last executing test programs: 7m39.754162296s ago: executing program 0 (id=520): syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x10, 0x101000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x455, 0x8000008, r5, 0x0) fanotify_mark(r4, 0x7e, 0x800003a, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 7m38.238827864s ago: executing program 0 (id=523): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 7m37.085522591s ago: executing program 0 (id=524): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10414b2, &(0x7f00000012c0), 0xfe, 0x24e, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xfffffcef) sendmmsg$inet6(r3, &(0x7f0000003cc0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)={0x18, 0x18, 0xa01, 0x70bd2b, 0xfffffffc, {0x4}, [@nested={0x4, 0x18}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x54) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/162) semget$private(0x0, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 7m32.918935964s ago: executing program 0 (id=528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xfffff) 7m31.558835263s ago: executing program 0 (id=533): socket$inet(0x2, 0x1, 0x100) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r2, &(0x7f0000000040)=[{&(0x7f0000002240)="c3", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 7m26.069253763s ago: executing program 0 (id=543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x2, &(0x7f0000000080)=0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f00000000c0)="9a", 0x1}]) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) 7m9.075579681s ago: executing program 32 (id=543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x2, &(0x7f0000000080)=0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f00000000c0)="9a", 0x1}]) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) 4m20.459825879s ago: executing program 2 (id=891): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) close_range(r1, r1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r4, 0x26}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x101, 0x0) 4m19.768662849s ago: executing program 2 (id=894): r0 = socket$kcm(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94) 4m18.991969864s ago: executing program 2 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) umount2(0x0, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 4m16.777908763s ago: executing program 1 (id=896): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10414b2, &(0x7f00000012c0), 0xfe, 0x24e, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000e40004000000c17d38add725ab098300000000100000000000003ebef06daab787b2b91f17f2619ce35129c2369e03571f47e0ee36c52408491b901ce47eca63fc2f17ade69cd475249afc3a00000000000000008c5afaea8e07b31891acaed54e41bee035c4e13e53f3335fa71fd7042da5ac4aa55e6d7c40254634e1bb9f648afe543dd02f600b2d62067e53327b9bef82ac6b97957863371ef054caff093cb55a29e3e1bd3d6ca014764f58b714854c44"], 0x24, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xfffffcef) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c636f6465706167653d3835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c125f8030000000000009dba05feee081e91fc61a0fef5511251"], 0x1, 0x238, &(0x7f0000000740)="$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") msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/162) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) rename(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 4m16.774247013s ago: executing program 2 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x2008802, &(0x7f0000000480)=ANY=[@ANYBLOB="646d61736b3d30300e30303030303030303030303030303030303030312ca882a4615ef717bcb66e616d07000000000000007569643d2d5a4c88251b8864a2648dee23b8", @ANYRESHEX=0xee00, @ANYBLOB=',errors=remount-ro,namecase=1,iocharset=macroman,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=macceltic,allow_utime=00000000000000000003777,discard,errors=continue,utf8,\x00'], 0x1, 0x1529, &(0x7f00000037c0)="$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") setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) ftruncate(r7, 0x2007ffc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xfffffbffa003e45b, 0x700000000000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd29, 0x25cfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004000) 4m12.102996905s ago: executing program 1 (id=905): r0 = socket$kcm(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94) 4m10.495912298s ago: executing program 1 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) umount2(0x0, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 4m10.425564872s ago: executing program 2 (id=909): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000040)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRES64, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x400c5) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m8.288930577s ago: executing program 1 (id=911): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket(0x10, 0x6, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r4, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000) 4m7.115194215s ago: executing program 1 (id=914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x18, 0x1, 0x70bd2c, 0x0, {0x17}}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2806, r3}, 0x94) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "576b6ef53b7d29775a598a05bd75178e57e16568b009ec328b5d6764d965e1081fc3c390db93cc994509274386773707579006e9c352280cd69fe358a15ef916", 0x36}, 0x48, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@chain) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000001e40)="d3", 0x1, 0x0, 0x0, 0x2}]) r8 = socket$kcm(0x21, 0x2, 0x2) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 4m5.972134991s ago: executing program 1 (id=917): removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000d00), r0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = fsmount(r2, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/file0\x00', 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) bind$netlink(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 4m5.739594915s ago: executing program 2 (id=919): r0 = socket$kcm(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94) 3m50.636962103s ago: executing program 33 (id=917): removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000d00), r0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = fsmount(r2, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/file0\x00', 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) bind$netlink(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3m50.338067331s ago: executing program 34 (id=919): r0 = socket$kcm(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94) 10.585541734s ago: executing program 6 (id=1363): r0 = socket$kcm(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94) 9.475238468s ago: executing program 5 (id=1364): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) close_range(r1, r1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r4, 0x26}) ptrace(0x10, r4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x101, 0x0) 9.463794398s ago: executing program 3 (id=1366): r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0xee01]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) 9.393502873s ago: executing program 6 (id=1367): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) close_range(r1, r1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r4, 0x26}) ptrace(0x10, r4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x101, 0x0) 8.823712296s ago: executing program 3 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x153800, 0x0) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 7.851176722s ago: executing program 5 (id=1370): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="180000007200", 0x6}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000dc0), &(0x7f0000000040)=0x8) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private, @broadcast]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 7.801405485s ago: executing program 6 (id=1371): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 7.667527913s ago: executing program 3 (id=1373): syz_emit_vhci(0x0, 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) capset(0x0, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x101, 0x0) 7.498240563s ago: executing program 5 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x153800, 0x0) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 7.125385175s ago: executing program 3 (id=1375): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="180000007200", 0x6}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000dc0), &(0x7f0000000040)=0x8) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private, @broadcast]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 6.408844747s ago: executing program 5 (id=1378): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000040)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRES64, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWbbVOLZk5/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAeJBeGvvG0GHv/wDwkXLO538AAAAAAAAAAAAAANjpUhTxZ5Hi1Z+004Xqekf9TGv2ytXxkdHNd9uTIkUtiqq+/Fs/eOjwkaPHjg938877f9iejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nX/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/8KPf4nZneOyKIn4WKerfezc1I6IW9z4Wd3nu3G97qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0YPYC7uSSPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+O7tqd2HPm5BX9m3IuJmPARztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFz6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVh/794UHa4a9N9ShionrFb6cPfrADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MXe6nrH0uIm7E1s7J7c+nDqda+efD7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/elM3e15z63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDI2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfR3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234/1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNuwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnN/58oc1/wM9267lef1xnv+Dd5n/v48Uf/LTp3JdZ+wP5dsfr/5dm//fiRT/9avra4/l2n1rtQe32q3tVs7/lyLFiR/9aLXPef7zyK7NUO/8f7Zvfa4+S7Zp/h/v2TaQ23X4lxyLj6LF17/9WnN6emrBBRce2IXyKGIHNMOFO1zY7lcmHoTy/f+fI8ULZ2qpexyT3/8/1rm2dvz3/nfW3v9f2JCrtun9f1/PthfyUUt/X0R9aWa+f39EffH1b3+5NdO8PHV5anb42NEjzw8fO/Z8/67usd3apS0P3SOhnP8zkeKVn/7L6ueY9cd/mx//792Qq7Zp/j/Z26d1xzVbHoqPpHL+r0eK77797urnzTsd/3c//x/4wvpc/f+3TfP/qZ5t1W/8Px7xfM+2A5+OOLXVxwIAAIBHzN68Tv6nv/4Pq+e8r//8H1/s1vZ+/3M7O+H8fwAAAAAA+Kjbm4r4q0jxP0NfSt1zyLby+8/JDblqm37/t79n2+QDOq9ly4MMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALADpSji6Ujx6k/aabkor3fUz7Rmr1wdHxndfLc9KVLUoqjqy7/1g4cOHzl67PhwN++8/4ftyXh57Nypxum5mfmFqcXFqcnG+Gzr4tzk1Jbv4V7332iwGoDGzGtXJi9dWmwceu7wupuvDryz+7H9AyeOv3h+X7d2fGR0dKynpq//Az/6LdJttu+KIi5Fivr33k3/UUTU4t7H4i7PnfttT9WJwaoT4yOjVUemW83ZpfLGVMtVtYiBnp1OdsfoAczFPWlEXCubXzZ4sOze2HxzoTkxPdU421xYai215mZTrdPasj8DUYvhFDEfEe3i1rvrjyImIsX332+nt4uIojsOz7409o2hw3dvT+0+9LHXync33dxX9q2IuBkPwZztYLujiI9Fih+cH4qfFZ1xrYbtmYivl/l0xDfLXI64nq+n8gnyVMR7mzyfeLj0RRFnI8Vcaqf/LPLcV68rZ15pfG320lxPbfd15aF/f3iQdvhrUz2K+Hn1it9OP/f/GQAAAADgEVLEb0aKGzMHUrU+uLqm2Jq93DjXnJjufK3f/e6/kfdaWVlZGUidbOQcynky59mcF3LO57yW83rON3PeyPlWzps5l3O2c0YtP37ORs6hnCdzns15Ied8zms5r+d8M+eNnG/lvJlzOWc7Z/ieHAAAAAAAANiBalHEE5Hih2+000rRWeC9EJ1cts75yPv/AAAA////DD1f") ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x400c5) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.245842854s ago: executing program 7 (id=1379): r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0xee01]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) 5.245298094s ago: executing program 3 (id=1380): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket(0x10, 0x6, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r4, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) syz_genetlink_get_family_id$ieee802154(0x0, r3) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000) 4.905432244s ago: executing program 7 (id=1382): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) close_range(r1, r1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r4, 0x26}) ptrace(0x10, r4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x101, 0x0) 4.898073524s ago: executing program 5 (id=1383): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xbeeb0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'veth1_vlan\x00', &(0x7f00000000c0)=@ethtool_cmd={0x19, 0x0, 0x4, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfe, 0x0, 0x0, [0x0, 0x91]}}) syz_clone3(&(0x7f0000000300)={0x200000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 4.433580741s ago: executing program 6 (id=1385): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r3, 0x26}) ptrace(0x10, r3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x101, 0x0) 3.517619975s ago: executing program 7 (id=1386): syz_emit_vhci(0x0, 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) capset(0x0, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x101, 0x0) 3.289262978s ago: executing program 7 (id=1389): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) ioctl$COMEDI_CHANINFO(r3, 0x80306403, &(0x7f0000049840)={0x0, 0x0, &(0x7f0000022ac0), 0x0}) accept4$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @null, @null, @remote, @remote, @rose, @netrom]}, &(0x7f0000000080)=0xfffffffffffffe1b, 0x180000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x1f, 0x2, &(0x7f0000000100)="73e7"}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000a00)={0x6, 0x0, [{0x8000000, 0x9a, &(0x7f00000005c0)=""/154}, {0x6000, 0x96, &(0x7f0000000680)=""/150}, {0x10000, 0xb, &(0x7f0000000300)=""/11}, {0x200000, 0xe6, &(0x7f0000000740)=""/230}, {0x50000, 0x5d, &(0x7f0000000400)=""/93}, {0xa000, 0xac, &(0x7f0000000840)=""/172}]}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r5) r9 = fcntl$dupfd(r4, 0x406, r7) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000080)={0x0, r8}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 2.162563544s ago: executing program 6 (id=1391): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="180000007200", 0x6}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000dc0), &(0x7f0000000040)=0x8) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private, @broadcast]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 1.312549183s ago: executing program 4 (id=1392): r0 = socket$kcm(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94) 704.104028ms ago: executing program 7 (id=1393): r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0xee00]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, r1, 0x0, 0x0, 0x50, 0xd49}, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) 601.344045ms ago: executing program 7 (id=1394): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) close_range(r1, r1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r4, 0x26}) ptrace(0x10, r4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x101, 0x0) 522.145118ms ago: executing program 6 (id=1395): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 423.465745ms ago: executing program 3 (id=1396): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) openat$random(0xffffffffffffff9c, 0x0, 0x264241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r5, &(0x7f0000000540)=@x25={0x9, @remote}, &(0x7f0000000380)=0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x6, "d96c26", 0x1, 0x9}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 408.057805ms ago: executing program 4 (id=1397): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r3, 0x26}) ptrace(0x10, r3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x101, 0x0) 265.407094ms ago: executing program 4 (id=1398): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) inotify_init() socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x1f00, 0x38, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 211.262587ms ago: executing program 4 (id=1399): syz_emit_vhci(0x0, 