last executing test programs: 14m45.226158381s ago: executing program 3 (id=59): r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) r8 = fcntl$dupfd(r5, 0x0, r6) write$FUSE_NOTIFY_STORE(r8, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) 14m44.668665766s ago: executing program 3 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) 14m38.703762069s ago: executing program 3 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) r5 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x1, @empty, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xe, 0x5d, 0x81}, 0x9c) 14m24.442880978s ago: executing program 3 (id=96): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a541, 0x51) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x141140) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m16.696105399s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x101, 0xb, r4, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20942, 0x56) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 14m13.587999603s ago: executing program 3 (id=109): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) listen(0xffffffffffffffff, 0x5) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) close(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) 13m56.682435995s ago: executing program 32 (id=109): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) listen(0xffffffffffffffff, 0x5) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) close(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) 12m0.808859475s ago: executing program 1 (id=312): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x39]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00020000000000000099aabbccddeeff00112233445566778899aabbccddeef7", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x38, 0x32, 0x35, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x36, 0x37, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x66, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x62, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 11m56.542060611s ago: executing program 1 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r2, 0x1, 0x50bd29, 0x25dfdbf8, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 11m55.267440466s ago: executing program 1 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(0xffffffffffffffff, 0xfffffffc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000012c0)={0x0, 0x9004}, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 11m53.493792474s ago: executing program 1 (id=322): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 11m51.722760402s ago: executing program 1 (id=325): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0x83) splice(r1, 0x0, r0, 0x0, 0xfea5, 0xa) 11m49.029972376s ago: executing program 1 (id=331): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11m33.595414677s ago: executing program 33 (id=331): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m3.570846267s ago: executing program 0 (id=946): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000500)="304c388a800297b3eee001a5d39d5791ac2610d47d2fd51b859a812057244134d399dbff8743fabe1e6cadf4e7a52fbe6507d6e8af8faf828f2a88765bb28d30137eee00e808a2b28a9d480071", 0x4d, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$reject(0x13, r4, 0xd59, 0x1, r4) 5m58.636222641s ago: executing program 0 (id=954): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x1c}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 5m57.254643779s ago: executing program 0 (id=957): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) 5m53.146348431s ago: executing program 0 (id=961): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpid() r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r5, 0x0) setresgid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5m51.230591033s ago: executing program 0 (id=964): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 5m48.458878419s ago: executing program 0 (id=970): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) getpriority(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd700000000000140000001c0007800c0003000000003e0a0000f1"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x840) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m32.481670305s ago: executing program 34 (id=970): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) getpriority(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd700000000000140000001c0007800c0003000000003e0a0000f1"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x840) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m52.510182375s ago: executing program 2 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m49.503779087s ago: executing program 2 (id=1078): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) r1 = socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x6, 0x1, 0x6}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_procfs$pagemap(0x0, 0x0) lseek(r2, 0x40, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 4m44.189136752s ago: executing program 2 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, 0x0, 0x0, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) ioctl$MEMSETBADBLOCK(r2, 0x40084d0c, &(0x7f0000000040)=0x6) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 4m37.66254221s ago: executing program 2 (id=1096): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000869000/0x2000)=nil, &(0x7f000021f000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000352000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() 4m34.830192451s ago: executing program 2 (id=1102): mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') write(0xffffffffffffffff, &(0x7f0000002100)='usbip-v', 0x7) 4m33.20047737s ago: executing program 2 (id=1105): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r1, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') r6 = openat$vsock(0xffffff9c, &(0x7f0000000240), 0x440, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, &(0x7f0000000300)) 4m16.919526185s ago: executing program 35 (id=1105): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r1, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') r6 = openat$vsock(0xffffff9c, &(0x7f0000000240), 0x440, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, &(0x7f0000000300)) 2m13.243236718s ago: executing program 7 (id=1307): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)=""/33, 0x21}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) times(0xfffffffffffffffc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$netlink(0x10, 0x3, 0x6) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 2m7.070633333s ago: executing program 7 (id=1315): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) getpid() r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r5, 0x0) setresgid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2m5.498324069s ago: executing program 7 (id=1319): r0 = getpid() ioperm(0x1, 0x9, 0x4) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)={0x1, 0x0, @b}, 0x48, r6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x32, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e0, 0x20a, 0x278, 0x1e0, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [0x0, 0x0, 0xffff00], 'batadv_slave_0\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x0, 0x60}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@loopback, @local, [0x0, 0x0, 0xff, 0xff000000], [], 'syzkaller1\x00', 'vxcan1\x00', {}, {}, 0x1, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80800, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 2m0.743124847s ago: executing program 7 (id=1332): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7, 0x4, 0x9, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m58.715743987s ago: executing program 7 (id=1325): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.log\x00', 0x900, 0xa0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xef, "11a4876444c4baaf828f0a6e06c4d282cde212acd67b1e3dcb907bdcd320619c8d5fdc6be5eb86aca162fb89bf562283c5a1b7c99fc0d9779df9020ed508a5082fb0b2d772c3cbfeb75ee7563b8e5b915bdd2d492dadac99528b4cbcbed35b327ea6f7d302fde89555df315ba69fed8c55f666288d176de75eaee4641b63e60ce8545e3304caf87f17a8da7cdb64b8e9970602ed5a5a25d4f60a619713acaffd5f2536d582ccc10db4445753fbe6db981d0d5aa89ead557ca1d3438c3daaa6b8f3875bc05f9a8bbde16ffcf6424bbb117116b39b6a6a06d990f50e259aaf96a0abd12cb42fb6aa1492de98c7865c0d"}, &(0x7f0000000480)=0xf7) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={r2, 0x4, 0x5, [0x764, 0x7, 0x1, 0x5, 0x10]}, &(0x7f0000000500)=0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x25) socket(0x1d, 0x6, 0x682f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x3) add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x101002, 0x0, 0x8}, 0x18) socket$netlink(0x10, 0x3, 0x0) fchmod(r0, 0x108) 1m56.970898572s ago: executing program 7 (id=1329): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 1m41.763467308s ago: executing program 36 (id=1329): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 17.802573232s ago: executing program 8 (id=1487): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001180), 0x81900, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) writev(r3, &(0x7f0000000cc0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x200800, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_fuse_handle_req(r2, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x69015a58, 0xdcd, 0xff, 0x8, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) syz_fuse_handle_req(r2, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a1b911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60592813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d0076aeb85488d371488f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba86c1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e953f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a2cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe52a396f51adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c601304e62b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98b55c190537184c60cd00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x4, 0x6, 0x40000000000005, 0x5, 0x3, 0x0, 0x4, 0x3, 0x4, 0x2000, 0x9e7, 0xffffffffffffffff, 0x0, 0x3e, 0x1ce72a6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) r11 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f0000000000)={0x2}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in6=@loopback, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4084) sendmsg$nl_xfrm(r12, 0x0, 0x2c000010) 15.706879416s ago: executing program 8 (id=1490): socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) socket$netlink(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 15.188673104s ago: executing program 8 (id=1492): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) 15.107397459s ago: executing program 4 (id=1493): socket(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019380)=@base={0x20, 0x1000, 0x4, 0x800, 0x2000, 0xffffffffffffffff, 0x12000000}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000280)={0x7, r4, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) socket(0x10, 0x3, 0x0) r5 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 12.044378935s ago: executing program 6 (id=1495): socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') listen(0xffffffffffffffff, 