ 1214.442169][ T27] audit: type=1800 audit(1789191134.716:89): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1424" name="zone_nr_conv" dev="configfs" ino=60297 res=0 errno=0 [ 1214.617928][ T27] audit: type=1800 audit(1789191135.666:90): pid=12116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1424" name="zoned" dev="configfs" ino=60304 res=0 errno=0 [ 1214.638436][ T27] audit: type=1800 audit(1789191135.676:91): pid=12116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1424" name="power" dev="configfs" ino=60305 res=0 errno=0 [ 1215.466364][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.473583][T12037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.518890][T12037] device bridge_slave_0 entered promiscuous mode [ 1216.623962][T12147] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1216.803476][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.813426][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.845847][T12037] device bridge_slave_1 entered promiscuous mode [ 1218.147475][T12166] loop8: detected capacity change from 0 to 512 [ 1218.168455][T12037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.212908][ T9713] EXT4-fs (loop6): unmounting filesystem. [ 1218.293715][T12166] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1218.918405][T12176] loop6: detected capacity change from 0 to 128 [ 1218.921282][T12166] EXT4-fs (loop8): 1 truncate cleaned up [ 1218.949059][T12176] FAT-fs (loop6): invalid media value (0x07) [ 1218.956036][T12166] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1218.982035][T12037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.012349][T12176] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1220.488662][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1223.625520][T12037] team0: Port device team_slave_0 added [ 1223.657130][ T4510] device hsr_slave_0 left promiscuous mode [ 1223.688744][ T4510] device hsr_slave_1 left promiscuous mode [ 1223.717218][ T4510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.735742][ T4510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.765464][ T4510] device bridge_slave_1 left promiscuous mode [ 1223.779411][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.136763][ T4510] device bridge_slave_0 left promiscuous mode [ 1224.143157][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.235742][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1439'. [ 1224.566077][ T26] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1225.284766][ T27] audit: type=1800 audit(1789191146.726:92): pid=12220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1438" name="zoned" dev="configfs" ino=60398 res=0 errno=0 [ 1225.349949][ T27] audit: type=1800 audit(1789191146.756:93): pid=12220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1438" name="zone_nr_conv" dev="configfs" ino=60399 res=0 errno=0 [ 1225.501451][ T27] audit: type=1800 audit(1789191146.946:94): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1438" name="zoned" dev="configfs" ino=61518 res=0 errno=0 [ 1226.050869][ T27] audit: type=1800 audit(1789191146.976:95): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1438" name="power" dev="configfs" ino=61519 res=0 errno=0 [ 1226.810951][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1226.821736][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1226.829347][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1226.839499][ T4281] Workqueue: hci3 hci_rx_work [ 1226.844253][ T4281] Call Trace: [ 1226.847575][ T4281] [ 1226.850553][ T4281] dump_stack_lvl+0x188/0x24e [ 1226.855301][ T4281] ? show_regs_print_info+0x12/0x12 [ 1226.860612][ T4281] ? load_image+0x410/0x410 [ 1226.865192][ T4281] sysfs_create_dir_ns+0x26a/0x290 [ 1226.870365][ T4281] ? __lock_acquire+0x7c40/0x7c40 [ 1226.875454][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 1226.880199][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 1226.885472][ T4281] kobject_add_internal+0x617/0xca0 [ 1226.890734][ T4281] kobject_add+0x160/0x230 [ 1226.895215][ T4281] ? kobject_init+0x1c0/0x1c0 [ 1226.899946][ T4281] ? __raw_spin_lock_init+0x41/0x100 [ 1226.905379][ T4281] ? klist_children_get+0x50/0x50 [ 1226.910895][ T4281] ? get_device_parent+0x121/0x3e0 [ 1226.916077][ T4281] device_add+0x470/0x1050 [ 1226.920566][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 1226.925625][ T4281] le_conn_complete_evt+0xfac/0x15c0 [ 1226.930992][ T4281] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1226.937325][ T4281] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1226.943112][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 1226.948371][ T4281] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1226.954070][ T4281] ? hci_remote_host_features_evt+0x230/0x230 [ 1226.960201][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 1226.965831][ T4281] ? hci_remote_host_features_evt+0x230/0x230 [ 1226.972049][ T4281] hci_event_packet+0x7b3/0x1290 [ 1226.977064][ T4281] ? lock_chain_count+0x20/0x20 [ 1226.982164][ T4281] ? hci_conn_valid+0x220/0x220 [ 1226.987085][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1226.993043][ T4281] ? kcov_remote_start+0x50f/0x810 [ 1226.998215][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 1227.003478][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 1227.008829][ T4281] hci_rx_work+0x3eb/0xd40 [ 1227.013306][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 1227.018225][ T4281] ? process_one_work+0x7b4/0x1160 [ 1227.023413][ T4281] process_one_work+0x8ab/0x1160 [ 1227.028431][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 1227.034215][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1227.039296][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1227.045012][ T4281] ? wq_worker_running+0x97/0x190 [ 1227.050109][ T4281] worker_thread+0xaf5/0x12a0 [ 1227.054875][ T4281] kthread+0x29d/0x330 [ 1227.059073][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 1227.064146][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 1227.068829][ T4281] ret_from_fork+0x1f/0x30 [ 1227.073345][ T4281] [ 1227.309927][ T26] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1227.368930][ T26] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1227.462348][ T4281] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1227.475915][ T4281] Bluetooth: hci3: failed to register connection device [ 1227.495774][ T26] usb 7-1: can't read configurations, error -71 [ 1228.672800][T12235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1229.390997][T12246] zero sized request [ 1229.560756][ T4281] Bluetooth: hci3: command 0x2016 tx timeout [ 1230.442417][T12252] loop8: detected capacity change from 0 to 512 [ 1231.576478][T12252] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1231.696726][T12252] EXT4-fs (loop8): 1 truncate cleaned up [ 1231.703321][T12252] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1232.520165][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1233.238622][T12275] loop8: detected capacity change from 0 to 128 [ 1233.253584][ T4510] team0 (unregistering): Port device team_slave_1 removed [ 1233.333308][T12275] FAT-fs (loop8): invalid media value (0x07) [ 1233.456280][T12275] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1233.955738][T12280] loop8: detected capacity change from 0 to 2048 [ 1233.967606][T12280] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1234.487986][ T4510] team0 (unregistering): Port device team_slave_0 removed [ 1234.645834][T12286] loop8: detected capacity change from 0 to 512 [ 1234.732680][T12286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1234.867257][T12290] input: syz1 as /devices/virtual/input/input12 [ 1235.093031][T12286] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 1235.263093][T12286] System zones: 0-2, 18-18, 34-35 [ 1235.518131][T12286] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1235.576371][T12286] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1235.587340][T12281] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1235.674198][ T4510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.592176][ T27] audit: type=1800 audit(1789191158.036:96): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1456" name="bus" dev="loop8" ino=19 res=0 errno=0 [ 1236.773155][ T4510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.965517][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1238.028549][T12309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1239.092460][T12314] loop8: detected capacity change from 0 to 512 [ 1239.194788][T12314] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1239.258451][T12314] EXT4-fs (loop8): 1 truncate cleaned up [ 1239.264204][T12314] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1241.137464][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1241.237707][T12334] loop6: detected capacity change from 0 to 128 [ 1241.258545][T12335] loop8: detected capacity change from 0 to 128 [ 1241.267042][T12335] FAT-fs (loop8): invalid media value (0x07) [ 1241.273090][T12335] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1241.422787][T12334] FAT-fs (loop6): invalid media value (0x07) [ 1241.437199][T12334] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1243.234944][T12347] loop6: detected capacity change from 0 to 2048 [ 1243.245683][T12347] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1244.788688][ T4510] bond0 (unregistering): Released all slaves [ 1244.898555][T10832] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1245.861106][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1469'. [ 