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) capset(&(0x7f0000000000)={0x20080522}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x101, 0x0) 110.818913ms ago: executing program 4 (id=1400): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r3, 0x26}) ptrace(0x10, r3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x101, 0x0) 89.881464ms ago: executing program 5 (id=1401): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r3, 0x26}) ptrace(0x10, r3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x101, 0x0) 0s ago: executing program 4 (id=1402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x153800, 0x0) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): T4604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.589256][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 129.890029][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 130.050634][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 131.067908][ T4659] loop4: detected capacity change from 0 to 4096 [ 131.322255][ T4668] x_tables: duplicate underflow at hook 1 [ 132.894117][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.904375][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.151183][ T4701] capability: warning: `syz.4.92' uses deprecated v2 capabilities in a way that may be insecure [ 137.692113][ T4720] netlink: 'syz.0.96': attribute type 21 has an invalid length. [ 138.498547][ T4722] x_tables: duplicate underflow at hook 1 [ 145.619278][ T4762] loop0: detected capacity change from 0 to 256 [ 145.822242][ T4762] ======================================================= [ 145.822242][ T4762] WARNING: The mand mount option has been deprecated and [ 145.822242][ T4762] and is ignored by this kernel. Remove the mand [ 145.822242][ T4762] option from the mount to silence this warning. [ 145.822242][ T4762] ======================================================= [ 146.264852][ T4762] FAT-fs (loop0): Directory bread(block 64) failed [ 146.271732][ T4762] FAT-fs (loop0): Directory bread(block 65) failed [ 146.278386][ T4762] FAT-fs (loop0): Directory bread(block 66) failed [ 146.285025][ T4762] FAT-fs (loop0): Directory bread(block 67) failed [ 146.291739][ T4762] FAT-fs (loop0): Directory bread(block 68) failed [ 146.298303][ T4762] FAT-fs (loop0): Directory bread(block 69) failed [ 146.305036][ T4762] FAT-fs (loop0): Directory bread(block 70) failed [ 146.311678][ T4762] FAT-fs (loop0): Directory bread(block 71) failed [ 146.318348][ T4762] FAT-fs (loop0): Directory bread(block 72) failed [ 146.325066][ T4762] FAT-fs (loop0): Directory bread(block 73) failed [ 146.712293][ T4772] loop3: detected capacity change from 0 to 64 [ 146.724771][ T4762] attempt to access beyond end of device [ 146.724771][ T4762] loop0: rw=2049, want=1832, limit=256 [ 146.737728][ T4762] attempt to access beyond end of device [ 146.737728][ T4762] loop0: rw=2049, want=1968, limit=256 [ 147.731297][ T4772] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 147.803513][ T4772] BFS-fs: bfs_iget(): Unknown vtype=393216 loop3:00000002 [ 149.200130][ T4781] loop4: detected capacity change from 0 to 32768 [ 149.242411][ T4781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.105 (4781) [ 149.806789][ T4787] loop0: detected capacity change from 0 to 256 [ 150.034854][ T4781] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 150.044148][ T4781] BTRFS info (device loop4): using free space tree [ 150.050690][ T4781] BTRFS info (device loop4): has skinny extents [ 150.785491][ T4791] device syzkaller0 entered promiscuous mode [ 150.793677][ T4787] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.806021][ T4787] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 150.819214][ T4787] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 150.834400][ T4781] BTRFS info (device loop4): enabling ssd optimizations [ 151.583806][ T4817] xt_hashlimit: max too large, truncated to 1048576 [ 155.573843][ T4836] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.197767][ T4870] loop3: detected capacity change from 0 to 16 [ 157.340196][ T4870] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x8a67bcf9, 0x7bbbea8c expected [ 159.735175][ T4900] vivid-008: disconnect [ 160.380063][ T4893] vivid-008: reconnect [ 161.667411][ T4915] loop0: detected capacity change from 0 to 1024 [ 163.205004][ T4917] loop3: detected capacity change from 0 to 256 [ 168.428218][ T4949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.807447][ T4952] loop0: detected capacity change from 0 to 256 [ 169.071157][ T4952] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 169.127222][ T4952] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 169.868834][ T4965] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.197680][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 170.222207][ T4970] futex_wake_op: syz.4.153 tries to shift op by -1; fix this program [ 171.680231][ T4984] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 171.691011][ T4984] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 172.969552][ T4997] device syzkaller0 entered promiscuous mode [ 174.618834][ T5014] Unknown metaid 34525 dlen 0 [ 177.701201][ T5033] loop4: detected capacity change from 0 to 764 [ 185.614323][ T5090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.855048][ T5096] lo speed is unknown, defaulting to 1000 [ 185.861344][ T5096] lo speed is unknown, defaulting to 1000 [ 185.870215][ T5096] lo speed is unknown, defaulting to 1000 [ 185.881470][ T5096] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.894732][ T5096] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 186.902566][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.980667][ T5096] lo speed is unknown, defaulting to 1000 [ 186.987865][ T5096] lo speed is unknown, defaulting to 1000 [ 186.995098][ T5096] lo speed is unknown, defaulting to 1000 [ 187.002064][ T5096] lo speed is unknown, defaulting to 1000 [ 187.008781][ T5096] lo speed is unknown, defaulting to 1000 [ 187.100962][ T5093] loop1: detected capacity change from 0 to 1024 [ 188.274746][ T5093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.855257][ T5113] tipc: Enabled bearer , priority 0 [ 188.910344][ T5113] device syzkaller0 entered promiscuous mode [ 188.969142][ T5113] tipc: Resetting bearer [ 189.279689][ T5112] tipc: Resetting bearer [ 189.882394][ T5128] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.462949][ T5112] tipc: Disabling bearer [ 190.815428][ T5142] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 191.583004][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 191.589182][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 191.596446][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 191.603539][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 192.762093][ T5155] device syzkaller0 entered promiscuous mode [ 193.166825][ T5156] loop0: detected capacity change from 0 to 4096 [ 193.209854][ T5156] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 193.546211][ T5156] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 194.360715][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375125][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.252840][ T5173] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 196.362401][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 197.652908][ T5194] ceph: No source [ 199.756198][ T5196] loop4: detected capacity change from 0 to 32768 [ 201.419825][ T5195] read_mapping_page failed! [ 201.425246][ T5195] ERROR: (device loop4): txCommit: [ 201.425246][ T5195] [ 201.810147][ T5203] loop0: detected capacity change from 0 to 128 [ 201.950474][ T5203] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.001590][ T5203] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.756260][ T5230] fuse: Unknown parameter '0x0000000000000003' [ 205.794194][ T5208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.286451][ T5260] loop6: detected capacity change from 0 to 7 [ 208.516772][ T5260] Dev loop6: unable to read RDB block 7 [ 208.516869][ T5260] loop6: unable to read partition table [ 208.516999][ T5260] loop6: partition table beyond EOD, truncated [ 208.517049][ T5260] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 214.335305][ T5307] loop4: detected capacity change from 0 to 128 [ 214.345473][ T5306] device syzkaller0 entered promiscuous mode [ 214.410476][ T5307] EXT4-fs warning (device loop4): ext4_fill_super:4022: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 214.415916][ T5306] tipc: Enabled bearer , priority 0 [ 214.473255][ T4329] udevd[4329]: incorrect jbd checksum on /dev/loop4 [ 214.504127][ T5307] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 214.536998][ T5305] tipc: Resetting bearer [ 214.550260][ T4329] udevd[4329]: incorrect jbd checksum on /dev/loop4 [ 214.777864][ T5302] loop1: detected capacity change from 0 to 4096 [ 214.808795][ T5305] tipc: Disabling bearer [ 215.407937][ T5302] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. [ 215.431517][ T5302] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 215.522101][ T5302] ntfs: (device loop1): ntfs_read_locked_inode(): Mapping pairs decompression failed. [ 215.664424][ T5302] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 215.688985][ T5302] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 216.214617][ T5302] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 216.313640][ T5302] ntfs: volume version 3.1. [ 216.318597][ T5302] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 216.434828][ T5302] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 216.466341][ T5302] ntfs: (device loop1): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 216.752639][ T5302] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 216.963478][ T5335] netlink: 2332 bytes leftover after parsing attributes in process `syz.0.246'. [ 222.935746][ T5365] loop0: detected capacity change from 0 to 1024 [ 224.078404][ T5365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.581251][ T5389] netlink: 2332 bytes leftover after parsing attributes in process `syz.4.261'. [ 227.636182][ T5401] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 229.610497][ T5421] loop1: detected capacity change from 0 to 128 [ 230.597933][ T5419] tipc: Enabled bearer , priority 10 [ 230.625166][ T5424] loop4: detected capacity change from 0 to 2048 [ 231.054218][ T5416] No source specified [ 232.103397][ T5446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.034124][ T5477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 236.214131][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.226613][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.237354][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.247906][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.259367][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.270025][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.280881][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.291826][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.302576][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 236.318514][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.409905][ T5508] __nla_validate_parse: 61 callbacks suppressed [ 240.409944][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 241.698857][ T5507] loop4: detected capacity change from 0 to 1024 [ 242.999042][ T5520] loop1: detected capacity change from 0 to 4096 [ 243.462677][ T5527] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 244.937240][ T5531] loop4: detected capacity change from 0 to 1024 [ 245.221671][ T4856] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 245.251447][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 245.401542][ T4856] usb 1-1: device descriptor read/64, error -32 [ 245.691922][ T4856] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 245.797233][ T5546] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 246.059300][ T5548] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.581164][ T5543] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.590477][ T4382] hfsplus: b-tree write err: -5, ino 4 [ 247.743497][ T4856] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 247.753276][ T4856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.940441][ T4856] usb 1-1: config 0 descriptor?? [ 248.158727][ T4856] usb 1-1: can't set config #0, error -71 [ 248.167242][ T5563] loop3: detected capacity change from 0 to 128 [ 248.419603][ T5574] trusted_key: encrypted_key: insufficient parameters specified [ 250.652221][ T5581] lo speed is unknown, defaulting to 1000 [ 250.681963][ T5581] lo speed is unknown, defaulting to 1000 [ 250.688171][ T5581] lo speed is unknown, defaulting to 1000 [ 250.782401][ T5581] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 251.345733][ T4856] usb 1-1: USB disconnect, device number 3 [ 251.668788][ T5581] lo speed is unknown, defaulting to 1000 [ 251.686896][ T5581] lo speed is unknown, defaulting to 1000 [ 251.721922][ T5581] lo speed is unknown, defaulting to 1000 [ 251.740172][ T5581] lo speed is unknown, defaulting to 1000 [ 251.760503][ T5581] lo speed is unknown, defaulting to 1000 [ 253.019918][ T5616] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 256.381716][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.388148][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.801586][ T5658] netlink: 'syz.2.319': attribute type 4 has an invalid length. [ 259.809349][ T5658] netlink: 17 bytes leftover after parsing attributes in process `syz.2.319'. [ 260.777599][ T5669] loop0: detected capacity change from 0 to 256 [ 260.917507][ T5670] lo speed is unknown, defaulting to 1000 [ 263.835280][ T5691] futex_wake_op: syz.2.326 tries to shift op by -1; fix this program [ 263.902980][ T5694] loop0: detected capacity change from 0 to 128 [ 264.836260][ T5694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.901899][ T5694] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.922064][ T5708] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 266.975520][ T5708] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 269.652369][ T5728] futex_wake_op: syz.2.337 tries to shift op by -1; fix this program [ 270.644996][ T5716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.864693][ T5738] loop0: detected capacity change from 0 to 1024 [ 272.150415][ T5747] loop4: detected capacity change from 0 to 2048 [ 273.087717][ T5747] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 273.141456][ T5747] UDF-fs: Scanning with blocksize 512 failed [ 273.188764][ T5747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.273787][ T5759] loop3: detected capacity change from 0 to 2048 [ 274.384132][ T4208] hfsplus: b-tree write err: -5, ino 4 [ 274.769682][ T5765] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.485250][ T5782] futex_wake_op: syz.4.351 tries to shift op by -1; fix this program [ 277.172880][ T5790] loop1: detected capacity change from 0 to 1024 [ 277.416250][ T5790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.440660][ T5834] binder: 5826:5834 ioctl c0306201 0 returned -14 [ 284.481999][ T5842] loop0: detected capacity change from 0 to 1024 [ 284.490444][ T5843] loop3: detected capacity change from 0 to 1024 [ 284.500841][ T4190] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 284.741190][ T5842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.561484][ T4190] usb 5-1: unable to read config index 0 descriptor/all [ 285.573483][ T5843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.591447][ T4190] usb 5-1: can't read configurations, error -71 [ 285.655443][ T5852] loop4: detected capacity change from 0 to 128 [ 286.722279][ T5852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.928361][ T5852] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.972549][ T5862] loop0: detected capacity change from 0 to 32768 [ 288.284654][ T5862] read_mapping_page failed! [ 288.289349][ T5862] ERROR: (device loop0): txCommit: [ 288.289349][ T5862] [ 290.674385][ T5882] loop4: detected capacity change from 0 to 2048 [ 291.935001][ T5893] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 291.943523][ T5893] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 292.768281][ T5897] loop3: detected capacity change from 0 to 1024 [ 293.357088][ T5882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.688240][ T5897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.972910][ T5914] loop4: detected capacity change from 0 to 128 [ 295.094487][ T5922] futex_wake_op: syz.1.385 tries to shift op by -1; fix this program [ 295.151140][ T5914] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 298.183153][ T5950] loop0: detected capacity change from 0 to 64 [ 298.479676][ T5955] fuse: Bad value for 'fd' [ 300.195861][ T4846] libceph: connect (1)[c::]:6789 error -101 [ 300.220977][ T4846] libceph: mon0 (1)[c::]:6789 connect error [ 300.273549][ T5961] ceph: No mds server is up or the cluster is laggy [ 300.470133][ T5969] batman_adv: batadv0: Adding interface: dummy0 [ 300.495653][ T5971] loop1: detected capacity change from 0 to 1024 [ 300.525187][ T5969] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.557702][ T5959] loop4: detected capacity change from 0 to 8192 [ 300.573299][ T5971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.586156][ T5969] batman_adv: batadv0: Interface activated: dummy0 [ 300.657336][ T5972] batadv0: mtu less than device minimum [ 301.029724][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.042886][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.055478][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.068160][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.080753][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.093452][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.106238][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.118834][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.131414][ T5972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.166000][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 301.166016][ T26] audit: type=1800 audit(1769122931.716:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.393" name="bus" dev="loop4" ino=1048626 res=0 errno=0 [ 301.378855][ T5978] loop1: detected capacity change from 0 to 1024 [ 301.411092][ T5959] loop_set_status: loop4 () has still dirty pages (nrpages=1) [ 301.427936][ T5981] loop3: detected capacity change from 0 to 1024 [ 301.677476][ T5981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.883628][ T5991] delete_channel: no stack [ 302.989426][ T5991] delete_channel: no stack [ 304.635638][ T6006] loop1: detected capacity change from 0 to 128 [ 307.289207][ T4314] attempt to access beyond end of device [ 307.289207][ T4314] loop1: rw=1, want=1041, limit=128 [ 317.589795][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.596094][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.607185][ T6061] loop3: detected capacity change from 0 to 8 [ 317.706685][ T6061] SQUASHFS error: lzo decompression failed, data probably corrupt [ 317.715265][ T6061] SQUASHFS error: Failed to read block 0x144: -5 [ 317.721762][ T6061] SQUASHFS error: Unable to read metadata cache entry [142] [ 317.729194][ T6061] SQUASHFS error: Unable to read inode 0x11f [ 318.845585][ T6081] loop0: detected capacity change from 0 to 1024 [ 320.511206][ T6098] loop3: detected capacity change from 0 to 256 [ 321.364892][ T6098] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 321.799254][ T6081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.217151][ T6111] loop3: detected capacity change from 0 to 1024 [ 323.248766][ T6111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.266921][ T6115] loop1: detected capacity change from 0 to 128 [ 325.806562][ T6122] loop0: detected capacity change from 0 to 128 [ 327.176261][ T6122] EXT4-fs: failed to create workqueue [ 327.181828][ T6122] EXT4-fs (loop0): mount failed [ 327.762878][ T6143] cgroup: Invalid name [ 328.608915][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 328.627265][ T6142] loop0: detected capacity change from 0 to 4096 [ 328.673568][ T6142] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 328.800126][ T6142] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 330.865236][ T6162] loop1: detected capacity change from 0 to 256 [ 331.100309][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 331.659489][ T6162] FAT-fs (loop1): bogus number of FAT sectors [ 331.665639][ T6162] FAT-fs (loop1): Can't find a valid FAT filesystem [ 334.573173][ T6190] fuse: Bad value for 'fd' [ 335.004785][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 335.013200][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 335.034107][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 335.143187][ T6194] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 335.167345][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 335.174504][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 335.182062][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 335.189251][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 335.196450][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 339.588900][ T6219] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 341.890487][ T6229] Device name cannot be null; rc = [-22] [ 342.977900][ T6223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.969322][ T6223] bond1: (slave bond2): making interface the new active one [ 344.035290][ T6223] bond1: (slave bond2): Enslaving as an active interface with an up link [ 344.076579][ T6223] syz.4.458 (6223) used greatest stack depth: 20400 bytes left [ 345.142546][ T6245] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 345.588086][ T6250] futex_wake_op: syz.3.466 tries to shift op by -1; fix this program [ 346.221137][ T6263] overlayfs: failed to clone upperpath [ 346.251859][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 346.261729][ T6265] loop1: detected capacity change from 0 to 1024 [ 346.346871][ T6265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.005565][ T6297] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 352.462105][ T6314] loop0: detected capacity change from 0 to 65 [ 352.497148][ T6314] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 357.495840][ T6345] ax25_connect(): syz.0.486 uses autobind, please contact jreuter@yaina.de [ 358.759469][ T6362] Device name cannot be null; rc = [-22] [ 358.821897][ T6348] loop3: detected capacity change from 0 to 4096 [ 358.865168][ T6367] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 358.899520][ T6348] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 358.934766][ T6348] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 358.994923][ T6369] loop0: detected capacity change from 0 to 4096 [ 360.064727][ T6369] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 360.362843][ T6369] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 363.981694][ T4185] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 363.993420][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 364.440649][ T6418] loop1: detected capacity change from 0 to 128 [ 366.657552][ T6418] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.669173][ T6418] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.812758][ T6418] syz.1.507 (pid 6418) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 367.053078][ T6418] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 367.066050][ T6418] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 367.256103][ T6445] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 367.275625][ T6444] futex_wake_op: syz.3.511 tries to shift op by -1; fix this program [ 368.592853][ T6459] loop1: detected capacity change from 0 to 128 [ 372.183663][ T6489] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 373.196067][ T6492] loop0: detected capacity change from 0 to 128 [ 373.281363][ T6480] netlink: 6 bytes leftover after parsing attributes in process `syz.2.521'. [ 373.418562][ T6498] loop1: detected capacity change from 0 to 1024 [ 374.019826][ T6501] loop3: detected capacity change from 0 to 128 [ 376.909273][ T6498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.514994][ T6510] loop3: detected capacity change from 0 to 1024 [ 377.527097][ T6512] loop1: detected capacity change from 0 to 1024 [ 378.515190][ T6512] hfsplus: unable to parse mount options [ 378.723997][ T6527] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 379.730122][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.736666][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.928924][ T6510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.431857][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.547'. [ 385.506423][ T6586] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 386.716780][ T6593] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 386.730761][ T6591] loop1: detected capacity change from 0 to 1024 [ 386.737564][ T6593] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 386.792966][ T6591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.438647][ T6602] loop3: detected capacity change from 0 to 1024 [ 387.489241][ T6601] loop1: detected capacity change from 0 to 512 [ 387.543603][ T6601] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 387.630000][ T6606] netlink: 'syz.2.556': attribute type 1 has an invalid length. [ 388.483481][ T6601] EXT4-fs (loop1): 1 orphan inode deleted [ 388.512532][ T6601] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 388.574169][ T6601] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.722313][ T6610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.881145][ T6610] bond1: (slave bond2): making interface the new active one [ 388.889238][ T6610] bond1: (slave bond2): Enslaving as an active interface with an up link [ 388.906871][ T6615] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 391.948727][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 391.959656][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 391.970443][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 391.981245][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 391.991560][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 392.002214][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 392.012954][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 392.023775][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 392.035316][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 392.046015][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 392.060270][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.077613][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 392.087669][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.747716][ T6715] trusted_key: encrypted_key: insufficient parameters specified [ 404.588296][ T6705] lo speed is unknown, defaulting to 1000 [ 406.022032][ T4419] Bluetooth: hci5: command 0x0409 tx timeout [ 406.361887][ T4208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.172293][ T6732] loop3: detected capacity change from 0 to 1024 [ 407.280686][ T6705] wlan0 speed is unknown, defaulting to 1000 [ 407.656308][ T6732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.100311][ T4849] Bluetooth: hci5: command 0x041b tx timeout [ 408.496549][ T4208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.448412][ T4208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.889686][ T6757] 9pnet: Could not find request transport: * [ 409.889686][ T6757] ó~]+Gf»õ臇õ:X [ 409.889686][ T6757] sFà Xî©vÖU ©v ç0x00000000000000080xffffffffffffffff [ 411.001215][ T4742] Bluetooth: hci5: command 0x040f tx timeout [ 413.816120][ T4856] Bluetooth: hci5: command 0x0419 tx timeout [ 413.841707][ T6705] chnl_net:caif_netlink_parms(): no params data found [ 415.017299][ T4208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.231431][ T6787] loop1: detected capacity change from 0 to 1024 [ 415.320637][ T6781] loop3: detected capacity change from 0 to 4096 [ 415.314001][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.783614][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.806687][ T6705] device bridge_slave_0 entered promiscuous mode [ 415.840085][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.867771][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.891658][ T6705] device bridge_slave_1 entered promiscuous mode [ 415.913862][ T6787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.980868][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.044529][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.086139][ T6705] team0: Port device team_slave_0 added [ 416.101563][ T6705] team0: Port device team_slave_1 added [ 416.379048][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.732314][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.591724][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.812670][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.829401][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.860234][ T6817] siw: device registration error -23 [ 417.907479][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.010178][ T4208] tipc: Disabling bearer [ 418.016873][ T4208] tipc: Disabling bearer [ 418.375034][ T4208] tipc: Left network mode [ 419.538465][ T6705] device hsr_slave_0 entered promiscuous mode [ 419.820172][ T6705] device hsr_slave_1 entered promiscuous mode [ 420.980292][ T6705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.126464][ T6705] Cannot create hsr debugfs directory [ 421.150729][ T6850] loop3: detected capacity change from 0 to 1024 [ 422.056584][ T6859] futex_wake_op: syz.1.621 tries to shift op by -1; fix this program [ 422.084027][ T6850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.994404][ T6705] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 425.253230][ T6705] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.821975][ T6705] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.871196][ T6705] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 430.537707][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.773515][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.089776][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.101259][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.296086][ T6965] loop3: detected capacity change from 0 to 128 [ 434.710840][ T6965] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.770202][ T6967] loop1: detected capacity change from 0 to 2048 [ 434.778606][ T6965] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 434.911552][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.930362][ T6976] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 434.936677][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.972795][ T6975] __nla_validate_parse: 65 callbacks suppressed [ 434.972814][ T6975] netlink: 68 bytes leftover after parsing attributes in process `syz.4.636'. [ 434.993412][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.000614][ T4211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.096816][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.134006][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.173598][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.180774][ T4211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.194551][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.204807][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 435.298696][ T6980] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 435.660853][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 435.704193][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.782560][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.824325][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 435.833684][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 435.846224][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.855156][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.080687][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 