0x5) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r6, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r6, r7, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r9, 0xb1b, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r11 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r11, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0xe0}], 0x1}, 0x3e8) 10.509912329s ago: executing program 4 (id=1496): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpid() r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r5, 0x0) setresgid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 10.508627279s ago: executing program 5 (id=1497): setresuid(0x0, 0x0, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x8, 0x0}, 0x0) getrusage(0xffffffffffffffff, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x249, &(0x7f0000000bc0)="$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") r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x105}, 0x38) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x7, 0x0, 0x32315559, 0x8, 0xc, [{0x9, 0x4000008}, {0x3, 0x7}, {0x6c02412a, 0xd}, {0x6, 0x10000007}, {0x3, 0x3}, {0x2, 0x5}, {0x406, 0xffffffff}, {0xd, 0x3}], 0xcb, 0x9, 0x6, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r4 = mq_open(0x0, 0x42, 0x48, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000480)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$uinput_user_dev(r5, &(0x7f0000000180)={'syz1\x00', {0x3, 0x9, 0x0, 0xfff7}, 0x38, [0xffff, 0x5, 0x7, 0x40000e9, 0x4, 0x6, 0x5, 0x10, 0x7, 0x950c, 0x1294, 0x8, 0x2, 0x5506fd78, 0x8000, 0xffffffa2, 0x7, 0x1, 0x8, 0x7f, 0xe5, 0x9, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x3, 0x5, 0xbf7, 0x490, 0x8, 0x6, 0x2, 0x3b66, 0x7, 0x100, 0x9, 0x3, 0x1, 0xb, 0x5, 0x9, 0x6, 0x4, 0x1, 0xa, 0x0, 0x635dfebb, 0x0, 0xffff0001, 0xd, 0x3, 0x0, 0x7, 0x163, 0x0, 0xae, 0x4, 0xfffffff7, 0xd60, 0x3, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x106, 0x400, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x3, 0xfffffff7, 0x9, 0x3, 0x4, 0x200, 0xfffffff8, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0x2, 0x80000000, 0x2, 0x3, 0x3, 0x9, 0x6, 0x9, 0x3, 0xc, 0x385a, 0x3ff8, 0x9, 0x1, 0x7, 0x5, 0x8, 0x4, 0x1, 0x8, 0x3, 0xfffff305, 0x6a2e, 0x1ff, 0xf4f4, 0x8, 0x2, 0x36, 0xb6, 0x92, 0x0, 0x1, 0x2, 0xcd32, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x49], [0x4, 0x8000, 0x0, 0x23, 0x0, 0xaf, 0x200, 0x0, 0x4, 0x80080000, 0x1, 0x6, 0x51d, 0x9, 0x5, 0xa4, 0x6, 0x0, 0x4, 0x1, 0x2, 0x7, 0x0, 0xe000000, 0xacd, 0x44, 0x7, 0x9, 0x40, 0xc, 0x7, 0x6, 0xa, 0x2, 0x7, 0xb7, 0x2, 0xa4, 0x3, 0x0, 0x4, 0x81, 0xffff, 0x7, 0xfff, 0xdb91, 0x0, 0xd, 0x58cb, 0x1, 0x519eb04a, 0xf, 0xdd7, 0x4, 0xffff, 0x6, 0x6661, 0x4, 0x401, 0x7eedff85, 0x0, 0x1, 0x9, 0xc7fc], [0x7, 0x1, 0xc, 0x5, 0x200, 0x101, 0x101, 0x4, 0x99, 0x4, 0x8001, 0x5, 0xe02c, 0x816b, 0xe, 0x9, 0x101, 0x5, 0x4, 0x200, 0x1, 0x5365, 0x5, 0xb, 0x7, 0x4, 0x5, 0xfffffffb, 0x10, 0x3, 0x1, 0xd6, 0x5, 0x8, 0xfcf, 0x8, 0x8, 0x2, 0x6, 0x10001, 0x3919, 0xffff, 0x1000, 0x1, 0x8, 0x80000000, 0xb, 0xc33, 0x4, 0x3, 0x3, 0xc2e, 0x8, 0x2, 0x8001, 0x1, 0x4, 0x0, 0x2e, 0x7fffdfff, 0xff, 0x1ff, 0x6, 0x5]}, 0x45c) 10.462156011s ago: executing program 6 (id=1498): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r2 = socket(0x2a, 0x2, 0x9) bind$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x80) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(0x0, 0x1, 0x2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a03070000000000000000070000"], 0xfc}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0x101, 0x4) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000040)={0x1, 0x6, 0x7, 0x8001, 0x40, 0x0, 0xffffffffffffa269}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r5}) 8.393057944s ago: executing program 6 (id=1499): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r5 = syz_open_pts(r0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004040) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) 8.392890074s ago: executing program 5 (id=1500): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c0000000df1ffff"], 0x28}], 0x1}, 0x14008010) 8.392665804s ago: executing program 4 (id=1501): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)='.\x00\x00', 0x3) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) 6.294062318s ago: executing program 4 (id=1502): socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) socket$netlink(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 6.201392813s ago: executing program 6 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x311380) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x2, 0xfffffffe, 0x0, 0x5}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) lchown(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) 4.513601854s ago: executing program 6 (id=1504): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x0, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 4.471740737s ago: executing program 5 (id=1505): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x1, r6, 0xc}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) 4.431415659s ago: executing program 4 (id=1506): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0xe, 0x4, 0x4, 0xc, 0x1]}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000100)={0x1, r4, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x32314152, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 4.358625683s ago: executing program 8 (id=1507): r0 = openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_procfs(r3, &(0x7f0000000080)='gid_map\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x76) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) getsockname$llc(r2, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') lseek(r7, 0x8000000010007, 0x0) 3.284605941s ago: executing program 6 (id=1508): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpid() r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r5, 0x0) setresgid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.267708433s ago: executing program 5 (id=1509): socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) msgget(0x1, 0x501) socket$inet6(0xa, 0x3, 0x5) r3 = socket$inet(0x2, 0xa, 0x200000) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c0000000df1ffffff"], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) 1.141674978s ago: executing program 5 (id=1510): r0 = socket$inet(0x2, 0x801, 0x0) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000200)='\a', 0xff52, 0x24044080, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x6, 0x1c, {{0xb, 0x4, 0x1, 0x10, 0x2c, 0x67, 0x0, 0xd9, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@lsrr={0x83, 0x17, 0x3a, [@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010100, @remote, @remote, @local]}]}}}}}) sendmsg$inet(r0, 0x0, 0x4000) shutdown(r0, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r5, 0x0, 0x40000000003, 0x0) 1.116102799s ago: executing program 8 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000012c0)={0x0, 0x9004}, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 996.950565ms ago: executing program 4 (id=1511): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x180000) sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)='7\n', 0x2, 0x20000050, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0x10, 0x6, @broadcast}, 0x14) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd52, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.1167ms ago: executing program 8 (id=1512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 0s ago: executing program 5 (id=1513): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) close(r4) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x200, 0xc2) write$uinput_user_dev(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): om 0 to 1024 [ 207.999818][ T5316] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.063873][ T5316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 210.629970][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 210.934739][ T4458] team0 (unregistering): Port device team_slave_1 removed [ 211.214986][ T5343] loop1: detected capacity change from 0 to 32768 [ 211.592752][ T5343] XFS (loop1): Mounting V5 Filesystem [ 211.706057][ T4458] team0 (unregistering): Port device team_slave_0 removed [ 211.799608][ T5343] XFS (loop1): Ending clean mount [ 211.872420][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.877547][ T5343] XFS (loop1): Quotacheck needed: Please wait. [ 211.974277][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.994445][ T5343] XFS (loop1): Quotacheck: Done. [ 212.646384][ T26] audit: type=1800 audit(1785913795.473:4): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.188" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 212.867407][ T4278] XFS (loop1): Unmounting Filesystem [ 213.017301][ T4458] bond0 (unregistering): Released all slaves [ 213.189345][ T5313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.183'. [ 213.408108][ T5008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.444378][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.457176][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.478612][ T5008] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.497555][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.509751][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.524832][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.532070][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.557825][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.566719][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.580557][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.599172][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.606431][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.620504][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.630090][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.673364][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.691043][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.708821][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.718485][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.738115][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.755584][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.764630][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.773777][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.794162][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.819567][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.307180][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.316599][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.331103][ T5008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.740750][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.752694][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.780187][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.792377][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.804024][ T5008] device veth0_vlan entered promiscuous mode [ 214.812499][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.820561][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.838786][ T5008] device veth1_vlan entered promiscuous mode [ 214.885726][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.894717][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.903918][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.913382][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.924705][ T5008] device veth0_macvtap entered promiscuous mode [ 214.952140][ T5008] device veth1_macvtap entered promiscuous mode [ 214.981227][ T5008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.992358][ T5008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.002305][ T5008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.012903][ T5008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.023544][ T5008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.034068][ T5008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.045525][ T5008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.057204][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.074032][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.092219][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.101080][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.113663][ T5008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.124641][ T5008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.134771][ T5008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.148717][ T5008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.164844][ T5008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.178132][ T5008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.200848][ T5008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.211081][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.225615][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.240309][ T5008] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.252866][ T5008] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.265952][ T5008] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.275426][ T5008] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.408848][ T4680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.420386][ T4680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.429178][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.467700][ T4680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.480331][ T4680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.498698][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.628094][ T26] audit: type=1326 audit(1785913799.683:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.5.129" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd9159e019 code=0x0 [ 218.937369][ T5438] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 220.636855][ T5444] loop0: detected capacity change from 0 to 1024 [ 220.890360][ T5444] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.705028][ T5444] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 222.826726][ T5465] loop2: detected capacity change from 0 to 512 [ 222.899900][ T5465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.183049][ T5465] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 223.454051][ T5473] loop4: detected capacity change from 0 to 4096 [ 223.922467][ T5465] EXT4-fs (loop2): 1 truncate cleaned up [ 223.928201][ T5465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 223.976464][ T5473] ntfs: volume version 3.1. [ 225.187017][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 225.218202][ T26] audit: type=1326 audit(1785913808.273:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.0.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3de19e019 code=0x0 [ 234.176219][ T26] audit: type=1326 audit(1785913817.233:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.1.223" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef4739e019 code=0x0 [ 234.200299][ T5567] Bluetooth: MGMT ver 1.22 [ 239.422946][ T5611] loop5: detected capacity change from 0 to 64 [ 240.056026][ T5619] No such timeout policy "syz1" [ 240.310227][ T4275] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 240.320018][ T4275] CPU: 1 PID: 4275 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 240.327596][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.337673][ T4275] Workqueue: hci0 hci_rx_work [ 240.342401][ T4275] Call Trace: [ 240.345690][ T4275] [ 240.348633][ T4275] dump_stack_lvl+0x188/0x24e [ 240.353479][ T4275] ? show_regs_print_info+0x12/0x12 [ 240.358722][ T4275] ? load_image+0x410/0x410 [ 240.363257][ T4275] sysfs_create_dir_ns+0x26a/0x290 [ 240.368415][ T4275] ? __lock_acquire+0x7c40/0x7c40 [ 240.373514][ T4275] ? sysfs_warn_dup+0xa0/0xa0 [ 240.378264][ T4275] ? do_raw_spin_unlock+0x11d/0x230 [ 240.383519][ T4275] kobject_add_internal+0x617/0xca0 [ 240.388756][ T4275] kobject_add+0x160/0x230 [ 240.393214][ T4275] ? kobject_init+0x1c0/0x1c0 [ 240.397930][ T4275] ? __raw_spin_lock_init+0x41/0x100 [ 240.403334][ T4275] ? klist_children_get+0x50/0x50 [ 240.408394][ T4275] ? get_device_parent+0x121/0x3e0 [ 240.413543][ T4275] device_add+0x470/0x1050 [ 240.418015][ T4275] hci_conn_add_sysfs+0xd1/0x1e0 [ 240.422992][ T4275] le_conn_complete_evt+0xfac/0x15c0 [ 240.428324][ T4275] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 240.434651][ T4275] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 240.440332][ T4275] ? mutex_unlock+0x10/0x10 [ 240.444877][ T4275] ? skb_pull_data+0xec/0x1f0 [ 240.449643][ T4275] hci_le_conn_complete_evt+0x183/0x440 [ 240.455242][ T4275] ? hci_remote_host_features_evt+0x230/0x230 [ 240.461367][ T4275] hci_event_packet+0x7b3/0x1290 [ 240.466348][ T4275] ? __lock_acquire+0x7c40/0x7c40 [ 240.471404][ T4275] ? bis_list+0x280/0x280 [ 240.475781][ T4275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 240.481715][ T4275] ? kcov_remote_start+0x4b0/0x7e0 [ 240.486863][ T4275] ? do_machine_check+0x380/0x750 [ 240.491933][ T4275] ? hci_send_to_monitor+0x9c/0x4a0 [ 240.497513][ T4275] hci_rx_work+0x3eb/0xd40 [ 240.501958][ T4275] ? _raw_spin_unlock+0x40/0x40 [ 240.506846][ T4275] ? process_one_work+0x7b4/0x1160 [ 240.511993][ T4275] process_one_work+0x8ab/0x1160 [ 240.516974][ T4275] ? worker_detach_from_pool+0x240/0x240 [ 240.522661][ T4275] ? _raw_spin_lock_irq+0xb7/0xf0 [ 240.527715][ T4275] ? _raw_spin_lock_irqsave+0x100/0x100 [ 240.533292][ T4275] ? wq_worker_running+0x97/0x190 [ 240.538351][ T4275] worker_thread+0xaf5/0x12a0 [ 240.543080][ T4275] kthread+0x29d/0x330 [ 240.547171][ T4275] ? worker_clr_flags+0x1a0/0x1a0 [ 240.552222][ T4275] ? kthread_blkcg+0xd0/0xd0 [ 240.556843][ T4275] ret_from_fork+0x1f/0x30 [ 240.561305][ T4275] [ 240.820563][ T4275] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.834225][ T4275] Bluetooth: hci0: failed to register connection device [ 242.851834][ T4275] Bluetooth: hci0: command 0x2016 tx timeout [ 243.030026][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.052641][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.060939][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.496642][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 244.707924][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.719161][ T27] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 244.728503][ T27] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 244.738580][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.772695][ T27] usb 5-1: config 0 descriptor?? [ 245.430972][ T27] usb 5-1: Direct firmware load for ar3k/AthrBT_0xd3674841.dfu failed with error -2 [ 245.446267][ T27] usb 5-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xd3674841.dfu [ 247.398820][ T4275] Bluetooth: hci4: command 0x0405 tx timeout [ 248.190653][ T5700] capability: warning: `syz.0.246' uses deprecated v2 capabilities in a way that may be insecure [ 248.919323][ T5712] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 250.526968][ T5734] loop1: detected capacity change from 0 to 512 [ 251.044059][ T5734] EXT4-fs (loop1): 1 truncate cleaned up [ 251.049864][ T5734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 251.335730][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 252.814797][ T5755] loop1: detected capacity change from 0 to 1024 [ 252.931219][ T5755] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.395487][ T5755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.633043][ T5769] xt_CT: No such helper "snmp_trap" [ 255.524385][ T5783] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by " [ 255.585804][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773903][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.966951][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 257.191664][ T5804] loop5: detected capacity change from 0 to 1024 [ 257.313598][ T5804] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.652408][ T5804] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 257.803725][ T5815] loop4: detected capacity change from 0 to 4096 [ 257.824552][ T5815] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 257.844593][ T5815] ntfs3: loop4: failed to replay log file. Can't mount rw! [ 259.065504][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 261.115017][ T5843] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 263.275946][ T5860] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 263.914648][ T5856] can: request_module (can-proto-3) failed. [ 270.773432][ T5885] loop4: detected capacity change from 0 to 128 [ 273.552793][ T4275] Bluetooth: hci4: link tx timeout [ 273.558578][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 273.731517][ T4275] Bluetooth: hci4: link tx timeout [ 273.736773][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.149808][ T5926] xt_CT: No such helper "netbios-ns" [ 275.571435][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 276.543758][ T5942] loop4: detected capacity change from 0 to 131072 [ 276.554603][ T5942] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 276.564299][ T5942] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 276.641954][ T5942] F2FS-fs (loop4): invalid crc value [ 276.663635][ T5942] F2FS-fs (loop4): Found nat_bits in checkpoint [ 276.918204][ T5942] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 276.926082][ T5942] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 277.583380][ T4280] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 277.592210][ T4280] Bluetooth: hci4: Injecting HCI hardware error event [ 277.601991][ T4275] Bluetooth: hci4: hardware error 0x00 [ 280.071924][ T4275] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 280.256858][ T5942] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 288.090236][ T6043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.097817][ T6043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.112805][ T6043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.127917][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.629493][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.301791][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.598030][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 293.613807][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 293.624494][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 293.635897][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 293.646302][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 301.070174][ T6140] siw: device registration error -23 [ 303.130390][ T6137] can: request_module (can-proto-3) failed. [ 304.477991][ T6159] loop5: detected capacity change from 0 to 131072 [ 304.537784][ T6159] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 304.547303][ T6159] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 304.573818][ T6159] F2FS-fs (loop5): invalid crc value [ 304.636202][ T6159] F2FS-fs (loop5): Found nat_bits in checkpoint [ 304.734091][ T6159] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 304.741481][ T6159] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 306.036897][ T6170] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 306.092939][ T6176] loop4: detected capacity change from 0 to 256 [ 306.143171][ T6176] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 306.331691][ T6182] device syzkaller0 entered promiscuous mode [ 306.398691][ T6183] tipc: Enabled bearer , priority 0 [ 306.493336][ T6182] tipc: Resetting bearer [ 306.775460][ T27] Bluetooth: Patch file not found ar3k/AthrBT_0xd3674841.dfu [ 306.793832][ T27] Bluetooth: Loading patch file failed [ 307.503849][ T27] ath3k: probe of 5-1:0.0 failed with error -110 [ 307.514825][ T27] usb 5-1: USB disconnect, device number 3 [ 307.584491][ T4357] udevd[4357]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 309.953476][ T4275] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 309.963310][ T4275] Bluetooth: hci0: Injecting HCI hardware error event [ 309.983518][ T4280] Bluetooth: hci0: hardware error 0x00 [ 312.051791][ T4280] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 317.013606][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.019993][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.257169][ T6265] loop4: detected capacity change from 0 to 40427 [ 318.289252][ T6265] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 319.478069][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.497015][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.671798][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.687496][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.712012][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 320.422425][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.505632][ T6282] loop2: detected capacity change from 0 to 256 [ 320.761111][ T4400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.225942][ T6282] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 321.527770][ T6271] lo speed is unknown, defaulting to 1000 [ 322.651471][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 323.435133][ T4400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.692308][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 324.781178][ T4400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.320903][ T4400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.946050][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 328.722383][ T6271] chnl_net:caif_netlink_parms(): no params data found [ 329.598804][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 331.405391][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.416578][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.426982][ T6271] device bridge_slave_0 entered promiscuous mode [ 331.532021][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.539217][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.592779][ T6271] device bridge_slave_1 entered promiscuous mode [ 331.641577][ T6378] process 'syz.4.381' launched '/dev/fd/3' with NULL argv: empty string added [ 332.794341][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.933747][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.245615][ T6271] team0: Port device team_slave_0 added [ 340.682337][ T6271] team0: Port device team_slave_1 added [ 340.990337][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.260168][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.288776][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.179537][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.201915][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.696437][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.131874][ T6271] device hsr_slave_0 entered promiscuous mode [ 344.139124][ T6271] device hsr_slave_1 entered promiscuous mode [ 344.170141][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.177896][ T6271] Cannot create hsr debugfs directory [ 344.867504][ T4400] device hsr_slave_0 left promiscuous mode [ 344.882099][ T4400] device hsr_slave_1 left promiscuous mode [ 344.891770][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.899272][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.922452][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.929934][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.952021][ T4400] device bridge_slave_1 left promiscuous mode [ 344.958337][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.982728][ T4400] device bridge_slave_0 left promiscuous mode [ 344.989021][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.053719][ T4400] device veth1_macvtap left promiscuous mode [ 345.059863][ T4400] device veth0_macvtap left promiscuous mode [ 345.081571][ T4400] device veth1_vlan left promiscuous mode [ 345.087484][ T4400] device veth0_vlan left promiscuous mode [ 345.979003][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 346.022109][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 346.065538][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.109852][ T4400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.428127][ T4400] bond0 (unregistering): Released all slaves [ 346.553254][ T6271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.572736][ T6271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.585266][ T6271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.638170][ T6271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.776549][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.818339][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.828454][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.850073][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.864111][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.874876][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.885714][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.892936][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.924758][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.937649][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.950021][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.959013][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.966204][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.974969][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.013015][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.030441][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.043983][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.078234][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.092490][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.105617][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.115372][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.124510][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.134146][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.144283][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.158451][ T6271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.519272][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.527435][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.546168][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.967844][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.979083][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.009064][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.022987][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.035146][ T6271] device veth0_vlan entered promiscuous mode [ 348.047241][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.056578][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.077872][ T6271] device veth1_vlan entered promiscuous mode [ 348.110300][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.122144][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 348.132812][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.150872][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.165911][ T6271] device veth0_macvtap entered promiscuous mode [ 348.183624][ T6271] device veth1_macvtap entered promiscuous mode [ 348.203579][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.222452][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.233020][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.244317][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.254474][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.265182][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.277322][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.287601][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.297965][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.312376][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.326582][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.341938][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.355803][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.366020][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.379765][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.401412][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.413344][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.429114][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.445540][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.457115][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.475357][ T6271] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.490232][ T6271] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.499745][ T6271] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.517420][ T6271] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.626193][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.655815][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.667832][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.697882][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.706619][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.717050][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.150637][ T6535] loop4: detected capacity change from 0 to 1024 [ 349.658107][ T6547] zonefs (nullb0) ERROR: Not a zoned block device [ 350.331557][ T6535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.352168][ T6540] siw: device registration error -23 [ 350.794828][ T6531] can: request_module (can-proto-3) failed. [ 350.823561][ T6535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 352.511933][ T6563] loop6: detected capacity change from 0 to 131072 [ 352.529653][ T6563] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0) [ 352.539150][ T6563] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 352.558228][ T6563] F2FS-fs (loop6): invalid crc value [ 353.050945][ T6563] F2FS-fs (loop6): Found nat_bits in checkpoint [ 353.087830][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 353.773100][ T6563] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 353.780236][ T6563] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 354.068465][ T6589] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 354.528895][ T6588] loop4: detected capacity change from 0 to 1024 [ 354.774281][ T6588] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 355.898227][ T6588] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 