last executing test programs: 14m45.290407155s ago: executing program 2 (id=63): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x86, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000942000/0x2000)=nil) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) 14m43.772119992s ago: executing program 2 (id=74): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@empty, 0x4e22, 0x8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x1, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 14m41.442264327s ago: executing program 2 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00030724"], 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) kexec_load(0x3, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{r3}, {@val, @max}}) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14m41.133131727s ago: executing program 2 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 14m40.181519657s ago: executing program 2 (id=84): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 14m38.961748016s ago: executing program 2 (id=75): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000001000000000000000300000004000000030000000000000000000005000000000000005f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14m22.674060444s ago: executing program 32 (id=75): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000001000000000000000300000004000000030000000000000000000005000000000000005f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 12m19.613686838s ago: executing program 5 (id=594): openat(0xffffffffffffff9c, 0x0, 0x484800, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r1 = syz_open_procfs(0x0, &(0x7f0000002600)='net/dev_mcast\x00') sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x1400c840) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 12m18.689126487s ago: executing program 5 (id=596): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x61}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m15.806618478s ago: executing program 5 (id=607): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xa7ac7423d6fe5745, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c", 0xa5}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r4, 0xa}, 0x8) 12m15.581169606s ago: executing program 5 (id=608): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) chroot(0x0) write$bt_hci(r1, &(0x7f0000000bc0)=ANY=[], 0xa) chdir(&(0x7f0000000240)='./file0\x00') sendfile(r1, r0, 0x0, 0x40001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040)) 12m15.204633548s ago: executing program 5 (id=612): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r2, 0x4, 0x182400) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r0, 0x540b, 0x2) 12m14.5123504s ago: executing program 5 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000000c0)="800000800000210ee7decd7a0003a909e3a06646b9eeace0ce5b32e3471196845bdbec7a7bf6", 0x26, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 12m13.668806217s ago: executing program 33 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000000c0)="800000800000210ee7decd7a0003a909e3a06646b9eeace0ce5b32e3471196845bdbec7a7bf6", 0x26, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 11m49.165240646s ago: executing program 4 (id=699): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0xde, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x2c}}, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000080)={{}, {0xe}, 0x40000, 0xba}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0xa80485, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') 11m45.359454057s ago: executing program 4 (id=708): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007110560300000000009500a50500000000db5d63e053b4b3a6600ec263f6954409359f83ceba40c273ba94dc8d2ef8c013a4349be3a9eed0a64f913a9987d385969feda907f4a528cc5b07dfd7955d2dcbdcadac39010ddc865a8890c0de8ad3b68ab5ca0ad12a2f5f3fbe7b96d63c0f23bea938ccec353f56d17579256b766d0175351fcb057431a74724a46047618caaf515766a11eb3c8ad03ca9ae6bdd80963f7c4beb6228155ddecd8f60035fb7134d1e331f4c18259020d6b1419405ace718688e8783fcf2bfbe9e1d72bb9306a692f964"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[], 0x40}}, 0x20000840) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x6, 0xd, 0x9, 0x6, 0xc, @remote, @private1, 0x8, 0x80, 0xdc, 0xc}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4) socket(0x1000000010, 0x80802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 11m44.560123452s ago: executing program 4 (id=713): socket$inet(0x2, 0x5, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r2, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) 11m42.797301708s ago: executing program 4 (id=721): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 11m42.631843064s ago: executing program 4 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4480, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) read$FUSE(r0, 0x0, 0x0) getgid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 11m41.620660316s ago: executing program 4 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x200, 0x0, 0x4, 0x2, 0x3}, 0x20) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40890}, 0x10) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 11m25.495817529s ago: executing program 34 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x200, 0x0, 0x4, 0x2, 0x3}, 0x20) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40890}, 0x10) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 2m56.337898332s ago: executing program 1 (id=1821): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) setpgid(r0, r4) 2m50.431103539s ago: executing program 1 (id=1826): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m48.414572134s ago: executing program 1 (id=1835): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x300, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x12) syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(0x0, r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x28}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) r4 = socket$nl_generic(0x11, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1f) prlimit64(r3, 0x6, 0x0, &(0x7f0000000040)) fcntl$getown(r4, 0x9) r5 = fanotify_init(0x200, 0x40000) close(r5) 2m42.796072842s ago: executing program 1 (id=1838): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7fdc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x46040) 2m36.944440919s ago: executing program 1 (id=1845): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x300, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x803, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(0x0, r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x28}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) r4 = socket$nl_generic(0x11, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1f) prlimit64(r3, 0x6, 0x0, &(0x7f0000000040)) fcntl$getown(r4, 0x9) r5 = fanotify_init(0x200, 0x40000) close(r5) 2m32.322836815s ago: executing program 1 (id=1850): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) setpgid(r0, r4) 2m15.648139166s ago: executing program 35 (id=1850): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) setpgid(r0, r4) 17.417767876s ago: executing program 0 (id=2083): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) 16.300293592s ago: executing program 0 (id=2087): socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) 15.265512295s ago: executing program 0 (id=2092): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b", 0xa5}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13.743197113s ago: executing program 0 (id=2095): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 13.255406918s ago: executing program 7 (id=2097): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x300, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x803, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x12) syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(0x0, r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x28}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) r4 = socket$nl_generic(0x11, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1f) prlimit64(r3, 0x6, 0x0, &(0x7f0000000040)) fcntl$getown(r4, 0x9) r5 = fanotify_init(0x200, 0x40000) close(r5) 12.645264397s ago: executing program 6 (id=2098): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) 12.058186186s ago: executing program 7 (id=2099): openat$tun(0xffffffffffffff9c, 0x0, 0x14c00, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x7ffffffd}}, 0x2, 0x0, 0xe457, 0x0, 0xa, 0x6}, 0x9c) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) 12.006071038s ago: executing program 3 (id=2101): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x14c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x7ffffffd}}, 0x2, 0x0, 0xe457, 0x0, 0xa, 0x6}, 0x9c) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x5be5, 0x2, 0x400, 0x5, 0x2d2, 0x94}, 0x9c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 9.208708407s ago: executing program 6 (id=2102): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546bc2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4303000000000000004d93d33bd26ec072165a8902b734f282d876c68369ee54253937a3db4200ecc2f177d174aa966e1ba47e88a8ed0e71dc51d3c7bee77a186d1e5a70c47a61455f269ee53bdfdc46dd854afbba774bac401cacb3c8c411724906a2d0761634e14d092dfdb6d91167d3076870743ad908e681", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)="27a1", 0x2}], 0x1}}], 0x2, 0x4000) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 9.197237837s ago: executing program 8 (id=2103): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) 9.057834482s ago: executing program 3 (id=2104): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.908323776s ago: executing program 6 (id=2105): socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) 7.987838846s ago: executing program 7 (id=2106): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5}}}, 0x90) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r2}, 0xc) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r5, 0x4, 0x40800) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r5, r7, 0x0, 0x7ffff004) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 7.948728447s ago: executing program 8 (id=2107): socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) 6.623116759s ago: executing program 6 (id=2108): socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) 6.543483322s ago: executing program 7 (id=2109): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 6.506716473s ago: executing program 3 (id=2110): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 5.949964191s ago: executing program 8 (id=2111): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 5.750673927s ago: executing program 6 (id=2112): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) 4.502817317s ago: executing program 8 (id=2113): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 4.502204247s ago: executing program 3 (id=2114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x800) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000f40)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7d7, 0x3a, 'nq\x00', 0x3a, '!\'', 0x3a, './file0'}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, 0x0, 0x0) writev(r6, &(0x7f0000001980)=[{0x0}], 0x1) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) 4.499958677s ago: executing program 0 (id=2115): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) 2.253332928s ago: executing program 3 (id=2116): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.251479428s ago: executing program 7 (id=2117): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 2.245427908s ago: executing program 6 (id=2118): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.113033172s ago: executing program 8 (id=2119): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 1.081049996s ago: executing program 0 (id=2120): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43c", 0x66, 0x30000090, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x102, 0x0) eventfd2(0x2, 0x80800) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x183002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 1.071195306s ago: executing program 7 (id=2121): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x300, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x12) syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(0x0, r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x28}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) r4 = socket$nl_generic(0x11, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1f) prlimit64(r3, 0x6, 0x0, &(0x7f0000000040)) fcntl$getown(r4, 0x9) r5 = fanotify_init(0x200, 0x40000) close(r5) 875.634452ms ago: executing program 3 (id=2122): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 8 (id=2123): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): T5536] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 183.779437][ T5536] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 183.806821][ T5520] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 183.827897][ T5536] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.272: bg 0: block 40: padding at end of block bitmap is not set [ 183.883639][ T5520] EXT4-fs (loop5): 1 orphan inode deleted [ 183.898006][ T5520] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 183.922272][ T4240] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.007300][ T4240] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 184.119982][ T4240] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 184.120411][ T5536] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 185.598057][ T5555] hub 8-0:1.0: USB hub found [ 185.603512][ T5555] hub 8-0:1.0: 1 port detected [ 185.767964][ T5520] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 16: comm syz.5.267: lblock 0 mapped to illegal pblock 16 (length 1) [ 185.790298][ T5536] EXT4-fs (loop1): 1 truncate cleaned up [ 185.838045][ T5536] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,stripe=0x0000000000000001,jqfmt=vfsv1,grpjquota=,,errors=continue. Quota mode: writeback. [ 186.183559][ T5567] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 16: comm syz.5.267: lblock 0 mapped to illegal pblock 16 (length 1) [ 186.451408][ T263] block nbd3: Attempted send on invalid socket [ 186.458229][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 186.472333][ T5565] SQUASHFS error: Failed to read block 0x0: -5 [ 186.478542][ T5565] unable to read squashfs_super_block [ 186.575810][ T4192] Bluetooth: hci4: command 0x0406 tx timeout [ 186.581897][ T4192] Bluetooth: hci1: command 0x0406 tx timeout [ 186.588090][ T4192] Bluetooth: hci0: command 0x0406 tx timeout [ 186.594150][ T4192] Bluetooth: hci2: command 0x0406 tx timeout [ 186.744277][ T5569] netlink: 104 bytes leftover after parsing attributes in process `syz.3.280'. [ 186.918547][ T4714] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 186.942469][ T4714] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 186.956089][ T4714] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 188.638979][ T5601] loop1: detected capacity change from 0 to 8 [ 188.657738][ T5597] loop3: detected capacity change from 0 to 32768 [ 188.806286][ T5597] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.288 (5597) [ 189.142104][ T5597] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 189.151263][ T5597] BTRFS info (device loop3): metadata ratio 0 [ 189.157354][ T5597] BTRFS info (device loop3): setting nodatasum [ 189.163598][ T5597] BTRFS info (device loop3): using free space tree [ 189.170109][ T5597] BTRFS info (device loop3): has skinny extents [ 189.279197][ T5601] SQUASHFS error: Failed to read block 0x1ec: -5 [ 189.387071][ T5601] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 189.890617][ T5631] loop5: detected capacity change from 0 to 256 [ 189.896209][ T5633] loop1: detected capacity change from 0 to 128 [ 190.020697][ T5597] BTRFS info (device loop3): enabling