1246.093699][T12037] team0: Port device team_slave_1 added [ 1246.186044][ T4509] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1246.600363][T12037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.682422][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.709945][T12037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.722921][T12037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.747889][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.805180][T12037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.913151][T12037] device hsr_slave_0 entered promiscuous mode [ 1246.950621][T12037] device hsr_slave_1 entered promiscuous mode [ 1247.208561][T12376] loop8: detected capacity change from 0 to 512 [ 1247.438480][T12376] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1247.852392][T12376] EXT4-fs (loop8): 1 truncate cleaned up [ 1247.912260][T12376] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1248.542134][ T4509] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1248.596208][ T4509] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1248.666117][ T4509] usb 7-1: can't read configurations, error -71 [ 1249.071326][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1249.255517][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.274289][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.270576][T12393] loop8: detected capacity change from 0 to 128 [ 1250.325490][T12393] FAT-fs (loop8): invalid media value (0x07) [ 1250.379484][T11732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1250.409864][T12393] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1250.444415][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1250.460148][T11732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1250.470233][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1250.480474][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1250.488184][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1251.653123][T12413] zram: Cannot change disksize for initialized device [ 1251.687332][T12394] chnl_net:caif_netlink_parms(): no params data found [ 1252.694972][T12421] loop8: detected capacity change from 0 to 2048 [ 1252.706675][T12421] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1252.778540][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 1253.728642][T12394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.785461][T12394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.838392][T12394] device bridge_slave_0 entered promiscuous mode [ 1253.915303][T12394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.956211][T12394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.987793][T12394] device bridge_slave_1 entered promiscuous mode [ 1254.179253][T12037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1254.859495][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 1255.347474][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1255.359117][ T4290] CPU: 0 PID: 4290 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 1255.366750][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1255.377040][ T4290] Workqueue: hci5 hci_rx_work [ 1255.381795][ T4290] Call Trace: [ 1255.385202][ T4290] [ 1255.388195][ T4290] dump_stack_lvl+0x188/0x24e [ 1255.393104][ T4290] ? show_regs_print_info+0x12/0x12 [ 1255.398480][ T4290] ? load_image+0x410/0x410 [ 1255.403086][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 1255.408287][ T4290] ? __lock_acquire+0x7c40/0x7c40 [ 1255.413651][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 1255.418427][ T4290] ? mark_lock+0x94/0x320 [ 1255.422821][ T4290] ? do_raw_spin_unlock+0x11d/0x230 [ 1255.428165][ T4290] kobject_add_internal+0x617/0xca0 [ 1255.433427][ T4290] kobject_add+0x160/0x230 [ 1255.437917][ T4290] ? kobject_init+0x1c0/0x1c0 [ 1255.442687][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 1255.448029][ T4290] ? klist_children_get+0x50/0x50 [ 1255.453171][ T4290] ? get_device_parent+0x121/0x3e0 [ 1255.458347][ T4290] device_add+0x470/0x1050 [ 1255.462867][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 1255.467908][ T4290] le_conn_complete_evt+0xfac/0x15c0 [ 1255.473261][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1255.479571][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1255.485285][ T4290] ? mutex_unlock+0x10/0x10 [ 1255.489849][ T4290] ? skb_pull_data+0xec/0x1f0 [ 1255.494596][ T4290] hci_le_conn_complete_evt+0x183/0x440 [ 1255.500387][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 1255.506502][ T4290] hci_event_packet+0x7b3/0x1290 [ 1255.511500][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1255.517223][ T4290] ? hci_conn_valid+0x220/0x220 [ 1255.522169][ T4290] ? kcov_remote_start+0x1b3/0x810 [ 1255.527804][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 1255.533074][ T4290] hci_rx_work+0x3eb/0xd40 [ 1255.537569][ T4290] ? process_one_work+0x7b4/0x1160 [ 1255.542733][ T4290] process_one_work+0x8ab/0x1160 [ 1255.547747][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 1255.553535][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1255.558670][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1255.564283][ T4290] ? wq_worker_running+0x97/0x190 [ 1255.569382][ T4290] worker_thread+0xaf5/0x12a0 [ 1255.574140][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1255.580228][ T4290] kthread+0x29d/0x330 [ 1255.584359][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 1255.589433][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 1255.594514][ T4290] ret_from_fork+0x1f/0x30 [ 1255.599007][ T4290] [ 1255.629356][ T4290] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1255.645070][ T4290] Bluetooth: hci5: failed to register connection device [ 1255.834705][T12394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.870636][T12394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.933314][T12394] team0: Port device team_slave_0 added [ 1255.960601][T12394] team0: Port device team_slave_1 added [ 1255.997820][T12394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.005092][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.039739][T12394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.126816][T12445] loop6: detected capacity change from 0 to 8 [ 1256.151110][T12447] loop8: detected capacity change from 0 to 512 [ 1256.170894][T12445] unable to read inode lookup table [ 1256.200921][T12447] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1256.620906][T12447] EXT4-fs (loop8): 1 truncate cleaned up [ 1256.656086][T12447] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1256.688447][T12037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1256.919521][T12394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.926798][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 1256.983943][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.053211][T12394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.554310][T12443] Process accounting resumed [ 1257.725993][ T4290] Bluetooth: hci5: command 0x2016 tx timeout [ 1257.738800][T12037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1257.869320][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1259.086241][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 1259.253214][T12394] device hsr_slave_0 entered promiscuous mode [ 1260.026407][T12394] device hsr_slave_1 entered promiscuous mode [ 1260.033644][T12394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1260.107559][T12394] Cannot create hsr debugfs directory [ 1262.387610][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1262.399193][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1262.409937][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1262.420673][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1262.428353][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1262.437991][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1264.526033][T11732] Bluetooth: hci1: command 0x0409 tx timeout [ 1266.485662][T12506] loop8: detected capacity change from 0 to 512 [ 1266.595948][T11732] Bluetooth: hci1: command 0x041b tx timeout [ 1266.623795][T12506] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1266.973150][T12506] EXT4-fs (loop8): 1 truncate cleaned up [ 1267.037410][T12506] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1268.276889][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1268.796170][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 1269.301818][T12489] chnl_net:caif_netlink_parms(): no params data found [ 1269.443182][T12531] loop6: detected capacity change from 0 to 128 [ 1269.490330][T12531] FAT-fs (loop6): invalid media value (0x07) [ 1269.497067][T12531] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1269.652612][T12394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1269.985167][T12394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1272.485971][T12542] loop6: detected capacity change from 0 to 2048 [ 1272.494809][T12542] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1275.643184][T11732] Bluetooth: hci1: command 0x0419 tx timeout [ 1276.043204][T12394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1276.999071][T12554] Cannot find add_set index 0 as target [ 1277.063417][T12394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1277.119621][T12555] overlayfs: conflicting options: nfs_export=on,index=off [ 1277.232969][T12552] tipc: Enabling of bearer rejected, failed to enable media [ 