357.612274][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 361.765359][ T6637] loop6: detected capacity change from 0 to 1024 [ 361.861377][ T6637] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.131639][ T6651] siw: device registration error -23 [ 363.128727][ T6643] can: request_module (can-proto-3) failed. [ 363.559129][ T6637] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 365.856605][ T6675] loop4: detected capacity change from 0 to 1024 [ 365.913719][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 365.961427][ T6675] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 366.123066][ T6675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 367.522327][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 369.168652][ T6681] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 369.175810][ T6681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.934011][ T6681] vhci_hcd vhci_hcd.0: Device attached [ 370.156973][ T6701] vhci_hcd: connection closed [ 370.176558][ T4694] vhci_hcd: stop threads [ 370.186659][ T4694] vhci_hcd: release socket [ 370.191473][ T4694] vhci_hcd: disconnect device [ 370.536851][ T6717] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 372.847452][ T6746] loop6: detected capacity change from 0 to 1024 [ 372.862278][ T6746] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 372.955339][ T6746] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 374.259668][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 378.459728][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.466153][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.270093][ T6790] futex_wake_op: syz.4.449 tries to shift op by 144; fix this program [ 391.883325][ T6903] loop4: detected capacity change from 0 to 256 [ 392.588720][ T6907] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 393.150467][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'. [ 396.168488][ T6938] loop6: detected capacity change from 0 to 1024 [ 396.349661][ T6938] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 397.323733][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 397.657622][ T6959] loop6: detected capacity change from 0 to 16 [ 397.900655][ T6959] erofs: (device loop6): mounted with root inode @ nid 36. [ 401.014238][ T6992] loop5: detected capacity change from 0 to 512 [ 402.230634][ T6992] EXT4-fs (loop5): Test dummy encryption mode enabled [ 402.432084][ T6992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 402.486745][ T6992] System zones: 1-2, 4-12, 8-8 [ 402.516026][ T6992] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.494: iget: bad i_size value: 38620345925642 [ 402.568275][ T6992] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.494: couldn't read orphan inode 15 (err -117) [ 402.852465][ T6992] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 403.976254][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 405.165697][ T7048] netlink: 96 bytes leftover after parsing attributes in process `syz.5.504'. [ 406.092536][ T7065] loop4: detected capacity change from 0 to 256 [ 406.201591][ T7065] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 407.895199][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 407.895929][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 409.250686][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.514'. [ 409.602603][ T7090] lo speed is unknown, defaulting to 1000 [ 413.122484][ T7133] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 413.122484][ T7133] The task syz.0.522 (7133) triggered the difference, watch for misbehavior. [ 417.089677][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 417.089832][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 417.461549][ T7171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.786528][ T7199] loop5: detected capacity change from 0 to 1024 [ 421.569964][ T7199] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 422.110464][ T7217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 422.940149][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 423.015310][ T7223] loop4: detected capacity change from 0 to 1024 [ 423.081599][ T7223] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 423.306502][ T7233] loop5: detected capacity change from 0 to 1024 [ 424.069757][ T7223] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 426.076357][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 427.280927][ T7262] tmpfs: Unknown parameter 'usrquota' [ 438.584147][ T7357] netlink: 'syz.5.571': attribute type 2 has an invalid length. [ 439.896002][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.902527][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.085315][ T7387] lo speed is unknown, defaulting to 1000 [ 444.003720][ T7404] siw: device registration error -23 [ 446.226969][ T7405] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 446.254513][ T7405] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 446.269770][ T7405] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 446.346902][ T7416] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 447.261622][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 448.433637][ T7433] loop6: detected capacity change from 0 to 1024 [ 448.666472][ T7433] hfsplus: unable to parse mount options [ 450.951108][ T7454] loop5: detected capacity change from 0 to 1024 [ 451.056366][ T7454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 451.912278][ T7454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 452.108781][ T7474] loop4: detected capacity change from 0 to 1024 [ 452.363062][ T7474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 453.312205][ T7483] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 453.626170][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 453.743902][ T7488] futex_wake_op: syz.0.601 tries to shift op by 144; fix this program [ 453.919244][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 458.024615][ T7522] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 458.033069][ T7522] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 458.041770][ T7522] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 463.578958][ T7570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.716017][ T7567] loop4: detected capacity change from 0 to 128 [ 464.782571][ T7567] FAT-fs (loop4): bogus number of FAT structure [ 464.991311][ T7567] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 465.000758][ T7567] FAT-fs (loop4): Can't find a valid FAT filesystem [ 466.057287][ T6524] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 466.333184][ T7592] loop6: detected capacity change from 0 to 1024 [ 467.361993][ T7599] UBIFS error (pid: 7599): cannot open "", error -22 [ 467.699315][ T7592] hfsplus: xattr searching failed [ 468.064595][ T7612] loop5: detected capacity change from 0 to 1024 [ 468.172392][ T7612] hfsplus: unable to parse mount options [ 468.283692][ T6524] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 470.583211][ T7637] MPTCP: addr_signal error, add_addr=2, echo=1 [ 470.585694][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 474.074866][ T7667] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 474.087659][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 474.097016][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 474.103753][ T7669] vhci_hcd: connection closed [ 474.104057][ T4680] vhci_hcd: stop threads [ 474.305595][ T4680] vhci_hcd: release socket [ 474.321625][ T4680] vhci_hcd: disconnect device [ 475.281438][ T7685] loop5: detected capacity change from 0 to 64 [ 475.556464][ T7689] loop6: detected capacity change from 0 to 2048 [ 476.053563][ T7697] UBIFS error (pid: 7697): cannot open "", error -22 [ 476.566079][ T7689] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 477.333321][ T7717] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 477.353986][ T7717] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 477.361630][ T7717] overlayfs: failed to verify upper root origin [ 477.795607][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 486.898233][ T7799] loop4: detected capacity change from 0 to 64 [ 489.269490][ T7812] loop5: detected capacity change from 0 to 1024 [ 492.525168][ T7835] loop5: detected capacity change from 0 to 128 [ 500.467271][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 500.476226][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 501.438299][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.444743][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.633332][ T7904] netlink: 36 bytes leftover after parsing attributes in process `syz.6.690'. [ 509.207843][ T7954] loop6: detected capacity change from 0 to 64 [ 510.818899][ T7972] netlink: 36 bytes leftover after parsing attributes in process `syz.5.699'. [ 513.718862][ T8001] loop4: detected capacity change from 0 to 512 [ 513.839363][ T8001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 513.965293][ T8001] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.759290][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 516.037966][ T8035] loop4: detected capacity change from 0 to 512 [ 516.129893][ T8035] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 517.016392][ T8035] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.717: corrupted xattr entries [ 517.145563][ T8035] EXT4-fs (loop4): Remounting filesystem read-only [ 517.192789][ T8035] EXT4-fs (loop4): 1 truncate cleaned up [ 517.198569][ T8035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 519.365895][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 520.341674][ T8077] netlink: 23 bytes leftover after parsing attributes in process `syz.4.725'. [ 521.271389][ T8077] ceph: No mds server is up or the cluster is laggy [ 524.475875][ T8117] syz.0.732 (8117): drop_caches: 2 [ 524.624780][ T8093] loop6: detected capacity change from 0 to 8192 [ 526.446739][ T8129] loop4: detected capacity change from 0 to 2048 [ 526.506610][ T8129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 530.685125][ T8164] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 530.691698][ T8164] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 530.699554][ T8164] vhci_hcd vhci_hcd.0: Device attached [ 531.013943][ T8168] vhci_hcd: connection closed [ 531.014577][ T4674] vhci_hcd: stop threads [ 531.072778][ T4674] vhci_hcd: release socket [ 531.111535][ T14] usb 38-1: SetAddress Request (2) to port 0 [ 531.131468][ T14] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 531.141560][ T4674] vhci_hcd: disconnect device [ 531.161416][ T14] usb 38-1: enqueue for inactive port 0 [ 531.879073][ T14] usb usb38-port1: attempt power cycle [ 531.895496][ T8176] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 533.542699][ T14] usb usb38-port1: unable to enumerate USB device [ 534.050520][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.751'. [ 537.227382][ T8227] loop6: detected capacity change from 0 to 40427 [ 537.267416][ T8227] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 537.275217][ T8227] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 537.288344][ T8227] F2FS-fs (loop6): invalid crc value [ 537.295444][ T8227] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 537.354660][ T8227] F2FS-fs (loop6): Start checkpoint disabled! [ 537.385170][ T8227] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 