ssd optimizations [ 190.025941][ T5642] loop4: detected capacity change from 0 to 16 [ 190.111446][ T5642] erofs: (device loop4): mounted with root inode @ nid 36. [ 190.260699][ T5646] loop1: detected capacity change from 0 to 164 [ 190.287909][ T5642] attempt to access beyond end of device [ 190.287909][ T5642] loop4: rw=524288, want=12304, limit=16 [ 190.315754][ T5642] attempt to access beyond end of device [ 190.315754][ T5642] loop4: rw=524288, want=1072, limit=16 [ 190.410701][ T5650] mmap: syz.3.288 (5650) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 191.112097][ T5642] attempt to access beyond end of device [ 191.112097][ T5642] loop4: rw=0, want=12304, limit=16 [ 191.171944][ T25] audit: type=1800 audit(1781155148.107:42): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.292" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 191.228166][ T5654] loop5: detected capacity change from 0 to 256 [ 191.339949][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.427448][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.452049][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.517655][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.537916][ T5663] loop1: detected capacity change from 0 to 2048 [ 191.574411][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.610386][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.647980][ T5663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.651269][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.683830][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.693333][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.742343][ T5654] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 191.816589][ T25] audit: type=1800 audit(1781155148.706:43): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.297" name="file1" dev="loop5" ino=1048649 res=0 errno=0 [ 191.889020][ T5673] device syzkaller0 entered promiscuous mode [ 192.098615][ T5688] loop5: detected capacity change from 0 to 256 [ 193.154735][ T5688] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.187443][ T5688] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.271873][ T5699] loop1: detected capacity change from 0 to 64 [ 193.680962][ T5725] hub 8-0:1.0: USB hub found [ 193.686698][ T5725] hub 8-0:1.0: 1 port detected [ 195.231308][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.237668][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.550325][ T5753] set_capacity_and_notify: 1 callbacks suppressed [ 195.550339][ T5753] loop3: detected capacity change from 0 to 64 [ 195.619022][ T5755] loop4: detected capacity change from 0 to 1024 [ 195.657870][ T5759] loop1: detected capacity change from 0 to 128 [ 195.766146][ T5759] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.779325][ T5759] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.132568][ T5773] loop1: detected capacity change from 0 to 2048 [ 196.194373][ T5780] loop4: detected capacity change from 0 to 1024 [ 196.208196][ T5773] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.425575][ T5780] EXT4-fs (loop4): Ignoring removed bh option [ 196.955639][ T5780] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.339: lblock 2 mapped to illegal pblock 2 (length 1) [ 196.983604][ T5784] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.002535][ T5773] attempt to access beyond end of device [ 197.002535][ T5773] loop1: rw=524288, want=33554432, limit=2048 [ 197.016139][ T5780] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 197.029764][ T5780] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.339: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.054919][ T5780] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 197.075577][ T5780] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.339: Failed to acquire dquot type 0 [ 197.123756][ T5780] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 197.148279][ T5780] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.339: mark_inode_dirty error [ 197.223299][ T5780] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 197.269661][ T5780] EXT4-fs (loop4): 1 orphan inode deleted [ 197.299306][ T4494] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.336300][ T5780] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 197.368277][ T4494] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 197.389212][ T5787] syz.1.337 (5787) used greatest stack depth: 19896 bytes left [ 197.397099][ T4494] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:14: Failed to release dquot type 0 [ 197.564304][ T5780] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 16: comm syz.4.339: lblock 0 mapped to illegal pblock 16 (length 1) [ 197.571333][ T4234] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 197.715908][ T5802] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 197.806446][ T5804] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 16: comm syz.4.339: lblock 0 mapped to illegal pblock 16 (length 1) [ 197.830999][ T5799] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 198.212651][ T4234] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 198.228229][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.239473][ T4234] usb 6-1: Product: syz [ 198.243664][ T4234] usb 6-1: Manufacturer: syz [ 198.248369][ T4234] usb 6-1: SerialNumber: syz [ 198.258107][ T4234] usb 6-1: config 0 descriptor?? [ 198.484992][ T5820] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 198.485498][ T4188] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 198.498149][ T5820] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 198.546116][ T4672] usb 6-1: USB disconnect, device number 2 [ 198.586069][ T4188] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 198.612304][ T4188] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 198.684337][ T5828] hub 8-0:1.0: USB hub found [ 198.689126][ T5828] hub 8-0:1.0: 1 port detected [ 198.766679][ T5827] loop3: detected capacity change from 0 to 8192 [ 198.810619][ T5827] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 198.825962][ T5827] REISERFS (device loop3): using ordered data mode [ 198.834167][ T5827] reiserfs: using flush barriers [ 198.840492][ T5827] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.859308][ T5827] REISERFS (device loop3): checking transaction log (loop3) [ 198.878294][ T5827] REISERFS (device loop3): Using r5 hash to sort names [ 198.907455][ T5827] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 198.987767][ T5839] netlink: 'syz.4.360': attribute type 27 has an invalid length. [ 199.013327][ T5839] netlink: 'syz.4.360': attribute type 25 has an invalid length. [ 199.146146][ T5847] loop4: detected capacity change from 0 to 1024 [ 199.183065][ T5850] loop5: detected capacity change from 0 to 512 [ 199.252129][ T5847] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 199.311509][ T5850] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.363: iget: bad i_size value: 38620345925642 [ 199.344567][ T5850] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.363: couldn't read orphan inode 15 (err -117) [ 199.368760][ T5850] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,init_itable,data_err=ignore,nojournal_checksum,data_err=ignore,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 199.612501][ T5763] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 199.829667][ T4705] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 199.898374][ T5886] loop5: detected capacity change from 0 to 1024 [ 199.933516][ T5882] loop1: detected capacity change from 0 to 32768 [ 200.042977][ T5667] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 200.059392][ T25] audit: type=1800 audit(1781155156.417:44): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.373" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 200.107013][ T4705] usb 4-1: Using ep0 maxpacket: 16 [ 200.232295][ T4705] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.264364][ T4705] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.274135][ T4705] usb 4-1: config 0 interface 0 has no altsetting 0 [ 200.303068][ T4705] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 200.322492][ T4705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.350576][ T4705] usb 4-1: config 0 descriptor?? [ 200.446092][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.491472][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.511076][ T5667] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 200.533300][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.561704][ T5667] usb 5-1: config 0 descriptor?? [ 200.896606][ T4705] hid (null): bogus close delimiter [ 201.082614][ T5927] loop1: detected capacity change from 0 to 1024 [ 201.118926][ T4705] usb 4-1: USB disconnect, device number 5 [ 201.229438][ T5667] hid-led 0003:1D34:000A.0002: item fetching failed at offset 0/3 [ 201.249425][ T5667] hid-led: probe of 0003:1D34:000A.0002 failed with error -22 [ 201.284101][ T5909] loop5: detected capacity change from 0 to 40427 [ 201.338366][ T5909] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 201.358483][ T5909] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 201.436878][ T5909] F2FS-fs (loop5): invalid crc_offset: 1 [ 201.454753][ T4705] usb 5-1: USB disconnect, device number 2 [ 201.509963][ T5909] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 201.585508][ T5954] loop1: detected capacity change from 0 to 64 [ 201.782691][ T5909] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 201.803337][ T5909] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 201.919929][ T5972] loop1: detected capacity change from 0 to 256 [ 201.929694][ T4714] attempt to access beyond end of device [ 201.929694][ T4714] loop5: rw=2049, want=45104, limit=40427 [ 201.994675][ T5972] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.050063][ T5972] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 202.138294][ T5972] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 202.153290][ T5978] loop4: detected capacity change from 0 to 2048 [ 202.393539][ T5978] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none. [ 203.918447][ T6022] loop1: detected capacity change from 0 to 128 [ 203.980312][ T6027] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 203.998704][ T6022] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 204.032486][ T6022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.309350][ T6029] loop3: detected capacity change from 0 to 32768 [ 205.062241][ T5667] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 205.139645][ T6050] device bridge0 entered promiscuous mode [ 205.302362][ T6055] loop1: detected capacity change from 0 to 512 [ 205.412246][ T6055] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 205.474712][ T6055] EXT4-fs error (device loop1): ext4_fill_super:4872: inode #2: comm syz.1.412: iget: bogus i_mode (1) [ 205.486650][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.509176][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.520363][ T6055] EXT4-fs (loop1): get root inode failed [ 205.541512][ T6055] EXT4-fs (loop1): mount failed [ 205.551826][ T5667] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.579310][ T5667] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.595387][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.598614][ T6052] loop5: detected capacity change from 0 to 32768 [ 205.611801][ T5667] usb 5-1: config 0 descriptor?? [ 205.658199][ T6052] find_entry called with index >= next_index [ 205.665128][ T6052] find_entry called with index >= next_index [ 205.671618][ T6052] find_entry called with index >= next_index [ 205.677987][ T6052] find_entry called with index >= next_index [ 205.684352][ T6052] find_entry called with index >= next_index [ 205.691114][ T6052] add_index: next_index = 0. Resetting! [ 205.698101][ T6052] find_entry called with index >= next_index [ 205.705046][ T6052] find_entry called with index >= next_index [ 205.711081][ T6052] find_entry called with index >= next_index [ 205.749343][ T6052] non-latin1 character 0x3ff found in JFS file name [ 205.789470][ T6052] mount with iocharset=utf8 to access [ 206.513811][ T5667] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 206.792946][ T5667] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 206.818186][ T5667] usb 5-1: USB disconnect, device number 3 [ 207.063848][ T6083] fido_id[6083]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 207.079081][ T6087] kvm: apic: phys broadcast and lowest prio [ 207.098373][ T6092] syz.1.426 uses obsolete (PF_INET,SOCK_PACKET) [ 208.296497][ T6129] loop5: detected capacity change from 0 to 512 [ 208.359142][ T6129] EXT4-fs (loop5): 1 truncate cleaned up [ 208.375090][ T6129] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 208.497101][ T25] audit: type=1800 audit(1781155164.315:45): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.436" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 208.534860][ T6129] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.436: invalid indirect mapped block 234881024 (level 0) [ 208.596310][ T6129] EXT4-fs (loop5): Remounting filesystem read-only [ 208.609836][ T6139] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 209.144347][ T25] audit: type=1326 audit(1781155164.905:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6f6ae59 code=0x7fc00000 [ 209.169138][ T4305] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 209.284283][ T6163] loop3: detected capacity change from 0 to 512 [ 209.441610][ T6177] loop1: detected capacity change from 0 to 512 [ 209.442698][ T6163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.454498][ T4305] usb 6-1: Using ep0 maxpacket: 32 [ 209.517859][ T6177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.550505][ T6177] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.628097][ T4305] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 209.637791][ T4305] usb 6-1: config 2 has no interface number 0 [ 209.644154][ T4305] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 209.654705][ T4305] usb 6-1: config 2 interface 88 has no altsetting 0 [ 209.681113][ T6177] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 209.828340][ T4305] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 209.845121][ T4305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 209.853779][ T4305] usb 6-1: Product: syz [ 209.859684][ T4305] usb 6-1: Manufacturer: syz [ 209.871136][ T4305] usb 6-1: SerialNumber: syz [ 209.978151][ T6151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.280484][ T6151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.362615][ T4705] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 210.619022][ T4705] usb 2-1: Using ep0 maxpacket: 16 [ 210.747354][ T4705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.763648][ T4705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.940238][ T4705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.956174][ T4705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.964914][ T4705] usb 2-1: Product: syz [ 210.969087][ T4705] usb 2-1: Manufacturer: syz [ 210.979685][ T4705] usb 2-1: SerialNumber: syz [ 211.293990][ T6116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.324457][ T4705] usb 2-1: 0:2 : does not exist [ 211.369329][ T4705] usb 2-1: USB disconnect, device number 4 [ 211.449477][ T6215] device syzkaller1 entered promiscuous mode [ 211.452596][ T4305] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 211.491719][ T4305] asix: probe of 6-1:2.88 failed with error -71 [ 211.517066][ T4305] usb 6-1: USB disconnect, device number 3 [ 212.493593][ T6228] loop3: detected capacity change from 0 to 2048 [ 212.575572][ T6228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.669936][ T6247] hub 8-0:1.0: USB hub found [ 212.675725][ T6247] hub 8-0:1.0: 1 port detected [ 212.722882][ T6228] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.744491][ T6228] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 