436.186950][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.307017][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.519986][ T4208] device hsr_slave_0 left promiscuous mode [ 436.652006][ T6988] loop3: detected capacity change from 0 to 512 [ 436.699568][ T4208] device hsr_slave_1 left promiscuous mode [ 436.752880][ T4208] batman_adv: batadv0: Interface deactivated: dummy0 [ 436.779074][ T6988] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.638: invalid indirect mapped block 256 (level 2) [ 436.779612][ T4208] batman_adv: batadv0: Removing interface: dummy0 [ 437.035557][ T6988] EXT4-fs (loop3): 2 truncates cleaned up [ 437.123079][ T6988] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 437.244854][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.545698][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.643249][ T6996] loop1: detected capacity change from 0 to 4096 [ 437.665347][ T6996] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 437.680327][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.687974][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.689099][ T6996] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 437.712116][ T4208] device bridge_slave_1 left promiscuous mode [ 437.959456][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.548752][ T4208] device bridge_slave_0 left promiscuous mode [ 438.758280][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.548517][ T4208] device veth1_macvtap left promiscuous mode [ 439.617806][ T4208] device veth0_macvtap left promiscuous mode [ 439.744008][ T4208] device veth1_vlan left promiscuous mode [ 439.750239][ T4208] device veth0_vlan left promiscuous mode [ 440.092763][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.099754][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.161855][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 440.182195][ T6972] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 440.769893][ T4335] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 440.854543][ T4187] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 442.743131][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 442.785632][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 442.844810][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.878037][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.019105][ T4208] bond0 (unregistering): Released all slaves [ 443.089444][ T6705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 443.107698][ T7000] IPv6: NLM_F_REPLACE set, but no existing node found! [ 443.229866][ T7036] loop1: detected capacity change from 0 to 128 [ 443.393584][ T7036] zonefs (loop1) ERROR: Not a zoned block device [ 444.337647][ T7041] loop1: detected capacity change from 0 to 1024 [ 444.531122][ T7046] loop3: detected capacity change from 0 to 1024 [ 444.651977][ T7041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.718872][ T7046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.050339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.089654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.159934][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.795703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 447.818183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.881654][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.916217][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.925639][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.934526][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.980538][ T6705] device veth0_vlan entered promiscuous mode [ 448.041381][ T6705] device veth1_vlan entered promiscuous mode [ 448.111445][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.139905][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 448.181128][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 448.195261][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.370330][ T6705] device veth0_macvtap entered promiscuous mode [ 448.396922][ T6705] device veth1_macvtap entered promiscuous mode [ 449.428923][ T7102] loop3: detected capacity change from 0 to 16 [ 449.436889][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 449.468606][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.500026][ T7102] erofs: Unknown parameter './file3' [ 449.710104][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.083030][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.157869][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.181710][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.225917][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.356769][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.413153][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.472249][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.552692][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.627097][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.797584][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.828813][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.862507][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.929303][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.198967][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.568644][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.649336][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.711893][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.730247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.745856][ T7118] loop3: detected capacity change from 0 to 1024 [ 451.760087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.769827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.778668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.798769][ T6705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.819904][ T6705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.828674][ T6705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.849372][ T6705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.294431][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.312407][ T7133] loop3: detected capacity change from 0 to 1024 [ 453.346897][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.431839][ T7133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.526036][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.565798][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.588275][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.244485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.615010][ T7143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 455.219041][ T4419] Bluetooth: hci5: command 0x0405 tx timeout [ 456.620214][ T7160] loop5: detected capacity change from 0 to 2048 [ 456.914343][ T7160] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none. [ 459.380652][ T7183] block device autoloading is deprecated and will be removed. [ 460.353986][ T7196] loop5: detected capacity change from 0 to 512 [ 461.235399][ T7196] EXT4-fs (loop5): 1 orphan inode deleted [ 461.249012][ T7196] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 461.264303][ T7196] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.718136][ T7232] loop1: detected capacity change from 0 to 1024 [ 464.036129][ T7232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.071920][ T7281] 9pnet_virtio: no channels available for device syz [ 469.158074][ T7305] loop1: detected capacity change from 0 to 1024 [ 469.265544][ T7305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.768687][ T7325] loop3: detected capacity change from 0 to 1024 [ 471.047424][ T7325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.675635][ T7347] loop1: detected capacity change from 0 to 32768 [ 475.372579][ T7347] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 475.372579][ T7347] [ 475.454625][ T7347] syz.1.712 uses old SIOCAX25GETINFO [ 481.512094][ T7371] lo speed is unknown, defaulting to 1000 [ 481.519592][ T7371] wlan0 speed is unknown, defaulting to 1000 [ 484.958866][ T7411] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 485.698746][ T7421] loop5: detected capacity change from 0 to 1024 [ 485.881434][ T7421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.243288][ T7454] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 490.789824][ T7469] netlink: 'syz.4.736': attribute type 16 has an invalid length. [ 490.797748][ T7469] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.736'. [ 498.271164][ T26] audit: type=1107 audit(2000000126.203:3): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 500.013608][ T7580] lo speed is unknown, defaulting to 1000 [ 500.021017][ T7580] wlan0 speed is unknown, defaulting to 1000 [ 502.581749][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.599477][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.982222][ T7611] futex_wake_op: syz.1.761 tries to shift op by -1; fix this program [ 504.188762][ T7614] netlink: 'syz.5.762': attribute type 16 has an invalid length. [ 504.196689][ T7614] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.762'. [ 510.905750][ T7668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 513.830023][ T7694] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 514.363424][ T7697] futex_wake_op: syz.2.779 tries to shift op by -1; fix this program [ 519.260532][ T7744] loop3: detected capacity change from 0 to 2048 [ 519.588083][ T7744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.179463][ T7754] netlink: 'syz.3.789': attribute type 16 has an invalid length. [ 521.187432][ T7754] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.789'. [ 527.561072][ T26] audit: type=1107 audit(2000000155.753:4): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 527.597032][ T7814] loop1: detected capacity change from 0 to 2048 [ 527.816809][ T7814] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none. [ 530.162979][ T7838] loop5: detected capacity change from 0 to 128 [ 530.479189][ T7838] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 530.774326][ T7838] hpfs: filesystem error: improperly stopped [ 530.971054][ T7838] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 533.813656][ T7873] loop3: detected capacity change from 0 to 4096 [ 534.265103][ T7886] capability: warning: `syz.5.818' uses 32-bit capabilities (legacy support in use) [ 539.711411][ T7914] loop3: detected capacity change from 0 to 32768 [ 540.272446][ T7914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.825 (7914) [ 540.359349][ T7914] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 540.368151][ T7914] BTRFS info (device loop3): setting nodatacow, compression disabled [ 540.376377][ T7914] BTRFS info (device loop3): turning on flush-on-commit [ 540.383391][ T7914] BTRFS info (device loop3): enabling auto defrag [ 540.390139][ T7914] BTRFS info (device loop3): trying to use backup root at mount time [ 540.398693][ T7914] BTRFS info (device loop3): turning on async discard [ 540.405875][ T7914] BTRFS info (device loop3): using free space tree [ 540.412968][ T7914] BTRFS info (device loop3): has skinny extents [ 543.031168][ T7970] futex_wake_op: syz.2.834 tries to shift op by -1; fix this program [ 544.065136][ T7914] BTRFS error (device loop3): open_ctree failed: -12 [ 544.270443][ T7958] loop1: detected capacity change from 0 to 32768 [ 544.568921][ T7979] loop5: detected capacity change from 0 to 4096 [ 553.063929][ T8038] loop3: detected capacity change from 0 to 1024 [ 553.829656][ T8038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.961307][ T8103] kernel profiling enabled (shift: 17) [ 562.973081][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.979477][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.095149][ T8187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.578253][ T8222] loop1: detected capacity change from 0 to 4096 [ 570.370164][ T8242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.069012][ T8246] loop1: detected capacity change from 0 to 512 [ 575.005363][ T8273] loop1: detected capacity change from 0 to 128 [ 578.649040][ T8292] rdma_rxe: rxe_register_device failed with error -23 [ 578.658364][ T8292] rdma_rxe: failed to add veth1_to_team [ 582.677474][ T8319] netlink: 'syz.4.910': attribute type 3 has an invalid length. [ 582.685352][ T8319] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.910'. [ 584.104235][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.112071][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.548598][ T8351] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 592.212498][ T8392] loop5: detected capacity change from 0 to 32768 [ 594.112034][ T8392] JBD2: Ignoring recovery information on journal [ 594.314862][ T8392] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 596.651404][ T8411] overlayfs: failed to clone lowerpath [ 597.664642][ T8418] loop3: detected capacity change from 0 to 4096 [ 598.216026][ T8421] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.232941][ T8418] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 598.763948][ T8418] NILFS (loop3): mounting fs with errors [ 600.521283][ T6705] ocfs2: Unmounting device (7,5) on (node local) [ 600.539361][ T8432] futex_wake_op: syz.4.939 tries to shift op by -1; fix this program [ 602.018955][ T8445] futex_wake_op: syz.4.949 tries to shift op by -1; fix this program [ 602.021305][ T8436] lo speed is unknown, defaulting to 1000 [ 602.114654][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.236329][ T8436] wlan0 speed is unknown, defaulting to 1000 [ 602.319838][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.986525][ T8456] rdma_rxe: rxe_register_device failed with error -23 [ 602.993703][ T8456] rdma_rxe: failed to add veth1_to_team [ 603.221920][ T8446] lo speed is unknown, defaulting to 1000 [ 603.228706][ T8446] wlan0 speed is unknown, defaulting to 1000 [ 603.471441][ T8464] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 604.406586][ T4419] Bluetooth: hci1: command 0x0409 tx timeout [ 604.425016][ T8022] Bluetooth: hci4: command 0x0409 tx timeout [ 604.499082][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.703520][ T8475] loop5: detected capacity change from 0 to 40427 [ 605.739621][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.840921][ T8475] F2FS-fs (loop5): invalid crc value [ 605.879118][ T8475] F2FS-fs (loop5): Found nat_bits in checkpoint [ 605.908713][ T8436] chnl_net:caif_netlink_parms(): no params data found [ 605.948995][ T8475] F2FS-fs (loop5): Start checkpoint disabled! [ 606.489593][ T7976] Bluetooth: hci4: command 0x041b tx timeout [ 607.265447][ T7976] Bluetooth: hci1: command 0x041b tx timeout [ 607.346664][ T8482] loop3: detected capacity change from 0 to 32768 [ 607.434054][ T8446] chnl_net:caif_netlink_parms(): no params data found [ 607.527085][ T8482] JBD2: Ignoring recovery information on journal [ 607.719370][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.733198][ T8482] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 607.767834][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.891205][ T8436] device bridge_slave_0 entered promiscuous mode [ 608.061824][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.122015][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.512608][ T8436] device bridge_slave_1 entered promiscuous mode [ 608.536815][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.549125][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.569278][ T7976] Bluetooth: hci4: command 0x040f tx timeout [ 609.211054][ T8436] team0: Port device team_slave_0 added [ 609.288085][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 609.512856][ T8436] team0: Port device team_slave_1 added [ 610.238875][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.275680][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.330012][ T8436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.372450][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.387237][ T8508] futex_wake_op: syz.4.954 tries to shift op by -1; fix this program [ 610.398430][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.568258][ T8436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.618607][ T4419] Bluetooth: hci1: command 0x040f tx timeout [ 610.650661][ T4298] Bluetooth: hci4: command 0x0419 tx timeout [ 611.135921][ T8514] input: syz1 as /devices/virtual/input/input8 [ 611.271685][ T8436] device hsr_slave_0 entered promiscuous mode [ 611.305291][ T8436] device hsr_slave_1 entered promiscuous mode [ 612.810192][ T8533] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 613.619213][ T4419] Bluetooth: hci1: command 0x0419 tx timeout [ 613.739630][ T8532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'. [ 614.010438][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.018913][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.035650][ T8446] device bridge_slave_0 entered promiscuous mode [ 614.128878][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.136536][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.151266][ T8446] device bridge_slave_1 entered promiscuous mode [ 614.303462][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.333846][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.073643][ T8446] team0: Port device team_slave_0 added [ 616.125318][ T8446] team0: Port device team_slave_1 added [ 616.268270][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.275326][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.313177][ T8561] futex_wake_op: syz.4.965 tries to shift op by -1; fix this program [ 616.319499][ T8446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.342522][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.349939][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.635114][ T8446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.583281][ T8446] device hsr_slave_0 entered promiscuous mode [ 617.614412][ T8446] device hsr_slave_1 entered promiscuous mode [ 617.649606][ T8446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.669096][ T8446] Cannot create hsr debugfs directory [ 617.947715][ T8436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 619.707055][ T8577] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 622.089885][ T8436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 622.110639][ T8596] loop5: detected capacity change from 0 to 16 [ 622.132146][ T8583] lo speed is unknown, defaulting to 1000 [ 622.139066][ T8583] wlan0 speed is unknown, defaulting to 1000 [ 622.236457][ T8436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 622.298934][ T8436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 622.368043][ T8596] erofs: (device loop5): mounted with root inode @ nid 36. [ 623.629925][ T8622] futex_wake_op: syz.4.976 tries to shift op by -1; fix this program [ 623.964804][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.364944][ T155] device hsr_slave_0 left promiscuous mode [ 624.388805][ T155] device hsr_slave_1 left promiscuous mode [ 624.398930][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.412015][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.443092][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.451468][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.465429][ T155] device bridge_slave_1 left promiscuous mode [ 624.508720][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.560211][ T155] device bridge_slave_0 left promiscuous mode [ 624.566565][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.733675][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.740062][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.889875][ T155] device veth1_macvtap left promiscuous mode [ 624.915754][ T8638] loop5: detected capacity change from 0 to 64 [ 625.532460][ T155] device veth0_macvtap left promiscuous mode [ 625.538590][ T155] device veth1_vlan left promiscuous mode [ 625.866782][ T155] device veth0_vlan left promiscuous mode [ 625.991014][ T8638] hfs: unable to parse mount options [ 631.619723][ T8680] futex_wake_op: syz.5.987 tries to shift op by -1; fix this program [ 631.980293][ T155] team0 (unregistering): Port device team_slave_1 removed [ 632.156754][ T155] team0 (unregistering): Port device team_slave_0 removed [ 632.316891][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.541949][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.254381][ T155] bond0 (unregistering): Released all slaves [ 633.395220][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.406002][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.467059][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.480550][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.559822][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.634248][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.641536][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.735436][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.744439][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.947611][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.998297][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.005510][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.098575][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 634.215256][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 634.572846][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 634.739551][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.771435][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.821890][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.850253][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 635.648735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 635.670003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.694054][ T8436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.052716][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 637.100018][ T8446] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 637.191015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 637.221103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.262231][ T8446] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 637.287755][ T8446] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 637.318525][ T8446] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 637.460278][ T8722] lo speed is unknown, defaulting to 1000 [ 637.467240][ T8722] wlan0 speed is unknown, defaulting to 1000 [ 638.617082][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.679995][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.687905][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 640.028306][ T8446] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.327486][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 640.395017][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.427529][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.434802][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.443148][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 640.518401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 640.551280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 640.574086][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.581272][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.661837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 640.690308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 641.639545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 641.690345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 641.751780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 641.791046][ T8768] futex_wake_op: syz.5.1002 tries to shift op by -1; fix this program [ 641.807826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 641.867750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 641.943837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 642.018750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 642.093500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 642.168967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 644.716419][ T8778] loop5: detected capacity change from 0 to 32768 [ 644.764183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 644.789328][ T8778] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1005 (8778) [ 644.812502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 644.836521][ T8778] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 644.845562][ T8778] BTRFS info (device loop5): setting nodatacow, compression disabled [ 644.853770][ T8778] BTRFS info (device loop5): enabling ssd optimizations [ 644.860786][ T8778] BTRFS info (device loop5): setting datacow [ 644.866809][ T8778] BTRFS info (device loop5): doing ref verification [ 644.873495][ T8778] BTRFS info (device loop5): force clearing of disk cache [ 644.880813][ T8778] BTRFS info (device loop5): turning off barriers [ 644.887328][ T8778] BTRFS info (device loop5): using spread ssd allocation scheme [ 644.895341][ T8778] BTRFS info (device loop5): using free space tree [ 644.901931][ T8778] BTRFS info (device loop5): has skinny extents [ 644.998194][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.350937][ T8778] BTRFS info (device loop5): clearing free space tree [ 645.358337][ T8778] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 645.368460][ T8778] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 645.403275][ T8778] BTRFS info (device loop5): creating free space tree [ 645.412145][ T8778] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 645.421793][ T8778] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 646.927568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.958966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.101318][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.135335][ T8826] overlayfs: failed to resolve './file2': -2 [ 647.756779][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 647.823302][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 647.915939][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 647.929982][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 647.975777][ T8436] device veth0_vlan entered promiscuous mode [ 648.005120][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 648.023800][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 648.070797][ T8436] device veth1_vlan entered promiscuous mode [ 648.112654][ T8436] device veth0_macvtap entered promiscuous mode [ 648.141402][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 648.170875][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 648.186730][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 648.324252][ T8436] device veth1_macvtap entered promiscuous mode [ 648.375200][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.394526][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.405112][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.415833][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.427258][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.443830][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.592618][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.866229][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.099493][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.212519][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 649.288781][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 649.435215][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.553726][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.645987][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.732343][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.790468][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.800418][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.810957][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.821069][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.519240][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.556891][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.605879][ T8436] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.669753][ T8436] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.400005][ T8436] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.410737][ T8436] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.803350][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 651.851617][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 653.331417][ T8885] lo speed is unknown, defaulting to 1000 [ 653.350749][ T8885] wlan0 speed is unknown, defaulting to 1000 [ 653.962031][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 653.994941][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.016319][ T8889] syz.4.1017 uses obsolete (PF_INET,SOCK_PACKET) [ 654.322666][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 654.455724][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.754106][ T8446] device veth0_vlan entered promiscuous mode [ 654.769825][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 654.777812][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 654.823151][ T8446] device veth1_vlan entered promiscuous mode [ 654.887238][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.914049][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.083422][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 655.097705][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.181483][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.196248][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 655.396890][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 655.558656][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 655.710071][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 655.722493][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.774460][ T8446] device veth0_macvtap entered promiscuous mode [ 655.842237][ T8446] device veth1_macvtap entered promiscuous mode [ 656.113774][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 656.133135][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.852458][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.914775][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.972713][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.123711][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.991977][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.101097][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.241210][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.262493][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.323590][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.359180][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.664182][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.005588][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.175685][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.185731][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.196655][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.207362][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.218580][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.228776][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.264580][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.359060][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.420629][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.504571][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.178057][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 660.216786][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.150898][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.159872][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.171631][ T8446] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.212555][ T8446] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.273436][ T8446] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.282661][ T8446] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.828011][ T8988] loop6: detected capacity change from 0 to 16 [ 664.914313][ T8988] erofs: (device loop6): mounted with root inode @ nid 36. [ 665.675180][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 666.340951][ T8997] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 