537.392431][ T8227] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 538.545537][ T4458] kworker/u4:13: attempt to access beyond end of device [ 538.545537][ T4458] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 540.743104][ T8268] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 540.749704][ T8268] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 540.759942][ T8268] vhci_hcd vhci_hcd.0: Device attached [ 540.907353][ T8269] vhci_hcd: connection closed [ 540.939942][ T4674] vhci_hcd: stop threads [ 540.973540][ T4674] vhci_hcd: release socket [ 540.987600][ T4674] vhci_hcd: disconnect device [ 546.046183][ T8322] loop6: detected capacity change from 0 to 1024 [ 546.055335][ T8322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 546.423018][ T8322] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 549.095231][ T8360] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 549.101859][ T8360] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 549.110114][ T8360] vhci_hcd vhci_hcd.0: Device attached [ 549.552723][ T8362] vhci_hcd: connection closed [ 549.554179][ T4601] vhci_hcd: stop threads [ 549.594336][ T4601] vhci_hcd: release socket [ 549.598850][ T4601] vhci_hcd: disconnect device [ 550.921777][ T1045] block nbd5: Attempted send on invalid socket [ 550.928890][ T1045] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 550.946154][ T8375] efs: cannot read volume header [ 554.320272][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 554.377609][ T8398] loop5: detected capacity change from 0 to 512 [ 554.449263][ T8398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 554.540342][ T8398] EXT4-fs (loop5): 1 truncate cleaned up [ 554.573430][ T8398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 555.519170][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 559.234489][ T8446] syz.4.800 (8446): drop_caches: 2 [ 562.862008][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.868656][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.415919][ T8462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 564.098022][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'. [ 564.107401][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'. [ 564.116525][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 567.533541][ T8487] loop6: detected capacity change from 0 to 2048 [ 569.089187][ T8491] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 569.104691][ T8491] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 569.112091][ T8491] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 569.120131][ T8491] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 569.127978][ T8491] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 569.144878][ T8491] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 569.163468][ T8491] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 569.172346][ T8491] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 569.179714][ T8491] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 569.188006][ T8491] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 569.195131][ T8491] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 569.202605][ T8491] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 569.209301][ T8491] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 569.216542][ T8491] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 569.223926][ T8491] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 569.232088][ T8491] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 569.239355][ T8491] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 569.248878][ T8491] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 569.255913][ T8491] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 569.262863][ T8491] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 569.371023][ T8491] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 569.382193][ T8491] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 569.461111][ T8491] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 569.477973][ T8491] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 569.537971][ T8487] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 569.547864][ T8487] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.590283][ T8491] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 569.764763][ T8491] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 570.019351][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 572.608498][ T8520] loop6: detected capacity change from 0 to 2048 [ 572.722792][ T8520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.067467][ T8540] netlink: 'syz.5.823': attribute type 12 has an invalid length. [ 576.190703][ T8546] loop6: detected capacity change from 0 to 1024 [ 576.225459][ T8546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 577.201009][ T8546] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 580.261063][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 582.817707][ T8590] netlink: 'syz.2.836': attribute type 12 has an invalid length. [ 585.044997][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'. [ 591.991627][ T8638] netlink: 'syz.5.848': attribute type 12 has an invalid length. [ 592.260123][ T26] audit: type=1326 audit(1785914432.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.6.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0eccd9e019 code=0x0 [ 594.595866][ T26] audit: type=1326 audit(1785914434.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.6.855" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0eccd9e019 code=0x0 [ 595.737186][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.858'. [ 595.746447][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.858'. [ 595.755476][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.858'. [ 597.730060][ T8687] netlink: 'syz.6.860': attribute type 1 has an invalid length. [ 600.012387][ T8703] netlink: 'syz.4.865': attribute type 12 has an invalid length. [ 601.068059][ T8712] Mass Storage Function, version: 2009/09/11 [ 601.074216][ T8712] LUN: removable file: (no medium) [ 601.082146][ T8712] LUN: removable file: (no medium) [ 602.439316][ T8728] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 604.823680][ T8748] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 608.565437][ T8772] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 612.290368][ T8810] loop4: detected capacity change from 0 to 128 [ 612.356393][ T8810] EXT4-fs (loop4): Test dummy encryption mode enabled [ 612.442218][ T8810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 612.470990][ T8810] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 613.901269][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 614.561437][ T8810] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 615.904124][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 615.925907][ T8843] netlink: 'syz.0.897': attribute type 12 has an invalid length. [ 616.065002][ T8847] bond0: option use_carrier: invalid value (9) [ 616.212482][ T8847] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 617.815211][ T8863] xt_CONNSECMARK: invalid mode: 0 [ 623.592308][ T8895] netlink: 'syz.5.910': attribute type 12 has an invalid length. [ 624.216165][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.225389][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.454222][ T8947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 631.173830][ T8957] netlink: 'syz.2.925': attribute type 12 has an invalid length. [ 636.289077][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 636.297129][ T8992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 636.320592][ T8992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.278835][ T9016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.260752][ T9023] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 641.032402][ T9034] afs: Bad value for 'source' [ 641.170496][ T9035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 642.327074][ T9026] netlink: 'syz.5.937': attribute type 12 has an invalid length. [ 644.950532][ T9056] loop7: detected capacity change from 0 to 16384 [ 646.877032][ T9057] loop7: detected capacity change from 16384 to 0 [ 647.261565][ T9071] atomic_op ffff88807b5c5198 conn xmit_atomic 0000000000000000 [ 649.303268][ T9085] input: syz1 as /devices/virtual/input/input11 [ 649.701636][ T9095] netlink: 88 bytes leftover after parsing attributes in process `syz.6.953'. [ 656.048860][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 660.474199][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 661.011442][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 666.798827][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.983'. [ 668.309610][ T9231] afs: Bad value for 'source' [ 668.377123][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.988'. [ 670.781007][ T9243] netlink: 'syz.6.989': attribute type 12 has an invalid length. [ 674.295171][ T9281] loop6: detected capacity change from 0 to 2048 [ 674.314994][ T9281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 675.733772][ T9287] netlink: 'syz.5.1006': attribute type 12 has an invalid length. [ 676.435986][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 676.444106][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 677.291436][ T9304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.690320][ T9321] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 679.473646][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.485407][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.499976][ T9159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.521519][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.529101][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 679.536650][ T9159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 679.827922][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 681.651297][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 683.703219][ T9313] chnl_net:caif_netlink_parms(): no params data found [ 683.731466][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 684.841488][ T4280] Bluetooth: hci1: failed to read key size for handle 200 [ 685.716616][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.745103][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.852365][ T9159] Bluetooth: hci5: command 0x040f tx timeout [ 687.083528][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.094039][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.136776][ T9313] device bridge_slave_0 entered promiscuous mode [ 688.167622][ T9385] loop4: detected capacity change from 0 to 256 [ 688.174833][ T9385] exfat: Deprecated parameter 'utf8' [ 688.180162][ T9385] exfat: Deprecated parameter 'utf8' [ 688.196977][ T9385] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 688.293109][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.310577][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.522608][ T9313] device bridge_slave_1 entered promiscuous mode [ 689.865133][ T9159] Bluetooth: hci5: command 0x0419 tx timeout [ 690.019563][ T9313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.032705][ T9313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.142400][ T9313] team0: Port device team_slave_0 added [ 690.187921][ T9313] team0: Port device team_slave_1 added [ 