1277.530392][T12489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.553735][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.570279][T12489] device bridge_slave_0 entered promiscuous mode [ 1277.829870][T12562] UBIFS error (pid: 12562): cannot open "(null)", error -22 [ 1278.312374][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.327278][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.336453][T12489] device bridge_slave_1 entered promiscuous mode [ 1279.676057][T11732] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1280.054515][T12489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.900142][T12489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.025730][T12489] team0: Port device team_slave_0 added [ 1282.700277][T12489] team0: Port device team_slave_1 added [ 1282.832257][T12394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.958802][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1283.146823][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1283.161125][T12394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.232371][T12489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.259702][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1283.303010][T12593] Process accounting resumed [ 1283.316215][T12489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.367353][ T4438] device hsr_slave_0 left promiscuous mode [ 1283.375541][ T4438] device hsr_slave_1 left promiscuous mode [ 1283.394601][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.440065][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.384703][ T4438] device bridge_slave_1 left promiscuous mode [ 1284.415800][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.657326][ T4438] device bridge_slave_0 left promiscuous mode [ 1284.663646][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.016073][ T4357] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 1286.178010][ T4438] team0 (unregistering): Port device team_slave_1 removed [ 1286.254981][ T4438] team0 (unregistering): Port device team_slave_0 removed [ 1286.399845][ T4438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.452794][ T4438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.368195][ T4438] bond0 (unregistering): Released all slaves [ 1287.510336][ T4357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1287.519227][ T4357] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1287.527006][ T4357] usb 3-1: can't read configurations, error -71 [ 1287.900438][T12626] autofs4:pid:12626:autofs_fill_super: called with bogus options [ 1288.877027][ T4357] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 1289.364853][T12489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.375342][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.402717][T12489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.425216][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1289.434972][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1289.476461][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.483775][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.645527][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1289.664207][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1289.673684][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.680915][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.726371][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1289.735864][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1289.745276][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1289.918915][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1289.929497][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1290.863517][ T4357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1291.116131][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1291.336176][ T7] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 1291.347075][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1291.416157][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1291.502501][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1291.566629][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1291.675938][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1291.747694][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1291.905031][T12489] device hsr_slave_0 entered promiscuous mode [ 1291.951680][T12489] device hsr_slave_1 entered promiscuous mode [ 1292.039438][T12394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.205160][ T7] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1293.686756][ T4357] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1293.694480][ T4357] usb 3-1: can't read configurations, error -71 [ 1293.701766][ T4357] usb usb3-port1: attempt power cycle [ 1294.046289][ T7] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1294.055318][ T7] usb 9-1: can't read configurations, error -71 [ 1294.360267][T12655] device dummy0 entered promiscuous mode [ 1294.476737][T12664] loop8: detected capacity change from 0 to 128 [ 1294.503802][T12664] FAT-fs (loop8): Directory bread(block 414) failed [ 1294.510774][T12664] FAT-fs (loop8): Directory bread(block 415) failed [ 1294.517640][T12664] FAT-fs (loop8): Directory bread(block 416) failed [ 1294.524413][T12664] FAT-fs (loop8): Directory bread(block 417) failed [ 1294.531254][T12664] FAT-fs (loop8): Directory bread(block 418) failed [ 1294.538062][T12664] FAT-fs (loop8): Directory bread(block 419) failed [ 1294.544897][T12664] FAT-fs (loop8): Directory bread(block 420) failed [ 1294.551736][T12664] FAT-fs (loop8): Directory bread(block 421) failed [ 1298.226038][ T9618] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1298.660577][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1298.684415][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1298.720814][T12394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.023366][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1299.214014][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1299.238076][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1299.259904][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1299.288464][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1299.324786][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1299.394484][T12394] device veth0_vlan entered promiscuous mode [ 1299.581060][T12394] device veth1_vlan entered promiscuous mode [ 1299.670623][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1299.879274][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1299.911964][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1300.648769][T12394] device veth0_macvtap entered promiscuous mode [ 1300.771674][ T9618] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1300.786873][ T9618] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1300.794529][ T9618] usb 3-1: can't read configurations, error -71 [ 1300.804695][T12394] device veth1_macvtap entered promiscuous mode [ 1300.832753][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1300.927971][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1300.980782][T12489] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1301.021282][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.087008][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.370975][T12706] using random self ethernet address [ 1301.408818][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.460013][T12706] using random host ethernet address [ 1301.486156][ T9618] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1301.574559][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.858120][T12394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.885598][T12489] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1301.915444][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1301.930077][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1302.040491][T12489] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1302.087095][T12489] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1302.158849][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.180274][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.470893][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.660053][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.792309][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.849939][T12718] loop6: detected capacity change from 0 to 2048 [ 1302.860926][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.926742][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.937675][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.949472][T12394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1302.960768][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1303.002515][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1303.014126][T12394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.023321][T12394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.040631][T12718] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1303.063662][T12394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.073412][T12718] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.101497][T12394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.496967][T12489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.579269][T12726] fs-verity: sha512 using implementation "sha512-avx2" [ 1303.844395][ T9618] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1303.869701][ T9618] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1303.895112][T12489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.012779][ T9618] usb 3-1: can't read configurations, error -71 [ 1304.019695][ T9618] usb usb3-port1: attempt power cycle [ 1304.041382][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1304.053716][ T9713] EXT4-fs (loop6): unmounting filesystem. [ 1304.066999][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1304.536312][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1304.560679][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1537'. [ 1304.651041][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1304.808820][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.816080][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.009389][ T4510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.065282][ T4510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.137186][ T27] audit: type=1800 audit(1789191226.547:97): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1539" name="zoned" dev="configfs" ino=64624 res=0 errno=0 [ 1305.170831][ T27] audit: type=1800 audit(1789191226.557:98): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1539" name="zone_nr_conv" dev="configfs" ino=64625 res=0 errno=0 [ 1305.189859][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1305.246971][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1305.366265][ T27] audit: type=1800 audit(1789191226.817:99): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1539" name="zoned" dev="configfs" ino=63783 res=0 errno=0 [ 1305.433114][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1305.557587][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1305.586285][ T27] audit: type=1800 audit(1789191226.847:100): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1539" name="power" dev="configfs" ino=63784 res=0 errno=0 [ 1305.691663][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.698976][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.029484][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1306.813376][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1307.030644][ T4576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.030922][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1307.074623][ T4576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.148418][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1307.363234][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1307.373255][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1307.394516][T12489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1307.407053][T12489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1307.426851][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1307.498498][T12758] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1542'. [ 1307.507684][T12758] nbd: must specify at least one socket [ 1307.635383][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1307.798598][ T9618] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 1307.948623][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1308.186628][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1308.195964][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1308.204857][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1308.221235][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1308.913926][T12765] loop6: detected capacity change from 0 to 8 [ 1309.803201][T12769] SQUASHFS error: Failed to read block 0x4de: -5 [ 1309.810123][T12769] SQUASHFS error: Failed to read block 0x4de: -5 [ 1309.886355][ T27] audit: type=1800 audit(1789191231.267:101): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1543" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 1310.266993][ T9618] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1310.316203][ T9618] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1310.323917][ T9618] usb 9-1: can't read configurations, error -71 [ 1310.616138][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.622775][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.236970][T11732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1312.252446][T11732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1312.270395][T11732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1312.281197][T11732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1312.289828][T11732] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1312.299167][T11732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1313.937296][T12790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1314.356079][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 1314.530347][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1314.557725][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1314.782751][ T4494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.874249][T12489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.047993][ T4494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.315094][ T4494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.629405][ T4494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.954793][T12794] chnl_net:caif_netlink_parms(): no params data found [ 1316.839225][T12828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1316.915917][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 1318.413761][T12794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.485262][T12794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.562535][T12794] device bridge_slave_0 entered promiscuous mode [ 1318.649704][T12848] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1318.996009][T11732] Bluetooth: hci3: command 0x040f tx timeout [ 1321.076161][T11732] Bluetooth: hci3: command 0x0419 tx timeout [ 1322.220537][T12794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.332100][T12794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.547266][T12794] device bridge_slave_1 entered promiscuous mode [ 1323.643129][T12794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.717980][T12794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.927173][T12794] team0: Port device team_slave_0 added [ 1323.991993][T12794] team0: Port device team_slave_1 added [ 1326.891540][T12794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.923962][T12794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.984573][T12794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.072754][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1327.094446][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1327.103903][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1327.114773][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1327.123415][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1327.131486][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1327.468820][T12882] bio_check_eod: 3121 callbacks suppressed [ 1327.468937][T12882] syz.6.1558: attempt to access beyond end of device [ 1327.468937][T12882] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1327.488404][T12882] gfs2: error 10 reading superblock [ 1328.361439][T12887] overlayfs: missing 'lowerdir' [ 1328.505381][T12794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.547008][T12794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.769716][T12794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.156205][T11732] Bluetooth: hci1: command 0x0409 tx timeout [ 1329.199323][T12794] device hsr_slave_0 entered promiscuous mode [ 1329.211754][T12794] device hsr_slave_1 entered promiscuous mode [ 1329.231934][T12794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1329.239930][T12794] Cannot create hsr debugfs directory [ 1331.211522][T12899] null_blk: zone_size must be power-of-two [ 1331.235987][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 1332.226007][ T3912] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 1333.316087][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 1334.624224][ T3912] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1334.718939][T12876] chnl_net:caif_netlink_parms(): no params data found [ 1335.395917][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 1335.635465][ T4494] device hsr_slave_0 left promiscuous mode [ 1335.638415][ T3912] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1335.665537][ T3912] usb 9-1: can't read configurations, error -71 [ 1335.679688][T12941] loop8: detected capacity change from 0 to 512 [ 1335.693993][ T4494] device hsr_slave_1 left promiscuous mode [ 1335.706466][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.715480][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.744961][T12941] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1335.758158][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.765688][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.775151][ T4494] device bridge_slave_1 left promiscuous mode [ 1335.782554][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.795636][T12941] EXT4-fs (loop8): 1 truncate cleaned up [ 1335.804506][T12941] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1335.883720][ T4494] device bridge_slave_0 left promiscuous mode [ 1335.894383][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.784368][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1336.874878][ T4494] device veth1_macvtap left promiscuous mode [ 1336.902524][ T4494] device veth0_macvtap left promiscuous mode [ 1336.910141][ T4494] device veth1_vlan left promiscuous mode [ 1336.926028][ T4494] device veth0_vlan left promiscuous mode [ 1336.947384][T12962] loop8: detected capacity change from 0 to 256 [ 