666.350382][ T8997] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 666.360056][ T8997] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 666.374039][ T8997] syz.4.1037 (8997) used greatest stack depth: 18064 bytes left [ 666.639613][ T26] audit: type=1800 audit(2000000294.523:5): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1037" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 666.989527][ T4742] Bluetooth: hci0: command 0x0409 tx timeout [ 667.037923][ T8975] lo speed is unknown, defaulting to 1000 [ 668.456895][ T9009] CIFS mount error: No usable UNC path provided in device string! [ 668.456895][ T9009] [ 668.467063][ T9009] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 670.741748][ T4846] Bluetooth: hci0: command 0x041b tx timeout [ 670.798454][ T8975] wlan0 speed is unknown, defaulting to 1000 [ 673.332781][ T8975] chnl_net:caif_netlink_parms(): no params data found [ 673.363626][ T4846] Bluetooth: hci0: command 0x040f tx timeout [ 674.347608][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.376168][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.385135][ T8975] device bridge_slave_0 entered promiscuous mode [ 674.589427][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.596652][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.880608][ T8975] device bridge_slave_1 entered promiscuous mode [ 674.996917][ T8975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.252225][ T8975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.141888][ T4742] Bluetooth: hci0: command 0x0419 tx timeout [ 676.177391][ T9077] bridge0: port 3(hsr0) entered blocking state [ 676.184123][ T9077] bridge0: port 3(hsr0) entered disabled state [ 676.193988][ T9077] device hsr0 entered promiscuous mode [ 676.201382][ T9077] bridge0: port 3(hsr0) entered blocking state [ 676.208047][ T9077] bridge0: port 3(hsr0) entered forwarding state [ 676.256432][ T8975] team0: Port device team_slave_0 added [ 676.264713][ T8975] team0: Port device team_slave_1 added [ 676.286361][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.293489][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.319580][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.699240][ T9094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.397739][ T8975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.550798][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.557908][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.583944][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.268749][ T8975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.707539][ T8975] device hsr_slave_0 entered promiscuous mode [ 680.623478][ T8975] device hsr_slave_1 entered promiscuous mode [ 680.660524][ T8975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.668147][ T8975] Cannot create hsr debugfs directory [ 681.196995][ T8975] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.437847][ T8975] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.607040][ T8975] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.456692][ T8975] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.609721][ T9141] binder: 9140:9141 ioctl c0306201 0 returned -14 [ 682.840705][ T8975] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 683.031827][ T8975] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 683.876413][ T8975] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 683.986713][ T8975] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 685.750059][ T9177] overlayfs: failed to clone lowerpath [ 686.529679][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.536018][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.911522][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.035926][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 687.054320][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.142767][ T8975] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.316566][ T264] block nbd3: Attempted send on invalid socket [ 690.324050][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 690.360145][ T9207] XFS (nbd3): SB validate failed with error -5. [ 690.385847][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 690.430640][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 690.439483][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.446599][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.530041][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 690.559333][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 690.601526][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 690.697697][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.704872][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.712902][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 690.723507][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 690.756982][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 691.508902][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 691.670874][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 691.730608][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 691.752179][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 691.779082][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 691.796886][ T8975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 691.808735][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 691.960052][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 691.968427][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 692.733692][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.271141][ T9255] futex_wake_op: syz.5.1087 tries to shift op by -1; fix this program [ 696.179637][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.187106][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.304863][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.356766][ T9284] fuse: Bad value for 'fd' [ 698.367217][ T9284] loop6: detected capacity change from 0 to 128 [ 698.970113][ T9284] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 698.982229][ T9284] hpfs: filesystem error: improperly stopped [ 698.988423][ T9284] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 698.996360][ T9284] hpfs: You really don't want any checks? You are crazy... [ 699.004925][ T9284] hpfs: hpfs_map_sector(): read error [ 699.010491][ T9284] hpfs: code page support is disabled [ 699.024446][ T9284] hpfs: hpfs_map_4sectors(): unaligned read [ 699.031378][ T9284] hpfs: hpfs_map_4sectors(): unaligned read [ 699.037476][ T9284] hpfs: filesystem error: unable to find root dir [ 702.295641][ T9320] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 702.476290][ T9330] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 702.730882][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 702.738553][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.317915][ T9320] net_ratelimit: 10 callbacks suppressed [ 703.317927][ T9320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.878657][ T8975] device veth0_vlan entered promiscuous mode [ 705.919509][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 705.950937][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 706.007650][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 706.588743][ C1] hrtimer: interrupt took 54257 ns [ 706.781434][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 706.810845][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 706.818874][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 706.934053][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 707.704300][ T9365] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 707.713962][ T9365] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 707.723678][ T9365] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 707.838382][ T26] audit: type=1800 audit(2000000847.893:6): pid=9365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1107" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 709.049647][ T9375] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1108'. [ 709.059652][ T9375] unsupported nlmsg_type 40 [ 710.843343][ T8975] device veth1_vlan entered promiscuous mode [ 711.164158][ T8975] device veth0_macvtap entered promiscuous mode [ 711.174736][ T8975] device veth1_macvtap entered promiscuous mode [ 711.444673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 711.488985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 711.604351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 711.650745][ T9389] loop6: detected capacity change from 0 to 64 [ 711.746186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 711.772003][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.787225][ T9388] loop3: detected capacity change from 0 to 1024 [ 711.831193][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.131236][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.142162][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.169358][ T9388] hfsplus: request for non-existent node 3 in B*Tree [ 712.187483][ T9388] hfsplus: request for non-existent node 3 in B*Tree [ 712.189232][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.211166][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.231581][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.254332][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.291610][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.351574][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.456443][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.531313][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.548926][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.633977][ T9389] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop6 [ 713.698492][ T9409] loop5: detected capacity change from 0 to 256 [ 713.943559][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 713.957508][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 714.500884][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.568846][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.628180][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.718220][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.756577][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.782962][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.871504][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.941710][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.975072][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.007923][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.035906][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.055597][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.075586][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.098971][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 715.116617][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 715.535861][ T8975] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.552297][ T8975] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.562064][ T8975] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.579259][ T8975] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.480061][ T9436] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.1130'. [ 716.490096][ T9436] openvswitch: netlink: ct_state flags 00030000 unsupported [ 717.938256][ T155] device hsr_slave_0 left promiscuous mode [ 717.963579][ T155] device hsr_slave_1 left promiscuous mode [ 718.000413][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 718.436211][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.461777][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.513020][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.528206][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.040234][ T155] device bridge_slave_1 left promiscuous mode [ 722.114778][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.254322][ T155] device bridge_slave_0 left promiscuous mode [ 722.293751][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.355484][ T155] device veth1_macvtap left promiscuous mode [ 722.362651][ T155] device veth0_macvtap left promiscuous mode [ 722.369342][ T155] device veth1_vlan left promiscuous mode [ 722.375613][ T155] device veth0_vlan left promiscuous mode [ 723.884471][ T155] team0 (unregistering): Port device team_slave_1 removed [ 723.902234][ T155] team0 (unregistering): Port device team_slave_0 removed [ 723.921699][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.937990][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.281406][ T155] bond0 (unregistering): Released all slaves [ 724.375953][ T26] audit: type=1800 audit(2000000864.566:7): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1121" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 724.376280][ T9445] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 724.454451][ T9445] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 724.464642][ T9445] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 724.760578][ T9464] lo speed is unknown, defaulting to 1000 [ 724.938428][ T9464] wlan0 speed is unknown, defaulting to 1000 [ 725.773151][ T9464] chnl_net:caif_netlink_parms(): no params data found [ 725.991759][ T7976] Bluetooth: hci4: command 0x0409 tx timeout [ 728.293123][ T8843] Bluetooth: hci4: command 0x041b tx timeout [ 728.889175][ T7976] Bluetooth: hci1: command 0x0406 tx timeout [ 728.959433][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.509427][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.552574][ T9464] device bridge_slave_0 entered promiscuous mode [ 729.582919][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.599170][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.754618][ T9464] device bridge_slave_1 entered promiscuous mode [ 729.768713][ T9507] batman_adv: batadv0: Adding interface: gretap1 [ 729.775168][ T9507] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.124549][ T9507] batman_adv: batadv0: Interface activated: gretap1 [ 730.319635][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 730.329306][ T8842] Bluetooth: hci4: command 0x040f tx timeout [ 730.357926][ T9464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.387519][ T9464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.656773][ T9464] team0: Port device team_slave_0 added [ 731.191493][ T9549] fuse: Bad value for 'fd' [ 731.201548][ T9549] loop3: detected capacity change from 0 to 128 [ 731.995181][ T9464] team0: Port device team_slave_1 added [ 732.033996][ T9549] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 732.047733][ T9549] hpfs: filesystem error: improperly stopped [ 732.053882][ T9549] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 732.061757][ T9549] hpfs: You really don't want any checks? You are crazy... [ 732.069439][ T9549] hpfs: hpfs_map_sector(): read error [ 732.074946][ T9549] hpfs: code page support is disabled [ 732.080563][ T9549] hpfs: hpfs_map_4sectors(): unaligned read [ 732.086957][ T9549] hpfs: hpfs_map_4sectors(): unaligned read [ 732.092985][ T9549] hpfs: filesystem error: unable to find root dir [ 732.798384][ T8842] Bluetooth: hci4: command 0x0419 tx timeout [ 733.138727][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.252408][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.218128][ T9464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.379619][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.386621][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.143994][ T9464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.405195][ T9464] device hsr_slave_0 entered promiscuous mode [ 735.432965][ T9583] loop5: detected capacity change from 0 to 1024 [ 735.451874][ T9565] loop3: detected capacity change from 0 to 40427 [ 735.453878][ T9464] device hsr_slave_1 entered promiscuous mode [ 735.507626][ T9464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.530186][ T9464] Cannot create hsr debugfs directory [ 735.553252][ T9565] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 735.559824][ T9565] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 