690.508951][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.567287][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.733661][ T9313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.799947][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.885897][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.952607][ T9313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.897744][ T9313] device hsr_slave_0 entered promiscuous mode [ 691.952139][ T9313] device hsr_slave_1 entered promiscuous mode [ 691.982296][ T9313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.045559][ T9313] Cannot create hsr debugfs directory [ 695.282786][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1041'. [ 700.677353][ T9491] netlink: 'syz.4.1050': attribute type 12 has an invalid length. [ 700.765049][ T26] audit: type=1107 audit(1785914541.803:10): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 700.825534][ T9313] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 701.967937][ T9495] ieee802154 phy0 wpan0: encryption failed: -22 [ 702.044393][ T9313] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 702.753932][ T9313] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 702.894467][ T9510] loop5: detected capacity change from 0 to 8 [ 704.423802][ T9313] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 704.622618][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1057'. [ 707.426969][ T9534] overlayfs: failed to resolve './file2': -2 [ 708.346801][ T9516] team0 (unregistering): Port device team_slave_0 removed [ 709.280136][ T9516] team0 (unregistering): Port device team_slave_1 removed [ 709.583551][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 709.675469][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.752753][ T9313] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.802337][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 709.851269][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 709.859311][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 709.890033][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 709.899790][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.906997][ T4682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.565379][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 710.574492][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 710.583389][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.590533][ T4682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.599399][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 710.631650][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 710.826571][ T9313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 710.837070][ T9313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 710.924844][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 710.962596][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 711.002999][ T9474] Bluetooth: Error in BCSP hdr checksum [ 711.045114][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 711.087587][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 711.098523][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 711.108961][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 711.118455][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 711.127904][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 711.138398][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 711.149006][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 711.157229][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 711.256799][ T4682] Bluetooth: Error in BCSP hdr checksum [ 713.011375][ T9159] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 713.323443][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.340026][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.567414][ T9313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.439756][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1076'. [ 719.093279][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 719.103844][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 719.150890][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 719.162888][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 719.201219][ T9313] device veth0_vlan entered promiscuous mode [ 719.214456][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 719.242195][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 719.309118][ T9313] device veth1_vlan entered promiscuous mode [ 719.433089][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 719.444532][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 719.462660][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 719.481716][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 719.504027][ T9313] device veth0_macvtap entered promiscuous mode [ 720.811477][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 720.854399][ T9313] device veth1_macvtap entered promiscuous mode [ 721.130696][ T9623] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 721.137316][ T9623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 721.145824][ T9623] vhci_hcd vhci_hcd.0: Device attached [ 721.417042][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.435563][ T9629] vhci_hcd: connection closed [ 721.436627][ T4687] vhci_hcd: stop threads [ 721.598902][ T9065] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 722.235640][ T4687] vhci_hcd: release socket [ 722.374346][ T9638] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 722.395489][ T9638] cramfs: wrong magic [ 722.639008][ T4687] vhci_hcd: disconnect device [ 722.644822][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.664981][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.676108][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.686156][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.696810][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.707012][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.717645][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.733914][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.745565][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.756225][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.766503][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.778040][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.788061][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.799080][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.819400][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.867640][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.577363][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.706228][ T9638] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1085'. [ 724.466832][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.586760][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.863603][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 725.015372][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 725.688345][ T9313] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.730210][ T9313] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.594335][ T9313] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.823412][ T9313] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.011217][ T9065] vhci_hcd: vhci_device speed not set [ 727.058146][ T4687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.244184][ T4687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.307336][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 728.277881][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.302938][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.333355][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 730.376438][ T9691] loop6: detected capacity change from 0 to 4096 [ 731.132892][ T9691] ntfs: (device loop6): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 731.144613][ T9691] ntfs: (device loop6): ntfs_fill_super(): Unsupported NTFS filesystem. [ 731.386668][ T9693] loop7: detected capacity change from 0 to 1024 [ 731.440184][ T9693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 731.552112][ T9693] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 732.161863][ T9706] 0x000000000007-0x000000020000 : "" [ 732.279750][ T9706] ftl_cs: FTL header corrupt! [ 733.692814][ T9313] EXT4-fs (loop7): unmounting filesystem. [ 733.986080][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1106'. [ 735.899865][ T9727] team0 (unregistering): Port device team_slave_0 removed [ 736.119720][ T9727] team0 (unregistering): Port device team_slave_1 removed [ 736.418807][ T9742] loop4: detected capacity change from 0 to 4096 [ 736.885882][ T9742] ntfs: (device loop4): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 736.897559][ T9742] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 739.430235][ T4394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.399601][ T9762] 0x000000000007-0x000000020000 : "" [ 740.414239][ T9762] ftl_cs: FTL header corrupt! [ 742.094419][ T4394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.242873][ T9783] loop5: detected capacity change from 0 to 1024 [ 745.275023][ T9783] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 745.602352][ T9783] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 746.084178][ T4394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.159863][ T9810] loop7: detected capacity change from 0 to 4096 [ 747.261980][ T9810] ntfs: (device loop7): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 747.273635][ T9810] ntfs: (device loop7): ntfs_fill_super(): Unsupported NTFS filesystem. [ 747.361344][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.367762][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.395281][ T4394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.421442][ T8495] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 747.643175][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 751.810620][ T9857] loop4: detected capacity change from 0 to 8 [ 752.072762][ T9853] loop7: detected capacity change from 0 to 256 [ 752.966629][ T4394] tipc: Left network mode [ 753.108089][ T9865] loop5: detected capacity change from 0 to 1024 [ 753.193505][ T9865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 753.287725][ T9865] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 753.738663][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 753.750521][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 753.758844][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 753.767895][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 753.775761][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 753.783133][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 754.658581][ T9872] chnl_net:caif_netlink_parms(): no params data found [ 754.891724][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.899011][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.907950][ T9872] device bridge_slave_0 entered promiscuous mode [ 754.986382][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.994024][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.002785][ T9872] device bridge_slave_1 entered promiscuous mode [ 755.030042][ T9872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.094106][ T9872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.254128][ T9872] team0: Port device team_slave_0 added [ 755.299922][ T4394] device