1336.995336][T12962] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 1337.203476][T12965] overlayfs: missing 'lowerdir' [ 1338.408949][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1338.419335][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1338.427029][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1338.437224][ T4281] Workqueue: hci5 hci_rx_work [ 1338.442055][ T4281] Call Trace: [ 1338.445374][ T4281] [ 1338.448345][ T4281] dump_stack_lvl+0x188/0x24e [ 1338.453116][ T4281] ? show_regs_print_info+0x12/0x12 [ 1338.458391][ T4281] ? load_image+0x410/0x410 [ 1338.462963][ T4281] sysfs_create_dir_ns+0x26a/0x290 [ 1338.468131][ T4281] ? __lock_acquire+0x7c40/0x7c40 [ 1338.473215][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 1338.478041][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 1338.483298][ T4281] kobject_add_internal+0x617/0xca0 [ 1338.488556][ T4281] kobject_add+0x160/0x230 [ 1338.493088][ T4281] ? kobject_init+0x1c0/0x1c0 [ 1338.497923][ T4281] ? __raw_spin_lock_init+0x41/0x100 [ 1338.503527][ T4281] ? klist_children_get+0x50/0x50 [ 1338.508637][ T4281] ? get_device_parent+0x121/0x3e0 [ 1338.514032][ T4281] device_add+0x470/0x1050 [ 1338.518518][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 1338.523612][ T4281] le_conn_complete_evt+0xfac/0x15c0 [ 1338.529010][ T4281] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1338.535311][ T4281] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1338.540999][ T4281] ? mutex_unlock+0x10/0x10 [ 1338.546026][ T4281] ? skb_pull_data+0xec/0x1f0 [ 1338.550754][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 1338.556365][ T4281] ? hci_remote_host_features_evt+0x230/0x230 [ 1338.562490][ T4281] hci_event_packet+0x7b3/0x1290 [ 1338.567480][ T4281] ? lock_chain_count+0x20/0x20 [ 1338.572385][ T4281] ? hci_conn_valid+0x220/0x220 [ 1338.577276][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1338.583225][ T4281] ? kcov_remote_start+0x50f/0x810 [ 1338.588469][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.593719][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 1338.598990][ T4281] hci_rx_work+0x3eb/0xd40 [ 1338.603464][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 1338.608375][ T4281] ? process_one_work+0x7b4/0x1160 [ 1338.614062][ T4281] process_one_work+0x8ab/0x1160 [ 1338.619269][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 1338.624990][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1338.630069][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1338.635783][ T4281] ? wq_worker_running+0x97/0x190 [ 1338.641149][ T4281] worker_thread+0xaf5/0x12a0 [ 1338.645907][ T4281] kthread+0x29d/0x330 [ 1338.650288][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 1338.655384][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 1338.660032][ T4281] ret_from_fork+0x1f/0x30 [ 1338.664522][ T4281] [ 1338.673053][ T4281] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1338.687061][ T4281] Bluetooth: hci5: failed to register connection device [ 1340.766100][T11732] Bluetooth: hci5: command 0x2016 tx timeout [ 1341.305346][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 1342.233201][T12986] blktrace: Concurrent blktraces are not allowed on loop4 [ 1342.861439][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 1342.976130][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.068293][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.524090][T12990] Cannot find add_set index 0 as target [ 1343.621828][T12991] overlayfs: conflicting options: nfs_export=on,index=off [ 1344.496643][ T4494] bond0 (unregistering): Released all slaves [ 1349.010844][T12876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.076127][T12876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.135603][T12876] device bridge_slave_0 entered promiscuous mode [ 1349.168083][T12794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1349.229167][T12876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.244590][T12876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.264669][T12876] device bridge_slave_1 entered promiscuous mode [ 1349.276699][T12794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1349.468100][T12794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1349.607303][T12794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1350.373108][T12876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.424394][T12876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.523427][T12876] team0: Port device team_slave_0 added [ 1350.552001][T12876] team0: Port device team_slave_1 added [ 1352.163535][T12876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.213844][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.390684][T13043] nbd: must specify at least one socket [ 1352.763082][T12876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.784750][T12876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.792186][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.822077][T12876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.896163][ T9618] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 1353.507254][T12876] device hsr_slave_0 entered promiscuous mode [ 1353.523175][T12876] device hsr_slave_1 entered promiscuous mode [ 1353.556063][T12876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1353.563729][T12876] Cannot create hsr debugfs directory [ 1353.707263][T12794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.794086][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1353.809616][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1353.854675][T12794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.932160][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1353.966744][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1353.978891][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.986123][ T4589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.081702][T13060] zram: Cannot change disksize for initialized device [ 1354.180269][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1354.622955][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1354.647818][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1354.725412][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.732932][ T4576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.793289][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1354.812619][ T9618] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1354.818863][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1354.843435][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1354.861598][ T9618] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1354.877537][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1354.885974][ T9618] usb 3-1: can't read configurations, error -71 [ 1354.953652][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1354.979548][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1355.007628][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1355.026888][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1355.056581][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1355.069199][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1355.088706][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1355.167972][T12794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1356.065157][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1356.074001][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1356.089319][T12794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.221087][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1356.231851][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1356.295384][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1356.310156][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1356.321682][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1356.330589][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1356.341766][T12794] device veth0_vlan entered promiscuous mode [ 1356.404495][T12794] device veth1_vlan entered promiscuous mode [ 1356.534483][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1356.548018][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1356.564164][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1356.574189][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1356.596534][T12794] device veth0_macvtap entered promiscuous mode [ 1356.608691][ T4494] device hsr_slave_0 left promiscuous mode [ 1356.617797][ T4494] device hsr_slave_1 left promiscuous mode [ 1356.624661][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.633243][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.646583][ T4494] device bridge_slave_1 left promiscuous mode [ 1356.653040][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.670384][ T4494] device bridge_slave_0 left promiscuous mode [ 1356.682366][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.161731][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 1357.252085][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 1357.315595][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.382105][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.785326][ T4494] bond0 (unregistering): Released all slaves [ 1357.918684][T12794] device veth1_macvtap entered promiscuous mode [ 