735.571966][ T9565] F2FS-fs (loop3): invalid crc value [ 735.582849][ T9583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.654229][ T9565] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 735.824067][ T9565] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 735.832112][ T9565] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 736.455011][ T9565] attempt to access beyond end of device [ 736.455011][ T9565] loop3: rw=10241, want=53256, limit=40427 [ 737.951376][ T9464] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.003893][ T9612] binder: 9610:9612 ioctl 0 200000000040 returned -22 [ 738.541317][ T4185] attempt to access beyond end of device [ 738.541317][ T4185] loop3: rw=2049, want=45112, limit=40427 [ 738.598153][ T9464] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.698023][ T9464] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.826352][ T9626] loop5: detected capacity change from 0 to 512 [ 738.881590][ T9464] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.984159][ T9629] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.1154'. [ 738.993923][ T9629] openvswitch: netlink: ct_state flags 00030000 unsupported [ 740.651816][ T9464] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 742.633789][ T9464] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 742.663717][ T9464] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 742.911728][ T9464] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 743.018968][ T9659] overlayfs: failed to clone upperpath [ 745.309017][ T9694] fuse: Bad value for 'fd' [ 745.566053][ T9464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.674235][ T9693] loop6: detected capacity change from 0 to 1764 [ 746.108873][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 746.178053][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 746.308268][ T9464] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.358599][ T9710] batman_adv: batadv0: Adding interface: gretap1 [ 746.559425][ T9710] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.034739][ T9717] loop5: detected capacity change from 0 to 512 [ 747.137758][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 747.303743][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.310389][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.814487][ T9710] batman_adv: batadv0: Interface activated: gretap1 [ 747.844150][ T9717] FAT-fs (loop5): bogus logical sector size 0 [ 747.850981][ T9717] FAT-fs (loop5): Can't find a valid FAT filesystem [ 747.947657][ T9696] device syzkaller1 entered promiscuous mode [ 747.957818][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 747.986447][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.061337][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.068583][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.448569][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.459145][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.479919][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.487057][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.940295][ T9736] binder: 9728:9736 ioctl c0306201 0 returned -14 [ 748.948268][ T9736] binder: 9728:9736 ioctl c0306201 200000000780 returned -11 [ 748.960307][ T9736] virtio-fs: tag not found [ 748.969383][ T9736] afs: Unknown parameter 'au' [ 749.649193][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 749.844452][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 749.853658][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 749.863595][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 749.876184][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 750.778905][ T9748] loop5: detected capacity change from 0 to 8 [ 750.790494][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 750.807080][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 750.827731][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 750.844786][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 750.858773][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 750.887722][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 750.925839][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 751.125368][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 751.722578][ T9756] loop3: detected capacity change from 0 to 8192 [ 752.920910][ T9756] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 753.240868][ T9764] futex_wake_op: syz.4.1183 tries to shift op by -1; fix this program [ 754.244568][ T9783] overlayfs: failed to clone lowerpath [ 754.290935][ T9783] overlayfs: failed to clone lowerpath [ 754.970350][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 755.009160][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 755.196388][ T9464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.955602][ T155] device hsr_slave_0 left promiscuous mode [ 756.980378][ T155] device hsr_slave_1 left promiscuous mode [ 757.019622][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.045218][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.074097][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.118239][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.440921][ T155] device bridge_slave_1 left promiscuous mode [ 757.505926][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.685540][ T9827] futex_wake_op: syz.6.1193 tries to shift op by -1; fix this program [ 757.739729][ T155] device bridge_slave_0 left promiscuous mode [ 757.746783][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.756847][ T9829] loop3: detected capacity change from 0 to 1024 [ 757.801279][ T155] device veth1_macvtap left promiscuous mode [ 757.807396][ T155] device veth0_macvtap left promiscuous mode [ 757.848427][ T9829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.850330][ T155] device veth1_vlan left promiscuous mode [ 757.896488][ T155] device veth0_vlan left promiscuous mode [ 760.880831][ T9848] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 762.201710][ T155] team0 (unregistering): Port device team_slave_1 removed [ 762.441867][ T155] team0 (unregistering): Port device team_slave_0 removed [ 762.538929][ T9858] fuse: Bad value for 'fd' [ 762.579948][ T9858] loop5: detected capacity change from 0 to 128 [ 762.616685][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.647116][ T9858] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 762.660261][ T9858] hpfs: filesystem error: improperly stopped [ 762.666405][ T9858] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 762.674341][ T9858] hpfs: You really don't want any checks? You are crazy... [ 762.682082][ T9858] hpfs: hpfs_map_sector(): read error [ 762.687708][ T9858] hpfs: code page support is disabled [ 762.703460][ T9858] hpfs: hpfs_map_4sectors(): unaligned read [ 762.713563][ T9858] hpfs: hpfs_map_4sectors(): unaligned read [ 762.719769][ T9858] hpfs: filesystem error: unable to find root dir [ 762.845408][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.366472][ T155] bond0 (unregistering): Released all slaves [ 763.436948][ T9862] x_tables: duplicate underflow at hook 1 [ 764.321186][ T9870] loop3: detected capacity change from 0 to 256 [ 765.020930][ T9884] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 765.640856][ T9889] loop6: detected capacity change from 0 to 40427 [ 766.026377][ T9889] F2FS-fs (loop6): invalid crc value [ 766.051211][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 766.073989][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 766.097318][ T9889] F2FS-fs (loop6): Found nat_bits in checkpoint [ 766.141691][ T9889] F2FS-fs (loop6): Start checkpoint disabled! [ 766.195588][ T9464] device veth0_vlan entered promiscuous mode [ 766.243804][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 766.259960][ T9889] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 766.287647][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 766.324786][ T9464] device veth1_vlan entered promiscuous mode [ 766.424111][ T9904] overlayfs: failed to clone lowerpath [ 766.457800][ T9904] overlayfs: failed to clone lowerpath [ 767.459582][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 767.521740][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 767.955868][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 768.247214][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 768.267710][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 768.331486][ T4328] attempt to access beyond end of device [ 768.331486][ T4328] loop6: rw=2049, want=40984, limit=40427 [ 768.381977][ T9464] device veth0_macvtap entered promiscuous mode [ 768.402548][ T9464] device veth1_macvtap entered promiscuous mode [ 768.421562][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.437782][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.448090][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.458996][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.469319][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.480194][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.495255][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.518772][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.529195][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.545423][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.557184][ T9464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.565674][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 768.598478][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 768.650026][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 768.694069][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 768.774597][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.789558][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.799711][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.810928][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.821109][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.852686][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.918404][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.929444][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.949221][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.006719][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.035722][ T9464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.081914][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 769.099741][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 769.136098][ T9464] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.169417][ T9464] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.178212][ T9464] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.259308][ T9464] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.482957][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.514607][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.573466][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 770.606930][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.664614][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.748976][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 772.796294][ T9953] virtio-fs: tag not found [ 772.814634][ T9953] afs: Unknown parameter 'au' [ 773.821435][ T9968] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 774.470238][ T9969] fuse: Bad value for 'fd' [ 774.475596][ T9969] loop3: detected capacity change from 0 to 128 [ 774.507863][ T9969] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 774.509561][ T9969] hpfs: filesystem error: improperly stopped [ 774.509629][ T9969] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 774.509693][ T9969] hpfs: You really don't want any checks? You are crazy... [ 774.510772][ T9969] hpfs: hpfs_map_sector(): read error [ 774.510807][ T9969] hpfs: code page support is disabled [ 774.531965][ T9969] hpfs: hpfs_map_4sectors(): unaligned read [ 774.532312][ T9969] hpfs: hpfs_map_4sectors(): unaligned read [ 774.532348][ T9969] hpfs: filesystem error: unable to find root dir [ 775.534500][ T9963] loop5: detected capacity change from 0 to 40427 [ 776.371683][ T9963] F2FS-fs (loop5): invalid crc value [ 776.399328][ T9963] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 776.750889][ T9984] loop3: detected capacity change from 0 to 1024 [ 778.558398][ T9984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 782.261562][T10035] fuse: Bad value for 'fd' [ 782.497180][T10035] loop5: detected capacity change from 0 to 128 [ 782.898661][T10037] loop6: detected capacity change from 0 to 8 [ 784.046757][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1240'. [ 785.523005][T10051] loop7: detected capacity change from 0 to 1024 [ 785.685566][T10055] loop5: detected capacity change from 0 to 16 [ 785.723182][T10051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.838379][T10058] loop6: detected capacity change from 0 to 2048 [ 785.916630][T10055] erofs: (device loop5): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 785.965354][T10058] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 786.199630][T10058] NILFS (loop6): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 788.378265][T10080] loop3: detected capacity change from 0 to 1024 [ 788.391426][T10081] loop5: detected capacity change from 0 to 512 [ 788.486221][T10081] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 788.544176][T10081] EXT4-fs (loop5): orphan cleanup on readonly fs [ 788.547002][T10080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.625965][T10081] EXT4-fs error (device loop5): ext4_quota_enable:6438: comm syz.5.1251: Bad quota inum: 64, type: 0 [ 788.643185][T10081] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 788.772968][T10081] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 788.789280][T10081] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,nouid32,noinit_itable,dioread_lock,journal_dev=0x00000000000000042,errors=continue. Quota mode: writeback. [ 789.791038][T10102] loop3: detected capacity change from 0 to 1024 [ 790.365261][T10102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.469836][ T4856] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 791.009335][ T4856] usb 6-1: Using ep0 maxpacket: 32 [ 791.160337][ T4856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 791.450864][ T4856] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 791.846150][ T4856] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 791.855935][ T4856] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 791.864641][ T4856] usb 6-1: Product: syz [ 791.869005][ T4856] usb 6-1: Manufacturer: syz [ 791.874065][ T4856] usb 6-1: SerialNumber: syz [ 791.931867][ T4856] usb 6-1: config 0 descriptor?? [ 792.920059][ T4856] usb 6-1: can't set config #0, error -71 [ 792.936967][ T4856] usb 6-1: USB disconnect, device number 2 [ 793.891214][T10144] loop5: detected capacity change from 0 to 512 [ 793.959339][T10144] FAT-fs (loop5): bogus number of FAT sectors [ 793.965508][T10144] FAT-fs (loop5): Can't find a valid FAT filesystem [ 795.269852][ T7976] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 796.019548][ T7976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 796.086288][ T7976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 796.105387][ T7976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 796.286030][ T7976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 6400, setting to 64 [ 797.365991][ T7976] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 797.378994][ T7976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.397450][ T7976] usb 6-1: Product: syz [ 797.407808][ T7976] usb 6-1: Manufacturer: syz [ 797.419114][ T7976] usb 6-1: SerialNumber: syz [ 797.456882][ T7976] usb 6-1: config 0 descriptor?? [ 797.498420][T10165] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 797.547234][ T7976] cypress_m8 6-1:0.0: HID->COM RS232 Adapter converter detected [ 797.574715][ T7976] cyphidcom ttyUSB0: required endpoint is missing [ 797.659250][ T4419] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 