212.902023][ T6254] tipc: Started in network mode [ 212.922792][ T6245] 9pnet: bogus RWRITE count (2 > 1) [ 212.943036][ T6254] tipc: Node identity ac14140f, cluster identity 4711 [ 213.394011][ T6254] tipc: New replicast peer: 255.255.255.255 [ 213.715723][ T6254] tipc: Enabled bearer , priority 10 [ 213.772441][ T4325] udevd[4325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.934430][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 214.775410][ T6276] bond0: (slave syz_tun): Releasing backup interface [ 214.865545][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.891675][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.911290][ T6276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.927242][ T6276] device bridge_slave_0 left promiscuous mode [ 214.936034][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.981225][ T6276] device bridge_slave_1 left promiscuous mode [ 214.999167][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.019902][ T6276] bond0: (slave bond_slave_0): Releasing backup interface [ 215.083350][ T6276] bond0: (slave bond_slave_1): Releasing backup interface [ 215.204854][ T6276] team0: Port device team_slave_0 removed [ 215.248400][ T6276] team0: Port device team_slave_1 removed [ 215.269380][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.298826][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.329657][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.355712][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.416261][ T6288] team0: Mode changed to "loadbalance" [ 215.619480][ T6279] loop5: detected capacity change from 0 to 32768 [ 215.659235][ T6279] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.481 (6279) [ 215.743518][ T6279] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 215.775750][ T4672] tipc: Node number set to 2886997007 [ 215.784492][ T6279] BTRFS info (device loop5): setting nodatacow, compression disabled [ 215.812526][ T6279] BTRFS info (device loop5): turning on flush-on-commit [ 215.819514][ T6279] BTRFS info (device loop5): using free space tree [ 215.833913][ T1331] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 215.897976][ T6279] BTRFS info (device loop5): has skinny extents [ 216.034565][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 216.087517][ T6279] BTRFS info (device loop5): enabling ssd optimizations [ 216.240023][ T6330] vivid-002: ================= START STATUS ================= [ 216.257059][ T6330] vivid-002: Radio HW Seek Mode: Bounded [ 216.282645][ T6330] vivid-002: Radio Programmable HW Seek: false [ 216.300400][ T6330] vivid-002: RDS Rx I/O Mode: Block I/O [ 216.324585][ T6330] vivid-002: Generate RBDS Instead of RDS: false [ 216.332743][ T6330] vivid-002: RDS Reception: true [ 216.341439][ T6330] vivid-002: RDS Program Type: 0 inactive [ 216.358322][ T6330] vivid-002: RDS PS Name: inactive [ 216.363861][ T6330] vivid-002: RDS Radio Text: inactive [ 216.391236][ T6330] vivid-002: RDS Traffic Announcement: false inactive [ 216.404861][ T1331] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.416445][ T6330] vivid-002: RDS Traffic Program: false inactive [ 216.419020][ T1331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.432326][ T6330] vivid-002: RDS Music: false inactive [ 216.452345][ T1331] usb 5-1: Product: syz [ 216.456919][ T6330] vivid-002: ================== END STATUS ================== [ 216.466451][ T1331] usb 5-1: Manufacturer: syz [ 216.483974][ T1331] usb 5-1: SerialNumber: syz [ 216.510917][ T1331] usb 5-1: config 0 descriptor?? [ 216.804170][ T1331] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.597582][ T5667] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 218.036284][ T5667] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.046747][ T5667] usb 4-1: config 0 has no interfaces? [ 218.130578][ T6375] vivid-000: ================= START STATUS ================= [ 218.171959][ T6375] vivid-000: Radio HW Seek Mode: Bounded [ 218.185129][ T6375] vivid-000: Radio Programmable HW Seek: false [ 218.197647][ T6375] vivid-000: RDS Rx I/O Mode: Block I/O [ 218.217127][ T6375] vivid-000: Generate RBDS Instead of RDS: false [ 218.223510][ T6375] vivid-000: RDS Reception: true [ 218.228957][ T6375] vivid-000: RDS Program Type: 0 inactive [ 218.234712][ T6375] vivid-000: RDS PS Name: inactive [ 218.242383][ T5667] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 218.251873][ T5667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.260541][ T6375] vivid-000: RDS Radio Text: inactive [ 218.266043][ T6375] vivid-000: RDS Traffic Announcement: false inactive [ 218.273274][ T5667] usb 4-1: Product: syz [ 218.277445][ T5667] usb 4-1: Manufacturer: syz [ 218.283422][ T6375] vivid-000: RDS Traffic Program: false inactive [ 218.289881][ T5667] usb 4-1: SerialNumber: syz [ 218.297223][ T5667] usb 4-1: config 0 descriptor?? [ 218.302587][ T6375] vivid-000: RDS Music: false inactive [ 218.308082][ T6375] vivid-000: ================== END STATUS ================== [ 218.377128][ T4305] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 218.398123][ T6380] device syzkaller0 entered promiscuous mode [ 218.773875][ T4305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.787135][ T4305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.879550][ T4305] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.888684][ T4305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.899791][ T4305] usb 2-1: SerialNumber: syz [ 219.071803][ T1331] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 219.088740][ T1331] usb 5-1: USB disconnect, device number 4 [ 219.201781][ T4305] usb 2-1: 0:2 : does not exist [ 219.219389][ T4305] usb 2-1: USB disconnect, device number 5 [ 219.399779][ T6383] ALSA: mixer_oss: invalid OSS volume 'V‚8‰9‘OLUME' [ 219.406031][ T6385] fuse: Bad value for 'fd' [ 219.446894][ T4325] udevd[4325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.539277][ T6391] input: syz1 as /devices/virtual/input/input8 [ 219.897959][ T6403] loop4: detected capacity change from 0 to 32768 [ 220.011003][ T6407] loop1: detected capacity change from 0 to 1024 [ 220.106863][ T6407] EXT4-fs (loop1): orphan cleanup on readonly fs [ 220.132863][ T6407] EXT4-fs (loop1): 1 truncate cleaned up [ 220.143250][ T6407] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.332413][ T1331] usb 4-1: USB disconnect, device number 6 [ 220.485144][ T6416] hub 8-0:1.0: USB hub found [ 220.521203][ T6414] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.521763][ T6416] hub 8-0:1.0: 1 port detected [ 221.017375][ T1331] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.401424][ T1331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.414435][ T1331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.424709][ T1331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.438038][ T1331] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.447428][ T1331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.468412][ T6450] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 221.496374][ T1331] usb 5-1: config 0 descriptor?? [ 221.821013][ T6461] loop3: detected capacity change from 0 to 4096 [ 222.034721][ T1331] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 222.244968][ T6461] EXT4-fs (loop3): Test dummy encryption mode enabled [ 222.413718][ T6461] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000008,user_xattr,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,noblock_validity,init_itable,journal_dev=0x0000000000000003,noinit_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 222.572400][ T1331] plantronics 0003:047F:FFFF.0004: parse failed [ 222.579083][ T1331] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 222.596477][ T1331] usb 5-1: USB disconnect, device number 5 [ 222.982172][ T6485] hub 8-0:1.0: USB hub found [ 222.988744][ T6485] hub 8-0:1.0: 1 port detected [ 222.990148][ T6481] device syzkaller0 entered promiscuous mode [ 223.145000][ T6494] vivid-004: disconnect [ 223.173719][ T6486] vivid-004: reconnect [ 223.420876][ T6344] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 223.638493][ T6507] loop5: detected capacity change from 0 to 4096 [ 223.709734][ T6345] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.721319][ T6507] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 223.733899][ T6507] ntfs3: loop5: Failed to load $MFT. [ 223.745725][ T6344] usb 2-1: Using ep0 maxpacket: 32 [ 223.833877][ T6516] overlayfs: failed to clone upperpath [ 223.925081][ T6344] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 223.944447][ T6344] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 223.953269][ T6344] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 223.962821][ T6344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.973751][ T6344] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.989465][ T6344] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.007006][ T6344] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 224.018464][ T6344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.039221][ T6344] usb 2-1: config 0 descriptor?? [ 224.087602][ T6523] loop3: detected capacity change from 0 to 512 [ 224.158401][ T6345] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 224.173766][ T6523] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.188382][ T6345] usb 5-1: config 220 has an invalid descriptor of length 220, skipping remainder of the config [ 224.207853][ T6345] usb 5-1: config 220 has no interface number 2 [ 224.217444][ T6345] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 224.231321][ T6345] usb 5-1: config 220 interface 0 has no altsetting 0 [ 224.239284][ T6345] usb 5-1: config 220 interface 76 has no altsetting 0 [ 224.249367][ T6345] usb 5-1: config 220 interface 1 has no altsetting 0 [ 224.288049][ T6523] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 224.315939][ T6523] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.349648][ T6344] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 224.417987][ T6344] usb 2-1: USB disconnect, device number 6 [ 224.443528][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.448932][ T6344] usblp0: removed [ 224.451171][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.469353][ T6345] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 224.510916][ T6345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.584015][ T6345] usb 5-1: Product: syz [ 224.593993][ T6345] usb 5-1: Manufacturer: syz [ 224.608385][ T6345] usb 5-1: SerialNumber: syz [ 224.960946][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.003874][ T6345] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 225.023922][ T6345] usb 5-1: No valid video chain found. [ 225.029541][ T6345] usb 5-1: selecting invalid altsetting 0 [ 225.036829][ T6344] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 225.038975][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.077306][ T4305] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 225.164131][ T6345] usb 5-1: selecting invalid altsetting 0 [ 225.169909][ T6345] usbtest: probe of 5-1:220.1 failed with error -22 [ 225.200240][ T6345] usb 5-1: USB disconnect, device number 6 [ 225.301602][ T6344] usb 2-1: Using ep0 maxpacket: 32 [ 225.344516][ T4305] usb 6-1: Using ep0 maxpacket: 8 [ 225.387732][ T6521] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.397272][ T6521] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.406467][ T6521] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.415573][ T6521] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.438145][ T6344] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 225.447202][ T6344] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 225.470047][ T6344] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 225.477922][ T4305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.494060][ T4305] usb 6-1: config 0 has no interfaces? [ 225.499760][ T4305] usb 6-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 225.504289][ T6344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.509566][ T4305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.531977][ T6344] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.547523][ T4305] usb 6-1: config 0 descriptor?? [ 225.549165][ T6344] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.570009][ T6344] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 225.775738][ T6541] loop4: detected capacity change from 0 to 32768 [ 225.782674][ T6344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.792395][ T6344] usb 2-1: config 0 descriptor?? [ 225.826061][ T4234] usb 6-1: USB disconnect, device number 4 [ 226.092591][ T6344] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 226.103244][ T4705] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 226.165919][ T6563] tipc: Enabling of bearer rejected, failed to enable media [ 226.352320][ T4234] usb 2-1: USB disconnect, device number 7 [ 226.360033][ T4234] usblp0: removed [ 226.519879][ T4705] usb 4-1: Using ep0 maxpacket: 16 [ 226.649039][ T4705] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.674688][ T4705] usb 4-1: config 0 has no interface number 0 [ 226.969427][ T4705] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 227.003869][ T4705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.012513][ T4705] usb 4-1: Product: syz [ 227.016946][ T4705] usb 4-1: Manufacturer: syz [ 227.021629][ T4705] usb 4-1: SerialNumber: syz [ 227.035527][ T4705] usb 4-1: config 0 descriptor?? [ 227.077642][ T4705] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 227.274881][ T6573] loop5: detected capacity change from 0 to 32768 [ 227.306197][ T6579] hub 8-0:1.0: USB hub found [ 227.335180][ T6573] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.563 (6573) [ 227.413990][ T6579] hub 8-0:1.0: 1 port detected [ 227.487598][ T6583] loop1: detected capacity change from 0 to 32768 [ 227.502293][ T6573] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 227.511066][ T6573] BTRFS info (device loop5): setting nodatacow, compression disabled [ 227.519235][ T6573] BTRFS info (device loop5): force clearing of disk cache [ 227.526422][ T6573] BTRFS info (device loop5): turning on sync discard [ 227.533089][ T6573] BTRFS info (device loop5): turning off barriers [ 227.539536][ T6573] BTRFS info (device loop5): use no compression [ 227.545799][ T6573] BTRFS info (device loop5): disabling free space tree [ 227.552632][ T6573] BTRFS info (device loop5): enabling ssd optimizations [ 227.559573][ T6573] BTRFS info (device loop5): using spread ssd allocation scheme [ 227.567218][ T6573] BTRFS info (device loop5): not using ssd optimizations [ 227.574222][ T6573] BTRFS info (device loop5): not using spread ssd allocation scheme [ 227.582572][ T6573] BTRFS info (device loop5): has skinny extents [ 227.901458][ T6573] BTRFS info (device loop5): clearing free space tree [ 227.909920][ T6573] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 227.920620][ T6573] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 228.027891][ T25] audit: type=1800 audit(1781155182.591:47): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.563" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 228.234576][ T6609] loop1: detected capacity change from 0 to 32768 [ 228.319618][ T6609] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.570 (6609) [ 228.374936][ T6609] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 228.384011][ T6609] BTRFS info (device loop1): turning on sync discard [ 228.390848][ T6609] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 228.400824][ T6609] BTRFS info (device loop1): use zstd compression, level 3 [ 228.408053][ T6609] BTRFS info (device loop1): turning on async discard [ 228.415182][ T6609] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 228.425819][ T6609] BTRFS info (device loop1): trying to use backup root at mount time [ 228.434217][ T6609] BTRFS info (device loop1): enabling auto defrag [ 228.440689][ T6609] BTRFS info (device loop1): using free space tree [ 228.447583][ T6609] BTRFS info (device loop1): has skinny extents [ 228.600733][ T4177] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop5 scanned by udevd (4177) [ 228.850746][ T4281] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 228.892010][ T6609] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 228.917888][ T4281] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0xc092cdc2 level 0 [ 228.966241][ T6631] tipc: Started in network mode [ 228.987958][ T6609] BTRFS warning (device loop1): couldn't read tree root [ 229.005534][ T6609] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 229.010092][ T6631] tipc: Node identity 2284ee331c77, cluster identity 4711 [ 229.016544][ T6609] BTRFS warning (device loop1): couldn't read tree root [ 229.040786][ T6609] BTRFS info (device loop1): enabling ssd optimizations [ 229.048821][ T6609] BTRFS info (device loop1): clearing free space tree [ 229.055806][ T6609] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 229.065543][ T6609] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.081287][ T6631] tipc: Enabled bearer , priority 0 [ 229.084899][ T6609] BTRFS info (device loop1): creating free space tree [ 229.097098][ T6609] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 229.106728][ T6609] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.233430][ T6630] tipc: Resetting bearer [ 230.018612][ T4705] gspca_spca1528: reg_r err -71 [ 230.023563][ T4705] spca1528: probe of 4-1:0.1 failed with error -71 [ 230.055959][ T4705] usb 4-1: USB disconnect, device number 7 [ 230.077557][ T4325] udevd[4325]: setting mode of /dev/bus/usb/004/007 to 020664 failed: No such file or directory [ 230.109550][ T6630] tipc: Disabling bearer [ 230.116856][ T4325] udevd[4325]: setting owner of /dev/bus/usb/004/007 to uid=0, gid=0 failed: No such file or directory [ 230.414315][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 230.877332][ T6683] syz.4.582 sent an empty control message without MSG_MORE. [ 232.580839][ T6701] loop1: detected capacity change from 0 to 256 [ 232.598896][ T6701] exfat: Unknown parameter 'keep_last_dots' [ 234.146326][ T6726] loop5: detected capacity change from 0 to 1024 [ 234.238176][ T6726] EXT4-fs (loop5): orphan cleanup on readonly fs [ 234.261418][ T6726] EXT4-fs (loop5): 1 truncate cleaned up [ 234.273463][ T6726] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.331379][ T6341] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 236.618726][ T6341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.634172][ T6341] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.729092][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.603'. [ 236.744072][ T6341] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.761124][ T6341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.769695][ T6341] usb 4-1: SerialNumber: syz [ 236.941198][ T6753] device syzkaller0 entered promiscuous mode [ 236.957230][ T6753] tipc: Enabled bearer , priority 0 [ 237.029426][ T6752] tipc: Resetting bearer [ 237.075826][ T6752] tipc: Disabling bearer [ 237.112228][ T6341] usb 4-1: 0:2 : does not exist [ 237.152811][ T6341] usb 4-1: USB disconnect, device number 8 [ 237.196941][ T6760] loop5: detected capacity change from 0 to 256 [ 237.266403][ T6760] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 237.415212][ T6760] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x4fc9b72c) [ 237.444392][ T6760] exFAT-fs (loop5): Filesystem has been set read-only [ 237.444449][ T4325] udevd[4325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.510075][ T4714] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x4fc9b72c) [ 237.578801][ T4714] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x4fc9b72c) [ 238.061081][ T6809] loop2: detected capacity change from 0 to 7 [ 238.092059][ T6809] Dev loop2: unable to read RDB block 7 [ 238.114391][ T6809] loop2: unable to read partition table [ 238.125382][ T6809] loop2: partition table beyond EOD, truncated [ 238.163231][ T6809] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.215456][ T4277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.238494][ T3559] Dev loop2: unable to read RDB block 7 [ 238.240984][ T6816] loop4: detected capacity change from 0 to 764 [ 238.253161][ T3559] loop2: unable to read partition table [ 238.258927][ T3559] loop2: partition table beyond EOD, truncated [ 238.310232][ T4277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.970975][ T4277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.076379][ T4277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.521463][ T4277] tipc: Left network mode [ 239.541007][ T6671] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 239.959255][ T6671] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.996434][ T6671] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.044065][ T6846] device syzkaller0 entered promiscuous mode [ 240.123947][ T6671] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.143668][ T6671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.182481][ T6671] usb 5-1: SerialNumber: syz [ 240.513999][ T6859] loop1: detected capacity change from 0 to 64 [ 240.587074][ T6671] usb 5-1: 0:2 : does not exist [ 240.663691][ T6671] usb 5-1: USB disconnect, device number 7 [ 240.819183][ T4325] udevd[4325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.838937][ T6859] hfs: request for non-existent node 131072 in B*Tree [ 240.922051][ T6841] chnl_net:caif_netlink_parms(): no params data found [ 240.951710][ T6859] hfs: request for non-existent node 131072 in B*Tree [ 241.211387][ T6867] device syzkaller0 entered promiscuous mode [ 241.252188][ T6869] hfs: request for non-existent node 131072 in B*Tree [ 241.325558][ T6869] hfs: request for non-existent node 131072 in B*Tree [ 241.394314][ T6870] hfs: request for non-existent node 131072 in B*Tree [ 241.411456][ T6870] hfs: request for non-existent node 131072 in B*Tree [ 241.569001][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.576099][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.725247][ T6841] device bridge_slave_0 entered promiscuous mode [ 241.979012][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.994650][ T4234] Bluetooth: hci3: command 0x0409 tx timeout [ 242.007599][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.016229][ T6841] device bridge_slave_1 entered promiscuous mode [ 242.039088][ T6841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.050444][ T6841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.077001][ T6841] team0: Port device team_slave_0 added [ 242.153958][ T6841] team0: Port device team_slave_1 added [ 242.312598][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.381486][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.573337][ T6841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.710769][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.717957][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.744657][ T6841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.940697][ T5667] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 242.961274][ T6841] device hsr_slave_0 entered promiscuous mode [ 242.975133][ T6841] device hsr_slave_1 entered promiscuous mode [ 242.998917][ T6841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.023452][ T6841] Cannot create hsr debugfs directory [ 243.091852][ T6925] hub 8-0:1.0: USB hub found [ 243.097676][ T6925] hub 8-0:1.0: 1 port detected [ 243.393819][ T5667] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.480423][ T5667] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 243.640051][ T5667] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 243.844078][ T5667] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.853862][ T5667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.861867][ T5667] usb 4-1: Product: syz [ 243.866875][ T5667] usb 4-1: Manufacturer: syz [ 243.871515][ T5667] usb 4-1: SerialNumber: syz [ 243.923320][ T6904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 244.073673][ T6841] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.115505][ T6841] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.182784][ T6841] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.201051][ T6841] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.261997][ T6904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 244.278836][ T6671] Bluetooth: hci3: command 0x041b tx timeout [ 244.715261][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.906493][ T4277] device hsr_slave_0 left promiscuous mode [ 245.014750][ T4277] device hsr_slave_1 left promiscuous mode [ 245.029369][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.055588][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.071385][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.078812][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.096888][ T6904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.111691][ T4277] device bridge_slave_1 left promiscuous mode [ 245.118507][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.299971][ T4277] device bridge_slave_0 left promiscuous mode [ 245.317609][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.331308][ T4277] device bridge0 left promiscuous mode [ 245.337839][ T4277] device veth1_macvtap left promiscuous mode [ 245.381165][ T5667] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 245.387775][ T5667] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 245.406268][ T4277] device veth0_macvtap left promiscuous mode [ 245.433766][ T4277] device veth1_vlan left promiscuous mode [ 245.443219][ T4277] device veth0_vlan left promiscuous mode [ 245.443564][ T5667] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 245.696693][ T5667] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 246.751987][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 246.893582][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 246.923581][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 246.943677][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.972253][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.041308][ T4277] bond0 (unregistering): Released all slaves [ 248.928579][ T6675] Bluetooth: hci3: command 0x0419 tx timeout [ 249.055125][ T7010] loop4: detected capacity change from 0 to 4096 [ 249.071955][ T7015] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 249.089650][ T5667] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 249.095904][ T7015] netlink: 152 bytes leftover after parsing attributes in process `syz.0.659'. [ 249.172032][ T5667] usb 4-1: USB disconnect, device number 9 [ 249.178540][ T5667] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 249.184531][ T7015] .`: renamed from bond0 [ 249.257682][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 249.328417][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 249.371047][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.478254][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.493159][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.911323][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.085367][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.182334][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.189480][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.224889][ T4188] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 250.273390][ T4188] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 250.285906][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.339790][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.392608][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.399742][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.494970][ T7035] [ 250.599323][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.610496][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.619276][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.647792][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.667566][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.685079][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.703744][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.756621][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.784183][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.919298][ T6841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.088287][ T6841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.236476][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.288828][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.630263][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.868119][ T7066] loop4: detected capacity change from 0 to 2048 [ 252.024501][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.046981][ T7076] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.074450][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.112238][ T6841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.167754][ T7066] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 252.251880][ T7066] Remounting filesystem read-only [ 254.184431][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.311680][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.076544][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.226922][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.340357][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.348236][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.376004][ T7122] loop1: detected capacity change from 0 to 2048 [ 255.408952][ T6841] device veth0_vlan entered promiscuous mode [ 255.542324][ T6841] device veth1_vlan entered promiscuous mode [ 255.626449][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.105945][ T7122] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 256.398746][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.463087][ T6841] device veth0_macvtap entered promiscuous mode [ 257.413631][ T6841] device veth1_macvtap entered promiscuous mode [ 257.486570][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.515256][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.647638][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.647802][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.650943][ T4330] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 258.524031][ T4330] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 258.525826][ T4330] EXT4-fs (loop1): This should not happen!! Data will be lost [ 258.525826][ T4330] [ 258.526070][ T4330] EXT4-fs (loop1): Total free blocks count 0 [ 258.526300][ T4330] EXT4-fs (loop1): Free/Dirty block details [ 258.526801][ T4330] EXT4-fs (loop1): free_blocks=2415919504 [ 258.527251][ T4330] EXT4-fs (loop1): dirty_blocks=3856 [ 258.527428][ T4330] EXT4-fs (loop1): Block reservation details [ 258.527441][ T4330] EXT4-fs (loop1): i_reserved_data_blocks=241 [ 258.619436][ T4330] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 2048 with error 28 [ 258.619515][ T4330] EXT4-fs (loop1): This should not happen!! Data will be lost [ 258.619515][ T4330] [ 259.223755][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.316951][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.316976][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.316987][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.316999][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.470421][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.479563][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.480198][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.480678][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.481157][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.511359][ T6841] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.511436][ T6841] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.511462][ T6841] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.511489][ T6841] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.307253][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.307274][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.313726][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.470972][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.470995][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.471255][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 260.736909][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.737368][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.514360][ T7206] Set syz1 is full, maxelem 14 reached [ 263.603566][ T7210] loop4: detected capacity change from 0 to 256 [ 263.758784][ T7210] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.846251][ T7210] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 263.893008][ T7219] device syzkaller0 entered promiscuous mode [ 264.574726][ T7219] TC_ACT_REPEAT abuse ? [ 264.594497][ T7210] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 266.107626][ T7237] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 267.811793][ T7241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.841119][ T7241] bond0: (slave bond2): making interface the new active one [ 267.892554][ T7241] bond0: (slave bond2): Enslaving as an active interface with an up link [ 267.954694][ T7242] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 268.067473][ T7255] tipc: Enabled bearer , priority 10 [ 268.244108][ T7272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 270.950682][ T7316] tipc: Enabling of bearer rejected, failed to enable media [ 273.532222][ T7356] dns_resolver: Unsupported server list version (55) [ 275.090460][ T7366] device syzkaller0 entered promiscuous mode [ 276.092539][ T5665] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 276.362183][ T7388] loop3: detected capacity change from 0 to 32768 [ 276.637513][ T5665] usb 2-1: Using ep0 maxpacket: 32 [ 276.698474][ T7397] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.143657][ T7388] XFS (loop3): Mounting V5 Filesystem [ 277.182843][ T5665] usb 2-1: config 242 has an invalid interface number: 195 but max is 0 [ 277.205894][ T5665] usb 2-1: config 242 has no interface number 0 [ 277.235855][ T5665] usb 2-1: config 242 interface 195 has no altsetting 0 [ 277.355316][ T7388] XFS (loop3): Ending clean mount [ 277.370839][ T7388] XFS (loop3): Quotacheck needed: Please wait. [ 277.417797][ T5665] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 277.448716][ T5665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.479912][ T5665] usb 2-1: Product: syz [ 277.494173][ T5665] usb 2-1: Manufacturer: syz [ 277.499249][ T5665] usb 2-1: SerialNumber: syz [ 277.516895][ T7412] tipc: Enabled bearer , priority 0 [ 277.525502][ T7388] XFS (loop3): Quotacheck: Done. [ 277.677189][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 277.806098][ T7422] XFS (loop3): User initiated shutdown received. [ 277.813558][ T7422] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 277.827083][ T7422] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 277.975056][ T5665] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 277.993625][ T5665] usb 2-1: selecting invalid altsetting 0 [ 278.015014][ T2424] pvrusb2: Invalid write control endpoint [ 278.049109][ T5665] usb 2-1: USB disconnect, device number 8 [ 278.253395][ T2424] pvrusb2: Invalid write control endpoint [ 278.261941][ T2424] pvrusb2: Invalid write control endpoint [ 278.267737][ T2424] pvrusb2: Invalid write control endpoint [ 278.280828][ T2424] pvrusb2: Invalid write control endpoint [ 278.288056][ T2424] pvrusb2: Invalid write control endpoint [ 278.300151][ T2424] pvrusb2: Invalid write control endpoint [ 278.306869][ T2424] pvrusb2: Invalid write control endpoint [ 278.312804][ T2424] pvrusb2: Invalid write control endpoint [ 278.332907][ T2424] pvrusb2: Invalid write control endpoint [ 278.333545][ T4198] XFS (loop3): Unmounting Filesystem [ 278.340241][ T2424] pvrusb2: Invalid write control endpoint [ 278.350090][ T2424] pvrusb2: Invalid write control endpoint [ 278.356853][ T2424] pvrusb2: Invalid write control endpoint [ 278.363187][ T2424] pvrusb2: Invalid write control endpoint [ 278.368990][ T2424] pvrusb2: Invalid write control endpoint [ 278.377988][ T2424] pvrusb2: Invalid write control endpoint [ 278.384008][ T2424] pvrusb2: Invalid write control endpoint [ 278.389790][ T2424] pvrusb2: Invalid write control endpoint [ 278.395580][ T2424] pvrusb2: Invalid write control endpoint [ 278.401408][ T2424] pvrusb2: Invalid write control endpoint [ 278.411350][ T2424] pvrusb2: Invalid write control endpoint [ 278.417113][ T2424] pvrusb2: Invalid write control endpoint [ 278.461088][ T2424] pvrusb2: Invalid write control endpoint [ 278.462391][ T7432] hub 8-0:1.0: USB hub found [ 278.477360][ T2424] pvrusb2: Invalid write control endpoint [ 278.487118][ T2424] pvrusb2: Invalid write control endpoint [ 278.496467][ T2424] pvrusb2: Invalid write control endpoint [ 278.511940][ T2424] pvrusb2: Invalid write control endpoint [ 278.521227][ T2424] pvrusb2: Invalid write control endpoint [ 278.527219][ T2424] pvrusb2: Invalid write control endpoint [ 278.536853][ T2424] pvrusb2: Invalid write control endpoint [ 278.542962][ T2424] pvrusb2: Invalid write control endpoint [ 278.549102][ T2424] pvrusb2: Invalid write control endpoint [ 278.564520][ T2424] pvrusb2: Invalid write control endpoint [ 278.572824][ T2424] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 278.596308][ T7432] hub 8-0:1.0: 1 port detected [ 278.674619][ T2424] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 278.925265][ T2424] pvrusb2: Invalid write control endpoint [ 278.963775][ T2424] pvrusb2: Invalid write control endpoint [ 279.389981][ T2424] pvrusb2: Invalid write control endpoint [ 279.405710][ T2424] pvrusb2: Invalid write control endpoint [ 279.411638][ T2424] pvrusb2: Invalid write control endpoint [ 279.429001][ T2424] pvrusb2: Invalid write control endpoint [ 279.469323][ T2424] pvrusb2: Invalid write control endpoint [ 279.475632][ T2424] pvrusb2: Invalid write control endpoint [ 279.481611][ T2424] pvrusb2: Invalid write control endpoint [ 279.522673][ T2424] pvrusb2: Invalid write control endpoint [ 279.528454][ T2424] pvrusb2: Invalid write control endpoint [ 279.540461][ T2424] pvrusb2: Invalid write control endpoint [ 279.554726][ T2424] pvrusb2: Invalid write control endpoint [ 279.575760][ T2424] pvrusb2: Invalid write control endpoint [ 279.587487][ T2424] pvrusb2: Invalid write control endpoint [ 279.606167][ T2424] pvrusb2: Invalid write control endpoint [ 279.612274][ T2424] pvrusb2: Invalid write control endpoint [ 279.618019][ T2424] pvrusb2: Invalid write control endpoint [ 279.624694][ T7446] loop3: detected capacity change from 0 to 256 [ 279.642259][ T2424] pvrusb2: Invalid write control endpoint [ 279.658832][ T2424] pvrusb2: Invalid write control endpoint [ 279.664672][ T2424] pvrusb2: Invalid write control endpoint [ 279.709593][ T2424] pvrusb2: Attached sub-driver cs53l32a [ 279.760757][ T7446] FAT-fs (loop3): Directory bread(block 64) failed [ 279.767329][ T7446] FAT-fs (loop3): Directory bread(block 65) failed [ 279.799288][ T7446] FAT-fs (loop3): Directory bread(block 66) failed [ 279.819626][ T7446] FAT-fs (loop3): Directory bread(block 67) failed [ 279.827896][ T7446] FAT-fs (loop3): Directory bread(block 68) failed [ 279.856301][ T7446] FAT-fs (loop3): Directory bread(block 69) failed [ 279.862954][ T7446] FAT-fs (loop3): Directory bread(block 70) failed [ 279.869845][ T2424] pvrusb2: Invalid write control endpoint [ 279.886111][ T2424] pvrusb2: Invalid write control endpoint [ 279.892386][ T2424] pvrusb2: Invalid write control endpoint [ 279.899623][ T7446] FAT-fs (loop3): Directory bread(block 71) failed [ 279.906220][ T7446] FAT-fs (loop3): Directory bread(block 72) failed [ 279.923627][ T2424] pvrusb2: Invalid write control endpoint [ 279.939433][ T2424] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 279.956466][ T7446] FAT-fs (loop3): Directory bread(block 73) failed [ 279.979082][ T2424] pvrusb2: Device being rendered inoperable [ 280.027876][ T2424] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 280.050953][ T5238] wlan1: Trigger new scan to find an IBSS to join [ 280.078330][ T2424] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 280.555075][ T7455] loop6: detected capacity change from 0 to 2048 [ 280.674109][ T7460] device syzkaller0 entered promiscuous mode [ 280.681040][ T7455] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 282.821609][ T7490] loop6: detected capacity change from 0 to 1024 [ 282.883662][ T7490] EXT4-fs (loop6): Ignoring removed bh option [ 282.947863][ T7490] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noblock_validity,nolazytime,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 282.966027][ T7490] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.133378][ T7499] loop3: detected capacity change from 0 to 256 [ 283.831178][ T7499] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 285.407718][ T4240] wlan1: Trigger new scan to find an IBSS to join [ 286.090366][ T7527] loop6: detected capacity change from 0 to 512 [ 286.139775][ T7527] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 286.170676][ T7527] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 286.273300][ T7527] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 286.298057][ T7527] EXT4-fs (loop6): 1 truncate cleaned up [ 286.303736][ T7527] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 286.777589][ T4281] wlan1: Creating new IBSS network, BSSID d6:4f:93:8b:75:66 [ 287.307520][ T7538] loop3: detected capacity change from 0 to 512 [ 287.308747][ T7540] loop6: detected capacity change from 0 to 512 [ 287.401669][ T7540] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.462894][ T7538] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.757395][ T7540] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.772: corrupted xattr entries [ 287.817821][ T7540] EXT4-fs (loop6): Remounting filesystem read-only [ 287.825960][ T7540] EXT4-fs (loop6): 1 truncate cleaned up [ 287.834817][ T7540] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 289.832110][ T4240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.877748][ T4229] Bluetooth: hci5: command 0x0409 tx timeout [ 289.948314][ T4240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.007184][ T4240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.082561][ T7547] chnl_net:caif_netlink_parms(): no params data found [ 290.164576][ T4240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.312555][ T7617] tipc: Cannot configure node identity twice [ 290.491523][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.499007][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.507620][ T7547] device bridge_slave_0 entered promiscuous mode [ 290.536818][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.984954][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.232440][ T7547] device bridge_slave_1 entered promiscuous mode [ 291.314915][ T4240] tipc: Disabling bearer [ 291.335998][ T4240] tipc: Left network mode [ 291.350170][ T7547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.438317][ T7547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.534712][ T7625] loop1: detected capacity change from 0 to 32768 [ 291.643660][ T7547] team0: Port device team_slave_0 added [ 291.718817][ T7547] team0: Port device team_slave_1 added [ 291.877510][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.884496][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.939635][ T7547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.979165][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.047417][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.110866][ T6671] Bluetooth: hci5: command 0x041b tx timeout [ 292.138880][ T7547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.340369][ T7547] device hsr_slave_0 entered promiscuous mode [ 292.397448][ T7547] device hsr_slave_1 entered promiscuous mode [ 292.425966][ T7547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.492746][ T7547] Cannot create hsr debugfs directory [ 293.192783][ T7667] 9pnet_virtio: no channels available for device 127.0.0.1 [ 294.001241][ T4240] device gretap1 left promiscuous mode [ 294.021021][ T4240] bridge0: port 3(gretap1) entered disabled state [ 295.276684][ T6671] Bluetooth: hci5: command 0x040f tx timeout [ 296.593799][ T7547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 296.605962][ T7547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 296.722023][ T7547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 297.608252][ T6670] Bluetooth: hci5: command 0x0419 tx timeout [ 297.624263][ T7547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 299.462185][ T4240] device hsr_slave_0 left promiscuous mode [ 299.486599][ T4240] device hsr_slave_1 left promiscuous mode [ 300.381950][ T7743] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 300.745938][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.753397][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.807854][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.842313][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.875696][ T4240] device bridge_slave_1 left promiscuous mode [ 300.912023][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.931866][ T4240] device bridge_slave_0 left promiscuous mode [ 300.989776][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.029897][ T4240] device veth1_macvtap left promiscuous mode [ 301.037005][ T7763] netlink: 104 bytes leftover after parsing attributes in process `syz.1.813'. [ 301.049633][ T4240] device veth0_macvtap left promiscuous mode [ 301.055845][ T4240] device veth1_vlan left promiscuous mode [ 301.061759][ T4240] device veth0_vlan left promiscuous mode [ 301.321521][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 301.346334][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 301.360910][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.378038][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.492106][ T4240] bond0 (unregistering): Released all slaves [ 301.603307][ T7547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.668247][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.682887][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.780994][ T7547] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.829435][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.271731][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.727944][ T688] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.735103][ T688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.824343][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.041885][ T7776] device syzkaller0 entered promiscuous mode [ 303.630944][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.675559][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.733541][ T688] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.740765][ T688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.769613][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.789377][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.127107][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.163502][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.200900][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.215547][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.224901][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.243538][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.261604][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.679865][ T7813] loop3: detected capacity change from 0 to 256 [ 304.776619][ T7547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.816882][ T7547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.922687][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.266142][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.577268][ T7842] device syzkaller0 entered promiscuous mode [ 306.782295][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.808898][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.856992][ T7547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.818267][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.841346][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.894758][ T7547] device veth0_vlan entered promiscuous mode [ 314.325110][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.796235][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.852221][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.868076][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.908381][ T7547] device veth1_vlan entered promiscuous mode [ 315.231395][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.256223][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.336318][ T7547] device veth0_macvtap entered promiscuous mode [ 315.350026][ T7547] device veth1_macvtap entered promiscuous mode [ 316.614876][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.688726][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.716741][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.763805][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.820630][ T7547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.862109][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.877815][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.906655][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.931576][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.012547][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.097165][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.259366][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.270193][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.341895][ T7547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.361489][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.302781][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.356671][ T7954] device syzkaller0 entered promiscuous mode [ 318.501417][ T7547] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.532204][ T7547] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.541241][ T7547] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.591087][ T7547] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.290782][ T4494] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.183151][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.664528][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.685643][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.863728][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.126880][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.283552][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.674557][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 322.407856][ T8003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.806448][ T8008] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 322.983460][ T8008] team0: Port device macvlan2 added [ 326.299477][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.305841][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.030056][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.872'. [ 329.107952][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.7.872'. [ 329.925676][ T8113] device syzkaller0 entered promiscuous mode [ 330.092504][ T8113] tipc: Started in network mode [ 330.097422][ T8113] tipc: Node identity 62583a90fc4c, cluster identity 4711 [ 330.153938][ T8113] tipc: Enabled bearer , priority 0 [ 330.262563][ T25] audit: type=1326 audit(1781155278.267:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.0.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd145d0ee59 code=0x0 [ 330.325528][ T8112] tipc: Resetting bearer [ 330.368617][ T8112] tipc: Disabling bearer [ 332.953931][ T8149] loop7: detected capacity change from 0 to 256 [ 333.012253][ T8147] tipc: Enabled bearer , priority 0 [ 333.040916][ T8142] autofs4:pid:8142:autofs_fill_super: called with bogus options [ 333.074544][ T8141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 333.126774][ T8149] FAT-fs (loop7): Directory bread(block 64) failed [ 333.168693][ T8149] FAT-fs (loop7): Directory bread(block 65) failed [ 333.190080][ T8149] FAT-fs (loop7): Directory bread(block 66) failed [ 333.196688][ T8149] FAT-fs (loop7): Directory bread(block 67) failed [ 333.259136][ T8149] FAT-fs (loop7): Directory bread(block 68) failed [ 333.268731][ T8147] tipc: Resetting bearer [ 333.340334][ T8149] FAT-fs (loop7): Directory bread(block 69) failed [ 333.347048][ T8149] FAT-fs (loop7): Directory bread(block 70) failed [ 333.369405][ T8149] FAT-fs (loop7): Directory bread(block 71) failed [ 333.384923][ T8149] FAT-fs (loop7): Directory bread(block 72) failed [ 333.401029][ T8149] FAT-fs (loop7): Directory bread(block 73) failed [ 335.505453][ T4234] tipc: Node number set to 3862684300 [ 335.912020][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 335.942530][ T8177] tmpfs: Unknown parameter 'usrquota' [ 335.954952][ T8175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.108690][ T8179] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 336.748919][ T8179] team0: Port device macvlan2 added [ 336.770437][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 336.842469][ T8175] device bridge1 entered promiscuous mode [ 336.880711][ T8175] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 338.176714][ T8148] tipc: Disabling bearer [ 339.840714][ T8208] loop6: detected capacity change from 0 to 8 [ 340.697965][ T8184] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 340.745018][ T8184] team0: Port device macvlan3 added [ 340.805393][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 340.830110][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 341.817783][ T8208] attempt to access beyond end of device [ 341.817783][ T8208] loop6: rw=2048, want=36028797018963976, limit=8 [ 341.830409][ T8208] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 341.838166][ T8208] unable to read xattr id index table [ 342.179729][ T8226] loop6: detected capacity change from 0 to 256 [ 342.205977][ T8226] FAT-fs (loop6): Directory bread(block 64) failed [ 342.212595][ T8226] FAT-fs (loop6): Directory bread(block 65) failed [ 342.219254][ T8226] FAT-fs (loop6): Directory bread(block 66) failed [ 342.225816][ T8226] FAT-fs (loop6): Directory bread(block 67) failed [ 342.233024][ T8226] FAT-fs (loop6): Directory bread(block 68) failed [ 342.239642][ T8226] FAT-fs (loop6): Directory bread(block 69) failed [ 342.246255][ T8226] FAT-fs (loop6): Directory bread(block 70) failed [ 342.253044][ T8226] FAT-fs (loop6): Directory bread(block 71) failed [ 342.259997][ T8226] FAT-fs (loop6): Directory bread(block 72) failed [ 342.266599][ T8226] FAT-fs (loop6): Directory bread(block 73) failed [ 346.520378][ T8246] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 346.681657][ T8243] tipc: Enabled bearer , priority 0 [ 346.763394][ T8251] device syzkaller0 entered promiscuous mode [ 346.976807][ T8264] ipt_REJECT: TCP_RESET invalid for non-tcp [ 348.446001][ T8262] autofs4:pid:8262:autofs_fill_super: called with bogus options [ 349.957528][ T8241] tipc: Resetting bearer [ 351.626734][ T8241] tipc: Disabling bearer [ 351.670602][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 351.776296][ T8272] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 351.784684][ T8272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.907'. [ 351.786319][ T8279] loop7: detected capacity change from 0 to 2048 [ 351.797115][ T8272] device batadv0 entered promiscuous mode [ 351.806193][ T8272] bridge0: port 3(batadv0) entered blocking state [ 351.812655][ T8272] bridge0: port 3(batadv0) entered disabled state [ 351.898365][ T8279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.910240][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 351.920181][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 355.619463][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.880565][ T8324] loop7: detected capacity change from 0 to 2048 [ 356.999096][ T8324] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 357.023197][ T8324] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 357.797092][ T8324] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 357.897840][ T8324] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 357.923828][ T8338] tipc: Enabled bearer , priority 0 [ 357.952372][ T8324] UDF-fs: Scanning with blocksize 512 failed [ 357.981075][ T8343] device syzkaller0 entered promiscuous mode [ 358.010326][ T8324] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 358.087858][ T8338] tipc: Resetting bearer [ 358.126862][ T8324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.209453][ T8337] tipc: Resetting bearer [ 358.456248][ T8337] tipc: Disabling bearer [ 364.190505][ T8417] loop6: detected capacity change from 0 to 16 [ 364.820182][ T8417] erofs: Unknown parameter 'ãé' [ 365.490755][ T8423] tipc: Started in network mode [ 365.554004][ T8423] tipc: Node identity b20bc1cac708, cluster identity 4711 [ 365.652430][ T8423] tipc: Enabled bearer , priority 0 [ 366.391422][ T8432] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 366.664415][ T8423] tipc: Resetting bearer [ 366.738938][ T8422] tipc: Disabling bearer [ 369.259882][ T8468] loop1: detected capacity change from 0 to 32768 [ 369.493172][ T8468] XFS (loop1): Mounting V5 Filesystem [ 369.644914][ T8468] XFS (loop1): Ending clean mount [ 369.685524][ T8468] XFS (loop1): Quotacheck needed: Please wait. [ 370.821300][ T8468] XFS (loop1): Quotacheck: Done. [ 372.288348][ T4229] Bluetooth: hci3: command 0x0406 tx timeout [ 372.741192][ T4187] XFS (loop1): Unmounting Filesystem [ 373.687591][ T8535] loop7: detected capacity change from 0 to 8 [ 374.157580][ T8535] squashfs image failed sanity check [ 374.224524][ T8535] loop8: detected capacity change from 0 to 4 [ 374.353279][ T7906] Dev loop8: unable to read RDB block 4 [ 374.421041][ T7906] loop8: unable to read partition table [ 374.550112][ T7906] loop8: partition table beyond EOD, truncated [ 374.585654][ T8535] Dev loop8: unable to read RDB block 4 [ 374.596247][ T8535] loop8: unable to read partition table [ 374.643045][ T8535] loop8: partition table beyond EOD, truncated [ 374.716495][ T8535] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 374.985157][ T8562] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 377.616720][ T8586] loop3: detected capacity change from 0 to 8 [ 379.731801][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 380.670945][ T8594] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 380.968004][ T8594] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 383.201647][ T8649] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 390.482196][ T4330] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.965638][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.972007][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 407.834513][ T8904] ipt_REJECT: TCP_RESET invalid for non-tcp [ 408.222273][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1029'. [ 413.186299][ T8980] ipt_REJECT: TCP_RESET invalid for non-tcp [ 413.262619][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1045'. [ 420.860643][ T9073] loop1: detected capacity change from 0 to 8 [ 421.057735][ T9073] squashfs image failed sanity check [ 421.386679][ T9084] loop6: detected capacity change from 0 to 8 [ 421.842744][ T9084] squashfs image failed sanity check [ 422.773784][ T5676] Bluetooth: hci5: command 0x0406 tx timeout [ 422.832265][ T9109] loop3: detected capacity change from 0 to 8 [ 423.576176][ T9115] loop6: detected capacity change from 0 to 8 [ 423.702093][ T9109] squashfs image failed sanity check [ 423.873414][ T9115] squashfs image failed sanity check [ 425.075755][ T4237] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 427.544963][ T9187] loop3: detected capacity change from 0 to 8 [ 427.700336][ T9187] squashfs image failed sanity check [ 428.056753][ T688] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 430.251327][ T9237] loop7: detected capacity change from 0 to 8 [ 430.301049][ T9237] squashfs image failed sanity check [ 440.746459][ T9405] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 444.558400][ T9479] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 447.375452][ T9509] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 449.071976][ T9530] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 452.501836][ T9561] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 453.006000][ T9580] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 457.774451][ T9605] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 457.801555][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.808396][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.271564][ T9624] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 462.476357][ T9635] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 464.248652][ T9644] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 464.277691][ T9646] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 464.774511][ T8273] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.127006][ T9674] netlink: 'syz.3.1191': attribute type 3 has an invalid length. [ 469.677172][ T9691] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 474.037162][ T9747] hub 8-0:1.0: USB hub found [ 474.042436][ T9747] hub 8-0:1.0: 1 port detected [ 475.767829][ T9763] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 483.813055][ T9799] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 484.140460][ T9814] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 487.938577][ T9846] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 492.145890][ T9875] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 493.025643][ T9876] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 495.584604][ T9895] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 496.697845][ T9911] netlink: 'syz.7.1250': attribute type 3 has an invalid length. [ 500.405511][ T9951] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 500.432824][ T9950] netlink: 'syz.0.1258': attribute type 3 has an invalid length. [ 503.552049][ T4237] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 506.162890][ T9986] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 508.531272][T10009] netlink: 'syz.1.1275': attribute type 3 has an invalid length. [ 509.430378][T10025] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 515.170743][T10062] netlink: 'syz.3.1285': attribute type 3 has an invalid length. [ 517.481573][T10083] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 519.169336][T10091] netlink: 'syz.3.1295': attribute type 3 has an invalid length. [ 520.720763][T10105] netlink: 'syz.7.1297': attribute type 3 has an invalid length. [ 522.013621][T10113] netlink: 'syz.7.1300': attribute type 3 has an invalid length. [ 523.351682][T10121] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 523.424448][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.430765][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.834748][T10129] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 526.864912][T10135] netlink: 'syz.3.1306': attribute type 3 has an invalid length. [ 527.990857][T10152] netlink: 'syz.6.1310': attribute type 3 has an invalid length. [ 528.549688][T10156] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 529.018245][T10169] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 529.474028][T10175] netlink: 'syz.7.1316': attribute type 3 has an invalid length. [ 530.487478][T10189] netlink: 'syz.6.1319': attribute type 3 has an invalid length. [ 532.559485][T10190] netlink: 'syz.1.1320': attribute type 3 has an invalid length. [ 533.122182][T10194] loop7: detected capacity change from 0 to 32768 [ 539.288975][T10208] netlink: 