1357.927309][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1357.938355][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1357.983061][T12794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.994607][T12794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.004697][T12794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.017155][T12794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.028945][T12794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.065469][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1358.091734][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1358.105103][T12794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.136727][T12794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.152868][T12794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.164322][T12794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.174746][T12794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.185606][T12794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.197334][T12794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.209009][T12794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.221034][T12794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.236989][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1358.249946][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1358.265515][T12794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.284846][T12794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.294430][T12794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.312480][T12794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.421164][T12876] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1358.441824][T12876] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1358.495073][T12876] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1358.563918][T12876] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1358.630940][ T4589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.659655][ T4589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.671942][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1358.719322][ T4589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.737037][ T4589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.761629][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1358.871816][T12876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.944518][T12876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.978164][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1359.039590][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1360.641643][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1360.686816][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1360.696543][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.703697][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.711707][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1360.759246][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1360.810424][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1360.838213][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.845465][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.092975][T13124] nbd: must specify at least one socket [ 1361.852018][T13121] Cannot find add_set index 0 as target [ 1361.966533][T13125] overlayfs: conflicting options: nfs_export=on,index=off [ 1361.969224][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1362.034557][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1362.070329][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1362.095328][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1362.125145][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1362.163118][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1362.175967][ T6538] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 1362.219658][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1362.452055][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1362.461160][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1362.469842][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1362.479086][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1362.521252][T12876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1363.908991][T13145] nbd: must specify at least one socket [ 1363.963699][ T6538] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1364.343806][ T6538] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1364.351566][ T6538] usb 9-1: can't read configurations, error -71 [ 1366.161244][ T9618] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 1366.588581][T13163] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1604'. [ 1368.201575][ T9618] usb 3-1: device descriptor read/all, error -71 [ 1368.255926][ T6538] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 1368.436890][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1368.444515][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1368.480058][T12876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.265072][T13180] zero sized request [ 1369.443265][ T6538] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1370.137933][ T6538] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1370.156198][ T6538] usb 9-1: can't read configurations, error -71 [ 1370.165780][ T6538] usb usb9-port1: attempt power cycle [ 1370.498240][T13189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1609'. [ 1370.728728][T13188] loop5: detected capacity change from 0 to 6 [ 1370.737938][T13188] Dev loop5: unable to read RDB block 6 [ 1370.743758][T13188] loop5: unable to read partition table [ 1370.750239][T13188] loop5: partition table beyond EOD, truncated [ 1370.757880][T13188] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1371.035915][ T4280] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 1372.047821][T13201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1601'. [ 1372.090908][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.105068][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.830378][ T4280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1373.850820][ T4280] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1373.886009][ T4280] usb 3-1: can't read configurations, error -71 [ 1373.981348][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1374.007066][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1374.144153][T13212] loop8: detected capacity change from 0 to 512 [ 1374.147355][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1374.158679][T13212] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1374.898218][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1374.938096][ T6538] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1374.958912][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1374.967708][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1374.988323][T12876] device veth0_vlan entered promiscuous mode [ 1375.033948][T13212] EXT4-fs (loop8): 1 truncate cleaned up [ 1375.066143][T13212] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1375.096100][T12876] device veth1_vlan entered promiscuous mode [ 1375.786626][T13223] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1606'. [ 1376.012436][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1376.021842][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1376.035719][T12876] device veth0_macvtap entered promiscuous mode [ 1376.044474][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1376.079199][T12876] device veth1_macvtap entered promiscuous mode [ 1376.125961][ T6538] usb 7-1: device descriptor read/64, error -71 [ 1376.146203][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.196107][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.206428][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.234413][T13219] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1376.246224][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.286338][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1376.315953][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.341608][T12876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.362952][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1376.388783][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1376.426449][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1376.456117][ T6538] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 1376.469251][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.571592][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.662501][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.674899][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.715983][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.735867][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.832528][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.844754][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.854943][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1376.865674][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1376.882942][T12876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.638818][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1377.707364][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1377.771639][T12876] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.781277][T12876] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.797785][T12876] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.818503][T12876] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.146484][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.154479][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.219142][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1378.573540][ T6538] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1378.606094][ T6538] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1378.615473][ T6538] usb 7-1: can't read configurations, error -71 [ 1378.622391][ T6538] usb usb7-port1: attempt power cycle [ 1379.726537][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1613'. [ 1380.425722][T13261] loop6: detected capacity change from 0 to 128 [ 1380.435329][ T4438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.544492][ T4438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.709401][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1381.046054][T11451] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 1383.540101][T11451] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1383.548752][T11451] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1383.557553][T11451] usb 9-1: can't read configurations, error -71 [ 1383.870163][T13284] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1384.571766][T13288] loop8: detected capacity change from 0 to 512 [ 1384.595504][T13288] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1384.824212][T13288] EXT4-fs (loop8): 1 truncate cleaned up [ 1385.681449][T13288] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1386.751107][T13309] loop9: detected capacity change from 0 to 1024 [ 1389.421775][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 1389.439523][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 1389.450266][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 1389.463714][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 1389.475573][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 1392.013980][ T8628] EXT4-fs (loop8): unmounting filesystem. [ 1395.039434][T13336] zero sized request [ 1397.823646][T13358] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1617'. [ 1398.166028][ T4357] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1399.738599][ T4357] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1399.797865][ T4357] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1399.909131][ T4357] usb 7-1: can't read configurations, error -71 [ 1400.108997][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1631'. [ 1400.303872][T13371] Cannot find add_set index 0 as target [ 1402.457282][T11732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1402.470543][T11732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1402.479534][T11732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1402.504480][T11732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1402.512483][T11732] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1402.520479][T11732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1404.607981][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 1406.686023][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 1407.301045][T13380] chnl_net:caif_netlink_parms(): no params data found [ 1407.636933][T13430] loop8: detected capacity change from 0 to 1764 [ 1408.118503][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 1408.137383][T13433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.146176][T13433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.161678][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1408.173340][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1408.180975][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1408.191091][ T4281] Workqueue: hci1 hci_rx_work [ 1408.195855][ T4281] Call Trace: [ 1408.199186][ T4281] [ 1408.202163][ T4281] dump_stack_lvl+0x188/0x24e [ 1408.206923][ T4281] ? show_regs_print_info+0x12/0x12 [ 1408.212196][ T4281] ? load_image+0x410/0x410 [ 1408.216791][ T4281] sysfs_create_dir_ns+0x26a/0x290 [ 1408.221975][ T4281] ? __lock_acquire+0x7c40/0x7c40 [ 1408.227065][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 1408.231820][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 1408.237097][ T4281] kobject_add_internal+0x617/0xca0 [ 1408.242381][ T4281] kobject_add+0x160/0x230 [ 1408.246874][ T4281] ? kobject_init+0x1c0/0x1c0 [ 1408.251704][ T4281] ? __raw_spin_lock_init+0x41/0x100 [ 1408.257049][ T4281] ? klist_children_get+0x50/0x50 [ 1408.262145][ T4281] ? get_device_parent+0x121/0x3e0 [ 1408.267331][ T4281] device_add+0x470/0x1050 [ 1408.271908][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 1408.276959][ T4281] le_conn_complete_evt+0xfac/0x15c0 [ 1408.282323][ T4281] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1408.288638][ T4281] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1408.294344][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 1408.299595][ T4281] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1408.305286][ T4281] ? hci_remote_host_features_evt+0x230/0x230 [ 1408.311408][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 1408.317023][ T4281] ? hci_remote_host_features_evt+0x230/0x230 [ 1408.323141][ T4281] hci_event_packet+0x7b3/0x1290 [ 1408.328135][ T4281] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1408.333831][ T4281] ? hci_conn_valid+0x220/0x220 [ 1408.338765][ T4281] ? kcov_remote_start+0x1b3/0x810 [ 1408.344027][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 1408.349457][ T4281] hci_rx_work+0x3eb/0xd40 [ 1408.353951][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 1408.358859][ T4281] ? process_one_work+0x7b4/0x1160 [ 1408.364018][ T4281] process_one_work+0x8ab/0x1160 [ 1408.369020][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 1408.374706][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1408.379786][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1408.385404][ T4281] ? wq_worker_running+0x97/0x190 [ 1408.390503][ T4281] worker_thread+0xaf5/0x12a0 [ 1408.395260][ T4281] kthread+0x29d/0x330 [ 1408.399376][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 1408.404472][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 1408.409118][ T4281] ret_from_fork+0x1f/0x30 [ 1408.413610][ T4281] [ 1408.428524][T12875] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1408.705972][ T4281] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1408.721247][ T4281] Bluetooth: hci1: failed to register connection device [ 1408.755899][T11732] Bluetooth: hci2: command 0x040f tx timeout [ 1408.795733][T13444] loop9: detected capacity change from 0 to 512 [ 1409.578415][T13444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1409.587730][T13380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.717082][T13380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.759793][T13444] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 1409.782667][T13444] System zones: 0-2, 18-18, 34-35 [ 1409.824064][T13380] device bridge_slave_0 entered promiscuous mode [ 1409.999176][T13457] loop8: detected capacity change from 0 to 128 [ 1410.060998][T13444] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1410.061711][T13457] FAT-fs (loop8): invalid media value (0x07) [ 1410.077870][T13380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.079770][T13444] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.115932][T13457] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1410.126449][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.136894][T13380] device bridge_slave_1 entered promiscuous mode [ 1410.176473][T13380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.204022][T13380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.245214][T13457] loop8: detected capacity change from 0 to 2048 [ 1410.252596][T13457] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 1410.310201][T13380] team0: Port device team_slave_0 added [ 1410.319478][T13380] team0: Port device team_slave_1 added [ 1410.347407][T13380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.371534][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.533568][T12875] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1411.165086][ T27] audit: type=1800 audit(1789191332.527:102): pid=13462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1647" name="bus" dev="loop9" ino=19 res=0 errno=0 [ 1411.205877][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 1411.398400][T12876] EXT4-fs (loop9): unmounting filesystem. [ 1411.409623][T13380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.786134][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1651'. [ 1412.093983][T13474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'. [ 1412.144741][T13380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.283772][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.382205][T13380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.498589][T13380] device hsr_slave_0 entered promiscuous mode [ 1412.556229][ T4280] usb 9-1: new low-speed USB device number 30 using dummy_hcd [ 1412.556290][ T4322] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 1412.740445][T13479] overlayfs: missing 'lowerdir' [ 1413.374543][T13380] device hsr_slave_1 entered promiscuous mode [ 1413.928464][ T4290] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1414.560520][ T4322] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1414.675016][ T4280] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1414.690821][ T4280] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1414.699146][ T4322] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1414.706849][ T4280] usb 9-1: can't read configurations, error -71 [ 1414.713606][ T4322] usb 3-1: can't read configurations, error -71 [ 1416.438216][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1660'. [ 1416.915951][ T4280] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 1417.228331][T13517] hub 8-0:1.0: USB hub found [ 