797.792568][ T7976] usb 6-1: USB disconnect, device number 3 [ 797.812304][T10187] loop6: detected capacity change from 0 to 1024 [ 797.821651][ T7976] cypress_m8 6-1:0.0: device disconnected [ 798.082855][ T4419] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.100171][ T4419] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 798.129355][ T4419] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 798.139613][ T4419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.151681][ T4419] usb 8-1: config 0 descriptor?? [ 798.577942][ T4419] usb 8-1: USB disconnect, device number 2 [ 800.126113][T10216] loop3: detected capacity change from 0 to 128 [ 800.508885][T10004] udevd[10004]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.831336][T10216] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 801.183339][T10222] loop7: detected capacity change from 0 to 512 [ 801.247995][T10224] loop6: detected capacity change from 0 to 1024 [ 801.309472][T10224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.341138][T10222] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 801.374151][T10222] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.074924][T10268] loop7: detected capacity change from 0 to 512 [ 803.170710][T10268] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1303: iget: bad extended attribute block 1 [ 803.221975][T10268] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1303: couldn't read orphan inode 15 (err -117) [ 803.229244][ T9463] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 803.252572][T10268] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,nombcache,norecovery,noload,noquota,auto_da_alloc,,errors=continue. Quota mode: none. [ 803.609566][ T9463] usb 6-1: Using ep0 maxpacket: 8 [ 804.469350][ T9463] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 804.487915][ T9463] usb 6-1: config 2 has no interface number 0 [ 804.512082][ T9463] usb 6-1: config 2 interface 31 has no altsetting 0 [ 804.699535][ T9463] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 804.722238][ T9463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.753234][ T9463] usb 6-1: Product: syz [ 804.769148][ T9463] usb 6-1: Manufacturer: syz [ 804.787060][ T9463] usb 6-1: SerialNumber: syz [ 805.062150][ T9463] ch9200: probe of 6-1:2.31 failed with error -71 [ 805.111406][ T9463] usb 6-1: USB disconnect, device number 4 [ 808.691629][T10325] futex_wake_op: syz.7.1322 tries to shift op by -1; fix this program [ 808.727437][T10322] binder: 10308:10322 ioctl 40182103 200000000300 returned -22 [ 808.741759][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.748185][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.079165][ T9463] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 809.420390][ T9463] usb 7-1: Using ep0 maxpacket: 8 [ 809.584195][ T9463] usb 7-1: unable to get BOS descriptor or descriptor too short [ 809.689246][ T9463] usb 7-1: config 17 has an invalid interface number: 8 but max is -1 [ 809.698087][ T9463] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 0 [ 809.707856][ T9463] usb 7-1: config 17 has no interface number 0 [ 809.724101][ T9463] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 95, setting to 64 [ 809.749517][ T9463] usb 7-1: config 17 interface 8 has no altsetting 0 [ 810.279232][ T9463] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 810.288523][ T9463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.307141][ T9463] usb 7-1: Product: syz [ 810.312181][ T9463] usb 7-1: Manufacturer: syz [ 810.316978][ T9463] usb 7-1: SerialNumber: syz [ 810.681814][ T9463] usb 7-1: selecting invalid altsetting 0 [ 810.741081][T10355] fuse: Bad value for 'fd' [ 810.751042][T10355] loop3: detected capacity change from 0 to 128 [ 810.785452][ T9463] usb 7-1: USB disconnect, device number 2 [ 810.797504][T10355] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 810.809655][T10355] hpfs: filesystem error: improperly stopped [ 810.815948][T10355] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 810.823866][T10355] hpfs: You really don't want any checks? You are crazy... [ 810.831597][T10355] hpfs: hpfs_map_sector(): read error [ 810.837083][T10355] hpfs: code page support is disabled [ 810.842797][T10355] hpfs: hpfs_map_4sectors(): unaligned read [ 810.848789][T10355] hpfs: hpfs_map_4sectors(): unaligned read [ 810.854795][T10355] hpfs: filesystem error: unable to find root dir [ 811.189720][T10004] udevd[10004]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.426374][T10377] futex_wake_op: syz.4.1335 tries to shift op by -1; fix this program [ 812.954068][T10391] loop7: detected capacity change from 0 to 128 [ 812.966415][T10391] hpfs: bad mount options. [ 813.770711][T10402] overlayfs: failed to clone lowerpath [ 813.781338][T10402] overlayfs: failed to clone lowerpath [ 813.809834][ T9463] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 814.909539][ T9463] usb 7-1: unable to get BOS descriptor or descriptor too short [ 814.989580][ T9463] usb 7-1: not running at top speed; connect to a high speed hub [ 815.629433][ T9463] usb 7-1: config 17 has an invalid interface number: 8 but max is 1 [ 815.639274][ T9463] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 815.697007][ T9463] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 815.716885][ T9463] usb 7-1: config 17 has no interface number 0 [ 815.729170][ T9463] usb 7-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 815.766357][ T9463] usb 7-1: config 17 interface 8 has no altsetting 0 [ 815.949438][ T9463] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 815.966737][ T9463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.985329][ T9463] usb 7-1: Product: syz [ 816.005624][ T9463] usb 7-1: Manufacturer: syz [ 816.307707][ T9463] usb 7-1: SerialNumber: syz [ 816.349243][ T9463] usb 7-1: can't set config #17, error -71 [ 816.496301][T10431] futex_wake_op: syz.6.1353 tries to shift op by -1; fix this program [ 816.609388][ T9463] usb 7-1: USB disconnect, device number 3 [ 817.971094][T10451] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 819.796381][T10474] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 822.544593][T10509] futex_wake_op: syz.6.1371 tries to shift op by -1; fix this program [ 823.661430][T10525] loop5: detected capacity change from 0 to 1024 [ 823.882184][T10525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.573125][T10595] futex_wake_op: syz.6.1395 tries to shift op by -1; fix this program [ 830.550671][ C1] ------------[ cut here ]------------ [ 830.556839][ C1] WARNING: CPU: 1 PID: 10616 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 830.567148][ C1] Modules linked in: [ 830.571170][ C1] CPU: 1 PID: 10616 Comm: syz.4.1402 Not tainted syzkaller #0 [ 830.578729][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.588949][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 830.595363][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d c0 2a f8 0f 0b e9 03 ef ff ff e8 01 c0 2a f8 <0f> 0b e9 76 f2 ff ff e8 15 89 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 830.615172][ C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246 [ 830.621361][ C1] RAX: ffffffff894e5f9f RBX: ffff8880623b6298 RCX: ffff888065b8bb80 [ 830.629570][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 830.637642][ C1] RBP: ffffc90000dd0b08 R08: ffff888065b8bb80 R09: 0000000000000003 [ 830.645849][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805fdcae00 [ 830.653966][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 830.662110][ C1] FS: 00007ff687c436c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 830.671215][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.677884][ C1] CR2: 00007f1460de0990 CR3: 0000000063cdb000 CR4: 00000000003506e0 [ 830.686039][ C1] Call Trace: [ 830.689425][ C1] [ 830.692327][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 830.698385][ C1] ? verify_lock_unused+0x140/0x140 [ 830.703759][ C1] ? verify_lock_unused+0x140/0x140 [ 830.709123][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 830.714688][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 830.720283][ C1] __iterate_interfaces+0x243/0x500 [ 830.725605][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 830.732029][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 830.738366][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 830.745543][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 830.750890][ C1] ? hw_scan_work+0xed0/0xed0 [ 830.755628][ C1] __hrtimer_run_queues+0x4eb/0xb70 [ 830.760940][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 830.766121][ C1] hrtimer_run_softirq+0x176/0x240 [ 830.771308][ C1] handle_softirqs+0x339/0x830 [ 830.776219][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 830.781193][ C1] ? do_softirq+0x210/0x210 [ 830.785782][ C1] __irq_exit_rcu+0x13b/0x230 [ 830.790530][ C1] ? irq_exit_rcu+0x20/0x20 [ 830.795122][ C1] irq_exit_rcu+0x5/0x20 [ 830.799473][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 830.805167][ C1] [ 830.808165][ C1] [ 830.811156][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 830.817213][ C1] RIP: 0010:__might_fault+0xc1/0x110 [ 830.822624][ C1] Code: 31 f6 31 d2 b9 01 00 00 00 41 b8 01 00 00 00 45 31 c9 68 c0 ab ae 81 e8 3d 56 ae ff 48 83 c4 08 e8 b4 73 ca ff 43 80 3c 26 00 <74> 08 48 89 df e8 c5 77 0f 00 bf 28 01 00 00 48 03 3b 48 c7 c6 e7 [ 830.842471][ C1] RSP: 0018:ffffc900049bfc70 EFLAGS: 00000246 [ 830.848632][ C1] RAX: ffffffff81aeabec RBX: ffff888065b8c090 RCX: 0000000000080000 [ 830.856693][ C1] RDX: ffffc9000fc7b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 830.864746][ C1] RBP: 0000000000000af6 R08: dffffc0000000000 R09: 1ffffffff203a21e [ 830.872851][ C1] R10: dffffc0000000000 R11: fffffbfff203a21f R12: dffffc0000000000 [ 830.880942][ C1] R13: 0000200000184700 R14: 1ffff1100cb71812 R15: 0000000000000000 [ 830.889006][ C1] ? __might_fault+0xbc/0x110 [ 830.893832][ C1] do_recvmmsg+0x3ab/0x850 [ 830.898348][ C1] ? __sys_recvmmsg+0x290/0x290 [ 830.903369][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 830.908539][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 830.913690][ C1] ? do_recvmmsg+0x850/0x850 [ 830.918389][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 830.923752][ C1] do_syscall_64+0x4c/0xa0 [ 830.928260][ C1] ? clear_bhb_loop+0x30/0x80 [ 830.933029][ C1] ? clear_bhb_loop+0x30/0x80 [ 830.937763][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 830.943737][ C1] RIP: 0033:0x7ff689a08cb9 [ 830.948198][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.967993][ C1] RSP: 002b:00007ff687c43028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 830.976514][ C1] RAX: ffffffffffffffda RBX: 00007ff689c84090 RCX: 00007ff689a08cb9 [ 830.984575][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 830.992657][ C1] RBP: 00007ff689a76bf7 R08: 0000000000000000 R09: 0000000000000000 [ 831.000720][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 831.008785][ C1] R13: 00007ff689c84128 R14: 00007ff689c84090 R15: 00007ffc3282b058 [ 831.016862][ C1] [ 831.019941][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 831.027248][ C1] CPU: 1 PID: 10616 Comm: syz.4.1402 Not tainted syzkaller #0 [ 831.034705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 831.044785][ C1] Call Trace: [ 831.048075][ C1] [ 831.050929][ C1] dump_stack_lvl+0x188/0x250 [ 831.055751][ C1] ? show_regs_print_info+0x20/0x20 [ 831.061042][ C1] ? load_image+0x400/0x400 [ 831.065680][ C1] panic+0x2e5/0x810 [ 831.069584][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 831.074106][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 831.079832][ C1] __warn+0x248/0x2b0 [ 831.083817][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 831.089542][ C1] report_bug+0x1b7/0x2e0 [ 831.093883][ C1] handle_bug+0x3a/0x70 [ 831.098056][ C1] exc_invalid_op+0x16/0x40 [ 831.102563][ C1] asm_exc_invalid_op+0x16/0x20 [ 831.107419][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 831.113760][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d c0 2a f8 0f 0b e9 03 ef ff ff e8 01 c0 2a f8 <0f> 0b e9 76 f2 ff ff e8 15 89 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 831.133368][ C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246 [ 831.139443][ C1] RAX: ffffffff894e5f9f RBX: ffff8880623b6298 RCX: ffff888065b8bb80 [ 831.147418][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.155396][ C1] RBP: ffffc90000dd0b08 R08: ffff888065b8bb80 R09: 0000000000000003 [ 831.163404][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805fdcae00 [ 831.171376][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 831.179365][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 831.185118][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 831.191123][ C1] ? verify_lock_unused+0x140/0x140 [ 831.196339][ C1] ? verify_lock_unused+0x140/0x140 [ 831.201549][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 831.207014][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 831.212498][ C1] __iterate_interfaces+0x243/0x500 [ 831.217698][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 831.223942][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 831.230191][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 831.237243][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 831.242455][ C1] ? hw_scan_work+0xed0/0xed0 [ 831.247132][ C1] __hrtimer_run_queues+0x4eb/0xb70 [ 831.252344][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 831.257469][ C1] hrtimer_run_softirq+0x176/0x240 [ 831.262586][ C1] handle_softirqs+0x339/0x830 [ 831.267356][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 831.272211][ C1] ? do_softirq+0x210/0x210 [ 831.276723][ C1] __irq_exit_rcu+0x13b/0x230 [ 831.281407][ C1] ? irq_exit_rcu+0x20/0x20 [ 831.285918][ C1] irq_exit_rcu+0x5/0x20 [ 831.290172][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 831.295836][ C1] [ 831.298767][ C1] [ 831.301716][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 831.307712][ C1] RIP: 0010:__might_fault+0xc1/0x110 [ 831.312997][ C1] Code: 31 f6 31 d2 b9 01 00 00 00 41 b8 01 00 00 00 45 31 c9 68 c0 ab ae 81 e8 3d 56 ae ff 48 83 c4 08 e8 b4 73 ca ff 43 80 3c 26 00 <74> 08 48 89 df e8 c5 77 0f 00 bf 28 01 00 00 48 03 3b 48 c7 c6 e7 [ 831.332600][ C1] RSP: 0018:ffffc900049bfc70 EFLAGS: 00000246 [ 831.338676][ C1] RAX: ffffffff81aeabec RBX: ffff888065b8c090 RCX: 0000000000080000 [ 831.346661][ C1] RDX: ffffc9000fc7b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 831.354649][ C1] RBP: 0000000000000af6 R08: dffffc0000000000 R09: 1ffffffff203a21e [ 831.362646][ C1] R10: dffffc0000000000 R11: fffffbfff203a21f R12: dffffc0000000000 [ 831.370634][ C1] R13: 0000200000184700 R14: 1ffff1100cb71812 R15: 0000000000000000 [ 831.378615][ C1] ? __might_fault+0xbc/0x110 [ 831.383299][ C1] do_recvmmsg+0x3ab/0x850 [ 831.387725][ C1] ? __sys_recvmmsg+0x290/0x290 [ 831.392605][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 831.397660][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 831.402698][ C1] ? do_recvmmsg+0x850/0x850 [ 831.407296][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 831.412518][ C1] do_syscall_64+0x4c/0xa0 [ 831.416934][ C1] ? clear_bhb_loop+0x30/0x80 [ 831.421615][ C1] ? clear_bhb_loop+0x30/0x80 [ 831.426292][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 831.432183][ C1] RIP: 0033:0x7ff689a08cb9 [ 831.436597][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.456200][ C1] RSP: 002b:00007ff687c43028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 831.464614][ C1] RAX: ffffffffffffffda RBX: 00007ff689c84090 RCX: 00007ff689a08cb9 [ 831.472627][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 831.480625][ C1] RBP: 00007ff689a76bf7 R08: 0000000000000000 R09: 0000000000000000 [ 831.488604][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 831.496599][ C1] R13: 00007ff689c84128 R14: 00007ff689c84090 R15: 00007ffc3282b058 [ 831.504585][ C1] [ 831.507916][ C1] Kernel Offset: disabled [ 831.519412][ C1] Rebooting in 86400 seconds..