'syz.1.1326': attribute type 3 has an invalid length. [ 539.311926][T10209] netlink: 'syz.0.1325': attribute type 3 has an invalid length. [ 539.744006][T10229] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 539.789904][T10230] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 540.251199][T10233] netlink: 'syz.6.1329': attribute type 3 has an invalid length. [ 544.604066][T10239] netlink: 'syz.3.1333': attribute type 3 has an invalid length. [ 544.605388][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 545.737865][T10258] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 546.572363][T10275] netlink: 'syz.7.1330': attribute type 3 has an invalid length. [ 547.258127][ T4237] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.965216][T10341] netlink: 'syz.0.1357': attribute type 3 has an invalid length. [ 554.670854][T10349] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 559.302564][ C1] hrtimer: interrupt took 38035 ns [ 567.130392][T10477] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 569.006551][T10493] block device autoloading is deprecated and will be removed. [ 571.796406][T10507] netlink: 'syz.7.1406': attribute type 3 has an invalid length. [ 572.350885][T10522] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 575.047632][T10547] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 576.248035][T10560] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 583.240433][ T4277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.728872][T10657] netlink: 'syz.6.1442': attribute type 3 has an invalid length. [ 588.923754][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.946575][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 591.896033][T10678] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 593.460024][T10695] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 595.634669][T10722] netlink: 'syz.0.1459': attribute type 3 has an invalid length. [ 599.955986][T10742] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 604.247095][T10773] netlink: 'syz.1.1468': attribute type 3 has an invalid length. [ 608.863959][T10821] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 616.563841][T10886] netlink: 'syz.1.1500': attribute type 3 has an invalid length. [ 616.964936][T10895] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 617.966456][T10905] netlink: 'syz.0.1503': attribute type 3 has an invalid length. [ 619.575786][ T5307] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 620.773772][T10937] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 623.155832][ T4277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.791951][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.798322][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.320121][ T4277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 663.305828][T11251] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 665.876612][T11290] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 671.751216][T11321] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 692.689799][ T4367] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 697.359187][ T4367] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 713.621322][T11630] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 715.296696][T11659] netlink: 'syz.7.1681': attribute type 3 has an invalid length. [ 720.716510][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.728831][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.802074][T11691] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 727.205128][T11725] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 733.622561][T11788] netlink: 'syz.1.1713': attribute type 3 has an invalid length. [ 738.640342][T11824] netlink: 'syz.7.1720': attribute type 3 has an invalid length. [ 740.596597][ T4277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 742.991810][ T4277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 743.195358][T11868] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 757.328918][T11981] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 763.383050][T12023] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 768.757392][T12068] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 774.866985][T12099] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 776.507006][T12110] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 779.273078][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 780.905986][T12142] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 785.523543][T12177] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 785.741255][T12182] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 786.128301][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.139875][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 789.701437][T12221] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 792.470640][T12237] netlink: 'syz.7.1815': attribute type 3 has an invalid length. [ 800.241601][T12277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 815.563440][T12345] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 818.999208][T11394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 829.100226][T12413] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 829.971347][T11394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 830.041397][T12419] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 836.431801][T12446] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 838.844890][ T5307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.074260][ T5665] Bluetooth: hci0: command 0x0409 tx timeout [ 841.489562][ T5307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.901740][ T5307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.030739][ T6342] Bluetooth: hci0: command 0x041b tx timeout [ 844.128335][ T5307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.423851][T12495] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 847.727844][ T6341] Bluetooth: hci0: command 0x040f tx timeout [ 847.759108][T12460] chnl_net:caif_netlink_parms(): no params data found [ 849.529447][T12460] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.396447][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 853.402822][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 853.462762][T12460] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.479897][ T6344] Bluetooth: hci0: command 0x0419 tx timeout [ 853.559767][T12460] device bridge_slave_0 entered promiscuous mode [ 853.605977][T12460] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.615977][T12460] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.525177][T12544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 855.437101][T12460] device bridge_slave_1 entered promiscuous mode [ 855.466511][ T5307] tipc: Left network mode [ 856.026299][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.269924][T12553] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 856.451213][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.003577][T12460] team0: Port device team_slave_0 added [ 858.090226][T12460] team0: Port device team_slave_1 added [ 858.190011][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.482160][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.536338][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.632678][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.306823][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.543063][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.125955][T12460] device hsr_slave_0 entered promiscuous mode [ 862.165780][T12460] device hsr_slave_1 entered promiscuous mode [ 862.195855][T12460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.253798][T12460] Cannot create hsr debugfs directory [ 863.854371][T12627] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 866.574169][ T688] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 869.052023][T12671] netlink: 'syz.3.1909': attribute type 3 has an invalid length. [ 871.825235][T12682] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 872.388422][T12460] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 872.717165][T12460] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 872.841858][ T5307] IPVS: stopping master sync thread 5462 ... [ 873.622144][T12460] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 873.711671][T12460] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 879.824351][ T5307] device hsr_slave_0 left promiscuous mode [ 879.839216][ T5307] device hsr_slave_1 left promiscuous mode [ 879.864690][ T5307] device veth1_macvtap left promiscuous mode [ 879.872816][ T5307] device veth0_macvtap left promiscuous mode [ 879.880004][ T5307] device veth1_vlan left promiscuous mode [ 879.898143][ T5307] device veth0_vlan left promiscuous mode [ 881.298800][ T5307] team0 (unregistering): Port device macvlan2 removed [ 881.345409][ T5307] bond1 (unregistering): Released all slaves [ 883.439029][T12762] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 885.159650][T12769] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 885.660721][ T5307] bond0 (unregistering): Released all slaves [ 886.079431][T12460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.100674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 888.108713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 888.127270][T12460] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.422179][T12803] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 890.487884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 890.518320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 890.573537][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.580646][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.697581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 890.813820][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 890.860803][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 890.925630][ T688] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.932783][ T688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.589061][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 891.605160][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 891.635792][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 891.716393][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 891.746602][T12460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 891.787706][T12460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 891.832522][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 891.853956][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 893.090507][T12830] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 893.180627][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 893.220587][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 893.232683][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 893.249006][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 893.364497][T12837] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 893.419921][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 893.477922][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 894.479394][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 894.489605][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 894.678241][T12460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.403825][T12882] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 905.311792][ T6341] Bluetooth: hci0: command 0x0409 tx timeout [ 906.302338][T12935] chnl_net:caif_netlink_parms(): no params data found [ 907.273808][T12983] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 907.555614][ T6341] Bluetooth: hci0: command 0x041b tx timeout [ 909.938911][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.946025][T12935] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.980138][ T5667] Bluetooth: hci0: command 0x040f tx timeout [ 910.306340][T12935] device bridge_slave_0 entered promiscuous mode [ 910.347677][T12935] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.116444][T12935] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.162261][T12935] device bridge_slave_1 entered promiscuous mode [ 911.503023][T12935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.603597][T12935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.837537][T12935] team0: Port device team_slave_0 added [ 911.848978][T12935] team0: Port device team_slave_1 added [ 911.871487][T12935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.878460][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.013414][T12935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.228857][T12935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.235827][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.237808][ T6341] Bluetooth: hci0: command 0x0419 tx timeout [ 913.291333][T12935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.526443][T12935] device hsr_slave_0 entered promiscuous mode [ 914.613394][T12935] device hsr_slave_1 entered promiscuous mode [ 914.637464][T12935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.765401][T12935] Cannot create hsr debugfs directory [ 915.976328][T13061] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 917.198008][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 917.208793][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 918.921552][T13094] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 920.467032][T12935] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 920.551094][T12935] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 920.694026][T12935] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 920.891811][T12935] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 920.985733][T13134] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 921.716490][T12935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.743936][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 921.752606][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 921.777120][T12935] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.796601][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 921.809471][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 921.864791][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.871911][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.952396][T12935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 921.975792][T12935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 922.131460][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 922.163309][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 922.205748][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 922.227558][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.234670][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.261726][T13154] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 922.265313][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 922.295059][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 922.305764][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 922.316961][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 922.330688][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 923.696166][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 923.728533][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 923.766928][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 923.783714][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 923.819824][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 923.863868][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 923.937054][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 924.687662][T13182] NILFS (nullb0): couldn't find nilfs on the device [ 924.846761][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 924.873445][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 925.102825][T12935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.103839][T13197] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 926.246805][ T5307] device hsr_slave_0 left promiscuous mode [ 926.253242][ T5307] device hsr_slave_1 left promiscuous mode [ 926.326035][ T5307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.346710][ T5307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.382260][ T5307] device bridge_slave_1 left promiscuous mode [ 926.388535][ T5307] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.537276][ T5307] device bridge_slave_0 left promiscuous mode [ 926.558281][T13229] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 926.649310][T13230] NILFS (nullb0): couldn't find nilfs on the device [ 926.978670][ T5307] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.287927][ T5307] team0 (unregistering): Port device team_slave_1 removed [ 927.344752][ T5307] team0 (unregistering): Port device team_slave_0 removed [ 927.395866][ T5307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.451139][ T5307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.639599][ T5307] bond0 (unregistering): Released all slaves [ 927.857488][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 927.879335][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 927.919486][T12935] device veth0_vlan entered promiscuous mode [ 927.955762][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 927.974871][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 928.214864][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 928.712049][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 928.729348][T12935] device veth1_vlan entered promiscuous mode [ 928.902976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 928.976144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 929.253250][T13256] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 929.288477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 929.387560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 929.620715][T12935] device veth0_macvtap entered promiscuous mode [ 929.844687][T12935] device veth1_macvtap entered promiscuous mode [ 929.985510][T11622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 930.000728][T11622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 930.940419][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.953221][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.968222][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.979089][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.989023][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.000947][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.200485][T12935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.318665][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 931.509702][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 932.283938][T13296] NILFS (nullb0): couldn't find nilfs on the device [ 932.431198][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.507731][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.577351][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.608087][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.104542][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.115310][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.127190][T12935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.136223][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 933.159570][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 933.204044][T12935] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.236841][T13321] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 933.295909][T12935] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.351613][T12935] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.367053][T12935] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.663733][T13341] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 933.679390][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.725537][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.800085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 933.841391][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.875852][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.923514][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 935.330564][T13364] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 936.191994][T13365] NILFS (nullb0): couldn't find nilfs on the device [ 936.750629][T13376] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 938.886699][T13402] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 938.902398][T13399] NILFS (nullb0): couldn't find nilfs on the device [ 940.359812][T13419] NILFS (nullb0): couldn't find nilfs on the device [ 940.370095][T13422] NILFS (nullb0): couldn't find nilfs on the device [ 944.116948][T13467] NILFS (nullb0): couldn't find nilfs on the device [ 946.246305][T13496] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 948.433827][T13527] NILFS (nullb0): couldn't find nilfs on the device [ 949.269600][T13537] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 959.320445][T13625] NILFS (nullb0): couldn't find nilfs on the device [ 962.243893][T13647] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 963.445252][T13657] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 965.844424][T13690] NILFS (nullb0): couldn't find nilfs on the device [ 966.342687][T13699] NILFS (nullb0): couldn't find nilfs on the device [ 966.684223][T13702] NILFS (nullb0): couldn't find nilfs on the device [ 967.084584][T13711] NILFS (nullb0): couldn't find nilfs on the device [ 972.657399][T13763] ================================================================== [ 972.666069][T13763] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 972.673383][T13763] Read of size 8 at addr ffff88814bef8618 by task syz.7.2121/13763 [ 972.681293][T13763] [ 972.683658][T13763] CPU: 0 PID: 13763 Comm: syz.7.2121 Not tainted syzkaller #0 [ 972.691227][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 972.701293][T13763] Call Trace: [ 972.704626][T13763] [ 972.707584][T13763] dump_stack_lvl+0x188/0x250 [ 972.712458][T13763] ? show_regs_print_info+0x20/0x20 [ 972.717698][T13763] ? _printk+0xda/0x130 [ 972.721872][T13763] ? dvb_device_open+0xc6/0x370 [ 972.726719][T13763] ? load_image+0x400/0x400 [ 972.731205][T13763] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 972.736760][T13763] print_address_description+0x60/0x2d0 [ 972.742308][T13763] ? dvb_device_open+0xc6/0x370 [ 972.747163][T13763] kasan_report+0xdf/0x130 [ 972.751634][T13763] ? dvb_device_open+0xc6/0x370 [ 972.756576][T13763] dvb_device_open+0xc6/0x370 [ 972.761266][T13763] ? do_raw_spin_unlock+0x11d/0x230 [ 972.766514][T13763] chrdev_open+0x5c5/0x6a0 [ 972.770922][T13763] ? cd_forget+0x160/0x160 [ 972.775343][T13763] ? fsnotify_perm+0x3a7/0x560 [ 972.780170][T13763] ? cd_forget+0x160/0x160 [ 972.784577][T13763] do_dentry_open+0x7ff/0xf80 [ 972.789246][T13763] path_openat+0x26f5/0x2fa0 [ 972.793833][T13763] ? verify_lock_unused+0x140/0x140 [ 972.799018][T13763] ? slab_post_alloc_hook+0x4c/0x380 [ 972.804319][T13763] ? do_filp_open+0x410/0x410 [ 972.808987][T13763] do_filp_open+0x1e2/0x410 [ 972.813490][T13763] ? vfs_tmpfile+0x300/0x300 [ 972.818092][T13763] ? _raw_spin_unlock+0x24/0x40 [ 972.822939][T13763] ? alloc_fd+0x598/0x630 [ 972.827260][T13763] do_sys_openat2+0x150/0x4b0 [ 972.831936][T13763] ? __lock_acquire+0x7d10/0x7d10 [ 972.836957][T13763] ? do_sys_open+0xe0/0xe0 [ 972.841362][T13763] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 972.847359][T13763] ? lock_chain_count+0x20/0x20 [ 972.852226][T13763] ? vtime_user_exit+0x2c8/0x3e0 [ 972.857151][T13763] __x64_sys_openat+0x135/0x160 [ 972.861992][T13763] do_syscall_64+0x4c/0xa0 [ 972.866502][T13763] ? clear_bhb_loop+0x30/0x80 [ 972.871170][T13763] ? clear_bhb_loop+0x30/0x80 [ 972.875838][T13763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 972.881728][T13763] RIP: 0033:0x7fe681ee668e [ 972.886189][T13763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 972.905837][T13763] RSP: 002b:00007fe68017eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 972.914252][T13763] RAX: ffffffffffffffda RBX: 00007fe68017f6c0 RCX: 00007fe681ee668e [ 972.922232][T13763] RDX: 0000000000000002 RSI: 00007fe68017ec00 RDI: ffffffffffffff9c [ 972.930191][T13763] RBP: 00007fe68017ec00 R08: 0000000000000000 R09: 0000000000000000 [ 972.938159][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 972.946145][T13763] R13: 00007fe68219f038 R14: 00007fe68219efa0 R15: 00007ffea3d88e28 [ 972.954152][T13763] [ 972.957194][T13763] [ 972.959525][T13763] Allocated by task 1: [ 972.963691][T13763] __kasan_kmalloc+0xb5/0xf0 [ 972.968301][T13763] dvb_register_device+0x311/0x2170 [ 972.973493][T13763] dvb_register_frontend+0x645/0x920 [ 972.978760][T13763] vidtv_bridge_probe+0x9a1/0xf70 [ 972.983793][T13763] platform_probe+0x137/0x1c0 [ 972.988479][T13763] really_probe+0x284/0xc80 [ 972.992972][T13763] __driver_probe_device+0x1ef/0x390 [ 972.998242][T13763] driver_probe_device+0x4f/0x420 [ 973.003251][T13763] __driver_attach+0x46b/0x670 [ 973.007992][T13763] bus_for_each_dev+0x182/0x1f0 [ 973.012823][T13763] bus_add_driver+0x30a/0x5a0 [ 973.017474][T13763] driver_register+0x32d/0x430 [ 973.022243][T13763] vidtv_bridge_init+0x39/0x70 [ 973.027086][T13763] do_one_initcall+0x272/0x730 [ 973.031853][T13763] do_initcall_level+0x137/0x1f0 [ 973.036814][T13763] do_initcalls+0x4b/0x90 [ 973.041122][T13763] kernel_init_freeable+0x3e9/0x570 [ 973.046297][T13763] kernel_init+0x19/0x1b0 [ 973.050607][T13763] ret_from_fork+0x1f/0x30 [ 973.055002][T13763] [ 973.057303][T13763] Freed by task 13657: [ 973.061343][T13763] kasan_set_track+0x4b/0x70 [ 973.065911][T13763] kasan_set_free_info+0x1f/0x40 [ 973.070824][T13763] ____kasan_slab_free+0xd5/0x110 [ 973.075825][T13763] slab_free_freelist_hook+0xea/0x170 [ 973.081172][T13763] kfree+0xef/0x2a0 [ 973.084957][T13763] dvb_device_open+0x2e7/0x370 [ 973.089699][T13763] chrdev_open+0x5c5/0x6a0 [ 973.094103][T13763] do_dentry_open+0x7ff/0xf80 [ 973.098758][T13763] path_openat+0x26f5/0x2fa0 [ 973.103325][T13763] do_filp_open+0x1e2/0x410 [ 973.107893][T13763] do_sys_openat2+0x150/0x4b0 [ 973.112548][T13763] __x64_sys_openat+0x135/0x160 [ 973.117377][T13763] do_syscall_64+0x4c/0xa0 [ 973.121778][T13763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 973.127655][T13763] [ 973.129957][T13763] The buggy address belongs to the object at ffff88814bef8600 [ 973.129957][T13763] which belongs to the cache kmalloc-256 of size 256 [ 973.144074][T13763] The buggy address is located 24 bytes inside of [ 973.144074][T13763] 256-byte region [ffff88814bef8600, ffff88814bef8700) [ 973.157245][T13763] The buggy address belongs to the page: [ 973.162870][T13763] page:ffffea00052fbe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14bef8 [ 973.173082][T13763] head:ffffea00052fbe00 order:1 compound_mapcount:0 [ 973.179730][T13763] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 973.187786][T13763] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888016c41b40 [ 973.196346][T13763] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 973.204901][T13763] page dumped because: kasan: bad access detected [ 973.211298][T13763] page_owner tracks the page as allocated [ 973.216987][T13763] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 18217372938, free_ts 0 [ 973.234932][T13763] get_page_from_freelist+0x1bbd/0x1ca0 [ 973.240483][T13763] __alloc_pages+0x1ee/0x480 [ 973.245054][T13763] alloc_page_interleave+0x24/0x1e0 [ 973.250230][T13763] new_slab+0xc0/0x4b0 [ 973.254276][T13763] ___slab_alloc+0x80a/0xdd0 [ 973.258864][T13763] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 973.264227][T13763] bus_add_driver+0xda/0x5a0 [ 973.268798][T13763] driver_register+0x32d/0x430 [ 973.273536][T13763] i2c_register_driver+0xb6/0x160 [ 973.278556][T13763] do_one_initcall+0x272/0x730 [ 973.283305][T13763] do_initcall_level+0x137/0x1f0 [ 973.288230][T13763] do_initcalls+0x4b/0x90 [ 973.292684][T13763] kernel_init_freeable+0x3e9/0x570 [ 973.297888][T13763] kernel_init+0x19/0x1b0 [ 973.302224][T13763] ret_from_fork+0x1f/0x30 [ 973.306623][T13763] page_owner free stack trace missing [ 973.311965][T13763] [ 973.314266][T13763] Memory state around the buggy address: [ 973.319940][T13763] ffff88814bef8500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 973.327980][T13763] ffff88814bef8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 973.336114][T13763] >ffff88814bef8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 973.344186][T13763] ^ [ 973.349018][T13763] ffff88814bef8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 973.357074][T13763] ffff88814bef8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 973.365112][T13763] ================================================================== [ 973.373155][T13763] Disabling lock debugging due to kernel taint [ 973.380322][T13763] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 973.387619][T13763] CPU: 0 PID: 13763 Comm: syz.7.2121 Tainted: G B syzkaller #0 [ 973.396649][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 973.406687][T13763] Call Trace: [ 973.409964][T13763] [ 973.412875][T13763] dump_stack_lvl+0x188/0x250 [ 973.417534][T13763] ? show_regs_print_info+0x20/0x20 [ 973.422711][T13763] ? load_image+0x400/0x400 [ 973.427196][T13763] panic+0x2e5/0x810 [ 973.431164][T13763] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 973.437330][T13763] ? bpf_jit_dump+0xd0/0xd0 [ 973.441835][T13763] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 973.447717][T13763] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 973.453597][T13763] ? _raw_spin_unlock+0x40/0x40 [ 973.458427][T13763] ? dvb_device_open+0xc6/0x370 [ 973.463262][T13763] check_panic_on_warn+0x80/0xa0 [ 973.468218][T13763] ? dvb_device_open+0xc6/0x370 [ 973.473049][T13763] end_report+0x6d/0xf0 [ 973.477185][T13763] kasan_report+0x102/0x130 [ 973.481672][T13763] ? dvb_device_open+0xc6/0x370 [ 973.486504][T13763] dvb_device_open+0xc6/0x370 [ 973.491161][T13763] ? do_raw_spin_unlock+0x11d/0x230 [ 973.496355][T13763] chrdev_open+0x5c5/0x6a0 [ 973.500756][T13763] ? cd_forget+0x160/0x160 [ 973.505153][T13763] ? fsnotify_perm+0x3a7/0x560 [ 973.509902][T13763] ? cd_forget+0x160/0x160 [ 973.514308][T13763] do_dentry_open+0x7ff/0xf80 [ 973.518976][T13763] path_openat+0x26f5/0x2fa0 [ 973.523563][T13763] ? verify_lock_unused+0x140/0x140 [ 973.528739][T13763] ? slab_post_alloc_hook+0x4c/0x380 [ 973.534007][T13763] ? do_filp_open+0x410/0x410 [ 973.538681][T13763] do_filp_open+0x1e2/0x410 [ 973.543169][T13763] ? vfs_tmpfile+0x300/0x300 [ 973.547743][T13763] ? _raw_spin_unlock+0x24/0x40 [ 973.552576][T13763] ? alloc_fd+0x598/0x630 [ 973.556885][T13763] do_sys_openat2+0x150/0x4b0 [ 973.561558][T13763] ? __lock_acquire+0x7d10/0x7d10 [ 973.566566][T13763] ? do_sys_open+0xe0/0xe0 [ 973.570962][T13763] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 973.576925][T13763] ? lock_chain_count+0x20/0x20 [ 973.581779][T13763] ? vtime_user_exit+0x2c8/0x3e0 [ 973.586697][T13763] __x64_sys_openat+0x135/0x160 [ 973.591529][T13763] do_syscall_64+0x4c/0xa0 [ 973.595939][T13763] ? clear_bhb_loop+0x30/0x80 [ 973.600596][T13763] ? clear_bhb_loop+0x30/0x80 [ 973.605284][T13763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 973.611174][T13763] RIP: 0033:0x7fe681ee668e [ 973.615567][T13763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 973.635152][T13763] RSP: 002b:00007fe68017eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 973.643543][T13763] RAX: ffffffffffffffda RBX: 00007fe68017f6c0 RCX: 00007fe681ee668e [ 973.651494][T13763] RDX: 0000000000000002 RSI: 00007fe68017ec00 RDI: ffffffffffffff9c [ 973.659445][T13763] RBP: 00007fe68017ec00 R08: 0000000000000000 R09: 0000000000000000 [ 973.667402][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 973.675364][T13763] R13: 00007fe68219f038 R14: 00007fe68219efa0 R15: 00007ffea3d88e28 [ 973.683325][T13763] [ 973.686598][T13763] Kernel Offset: disabled [ 973.691070][T13763] Rebooting in 86400 seconds..