1417.234298][T13517] hub 8-0:1.0: 1 port detected [ 1417.706601][ T4280] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1417.723928][ T4280] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1417.756471][ T4280] usb 9-1: can't read configurations, error -71 [ 1421.036720][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 1421.526160][T11451] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 1422.560278][T13562] loop9: detected capacity change from 0 to 256 [ 1422.722180][T13562] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 1423.011322][T13565] overlayfs: missing 'lowerdir' [ 1423.586337][T11451] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1423.601282][T11451] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1423.613517][T11451] usb 3-1: can't read configurations, error -71 [ 1423.709908][T13568] Bluetooth: MGMT ver 1.22 [ 1425.738401][T13380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1426.403702][T13380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1426.564839][T13380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1426.610013][T13380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1426.848445][T13380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.864256][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1426.874209][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1426.888191][T13380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.901881][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1426.914929][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1426.925073][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.932747][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.962525][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1426.972260][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1426.981657][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1426.991470][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.998674][ T9015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.008959][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1427.029194][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1427.038679][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1427.050646][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1427.068626][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1427.088411][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1427.100292][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1427.109506][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1427.119279][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1427.134032][T13380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1427.153398][T13380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1427.168114][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1427.188531][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1427.626796][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1427.634404][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1427.657450][T13380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.233063][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1428.243157][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1428.267547][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1428.277153][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1428.286300][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1428.294328][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1428.309186][T13380] device veth0_vlan entered promiscuous mode [ 1428.327440][T13380] device veth1_vlan entered promiscuous mode [ 1428.382211][T13380] device veth0_macvtap entered promiscuous mode [ 1428.395257][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1428.411983][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1428.422980][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1428.440153][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1428.457624][T13380] device veth1_macvtap entered promiscuous mode [ 1428.481190][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1428.497360][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1428.522708][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.545465][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.555581][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.574159][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.588382][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.610032][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.624443][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.638620][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.655217][T13380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.675849][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1428.684807][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1428.724480][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.743411][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.754207][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.773143][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.783926][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.802218][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.813783][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.825873][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.836173][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.847068][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.857218][T13380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.867753][T13380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.879407][T13380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.898172][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1428.908018][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1428.929659][T13380] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.954053][T13380] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.965203][T13380] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.979809][T13380] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.083020][ T4566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.096570][ T4566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.121439][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1429.143407][ T4494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.151751][ T4494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.161459][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1430.419177][T13641] loop5: detected capacity change from 0 to 6 [ 1430.433409][T13641] Dev loop5: unable to read RDB block 6 [ 1430.439377][T13641] loop5: unable to read partition table [ 1430.445816][T13641] loop5: partition table beyond EOD, truncated [ 1430.452192][T13641] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 104: Connection reset by peer) [ 1430.988241][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1685'. [ 1431.195364][T13649] loop5: detected capacity change from 0 to 512 [ 1431.966666][T13649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1432.077347][T13649] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 1432.085675][T13649] System zones: 0-2, 18-18, 34-35 [ 1432.126527][T13649] EXT4-fs: error -4 creating inode table initialization thread [ 1432.135470][T13649] EXT4-fs (loop5): mount failed [ 1433.481287][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.487812][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.585459][ T4566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.708418][ T4566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.790404][ T4566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.923796][ T4566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.277886][ T4566] device hsr_slave_0 left promiscuous mode [ 1435.284586][ T4566] device hsr_slave_1 left promiscuous mode [ 1435.292154][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.299972][ T4566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.308394][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.316368][ T4566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.324258][ T4566] device bridge_slave_1 left promiscuous mode [ 1435.330970][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.340363][ T4566] device bridge_slave_0 left promiscuous mode [ 1435.356019][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.393536][ T4566] device veth1_macvtap left promiscuous mode [ 1435.410029][ T4566] device veth0_macvtap left promiscuous mode [ 1435.423030][ T4566] device veth1_vlan left promiscuous mode [ 1435.430634][ T4566] device veth0_vlan left promiscuous mode [ 1436.486206][ T4566] team0 (unregistering): Port device team_slave_1 removed [ 1436.553253][ T4566] team0 (unregistering): Port device team_slave_0 removed [ 1436.620922][ T4566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.683413][ T4566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.177389][ T4566] bond0 (unregistering): Released all slaves [ 1437.934665][ T4566] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.020031][ T4566] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.104575][ T4566] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.191944][ T4566] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.480721][ T4566] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.581428][ T4566] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.718134][ T4566] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.828109][ T4566] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0