hsr_slave_0 left promiscuous mode [ 755.307980][ T4394] device hsr_slave_1 left promiscuous mode [ 755.359493][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 755.493216][ T4394] device veth1_macvtap left promiscuous mode [ 755.499401][ T4394] device veth0_macvtap left promiscuous mode [ 755.552873][ T4394] device veth1_vlan left promiscuous mode [ 755.575660][ T4394] device veth0_vlan left promiscuous mode [ 755.813659][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 756.895510][ T9915] loop5: detected capacity change from 0 to 4096 [ 756.918851][ T9915] ntfs: (device loop5): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 756.930535][ T9915] ntfs: (device loop5): ntfs_fill_super(): Unsupported NTFS filesystem. [ 757.345809][ T8495] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 757.891249][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 758.001237][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1152'. [ 759.971527][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 761.480204][ T9942] loop6: detected capacity change from 0 to 512 [ 761.503654][ T9942] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 761.604590][ T9942] EXT4-fs (loop6): 1 truncate cleaned up [ 761.610295][ T9942] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 762.051378][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 764.760275][ T4394] bond0 (unregistering): Released all slaves [ 764.882233][ T9872] team0: Port device team_slave_1 added [ 764.908117][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.915287][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.941731][ T9872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.962442][ T9940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 764.969812][ T9940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 764.980345][ T9940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 764.988032][ T9940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 765.087191][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.114953][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.198188][ T9872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.353475][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 766.263437][ T9872] device hsr_slave_0 entered promiscuous mode [ 766.554941][ T9974] NILFS (nullb0): couldn't find nilfs on the device [ 767.265562][ T9872] device hsr_slave_1 entered promiscuous mode [ 767.297643][ T9872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 767.369371][ T9872] Cannot create hsr debugfs directory [ 772.779724][ T9872] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 773.033870][ T9872] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 774.447911][T10012] loop4: detected capacity change from 0 to 512 [ 774.481849][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.489172][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.499194][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 774.506832][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 774.525530][ T9872] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 774.599120][T10012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 774.743619][T10012] EXT4-fs (loop4): 1 truncate cleaned up [ 774.749326][T10012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 774.823358][ T9872] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 775.118328][T10019] netlink: 'syz.5.1161': attribute type 12 has an invalid length. [ 775.387280][ T9872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.398575][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 775.420873][T10024] loop6: detected capacity change from 0 to 1024 [ 775.533914][T10024] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 776.381177][T10024] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 776.518307][ T9872] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.622270][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 776.660919][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.167854][ T4394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.579583][T10043] loop7: detected capacity change from 0 to 64 [ 777.580752][T10043] hfs: unable to parse mount options [ 777.756834][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 777.830146][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 777.910471][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.917740][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.955174][ T8476] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 777.983170][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 777.997184][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 778.017595][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.024852][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.302922][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 778.419873][ T9872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 778.556929][ T9872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.633015][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 778.707989][ T4394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.753824][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 778.788623][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 778.811425][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 778.839314][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 778.849936][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 778.870120][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 778.889978][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 778.900254][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 778.916285][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 778.927536][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 778.954568][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 778.970300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 779.045280][ T4394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.188339][ T4394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.311021][T10065] mmap: syz.4.1164 (10065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 780.171418][ T4394] tipc: Disabling bearer [ 780.177812][ T4394] tipc: Left network mode [ 780.390768][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 780.398934][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 780.425991][ T9872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.112484][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 781.130940][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 781.184292][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 781.200102][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 781.215204][ T9872] device veth0_vlan entered promiscuous mode [ 781.306878][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 781.325612][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.339929][ T9872] device veth1_vlan entered promiscuous mode [ 781.460107][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 781.468810][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 781.492843][ T9872] device veth0_macvtap entered promiscuous mode [ 781.500481][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 781.517324][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 781.526610][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 781.545645][ T9872] device veth1_macvtap entered promiscuous mode [ 781.576297][ T4394] device hsr_slave_0 left promiscuous mode [ 781.583926][ T4394] device hsr_slave_1 left promiscuous mode [ 781.590546][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.599185][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.610059][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.621409][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.629373][ T4394] device bridge_slave_1 left promiscuous mode [ 781.645608][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.658146][ T4394] device bridge_slave_0 left promiscuous mode [ 781.668835][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.711002][ T4394] device veth1_macvtap left promiscuous mode [ 781.724309][ T4394] device veth0_macvtap left promiscuous mode [ 781.730603][ T4394] device veth1_vlan left promiscuous mode [ 781.740852][ T4394] device veth0_vlan left promiscuous mode [ 782.519426][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 782.575189][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 782.628387][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.684719][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.108167][ T4394] bond0 (unregistering): Released all slaves [ 783.206562][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.217645][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.228627][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.239369][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.249267][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.259931][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.269817][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.280367][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.297989][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.318826][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 783.327140][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 783.337318][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 783.352715][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.363253][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.373543][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.384783][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.395553][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.406659][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.416870][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.428970][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.461232][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.475121][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 783.484857][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 783.498730][ T9872] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.509890][ T9872] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.518959][ T9872] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.527805][ T9872] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.658931][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.692975][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.703177][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 783.734442][ T9474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.747090][ T9474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.757440][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 784.714423][T10118] set match dimension is over the limit! [ 786.246051][T10125] loop6: detected capacity change from 0 to 512 [ 786.360375][T10125] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 786.369832][T10125] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.715716][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 788.641386][T10155] loop5: detected capacity change from 0 to 256 [ 794.265866][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 794.276737][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 794.284353][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.294450][ T4280] Workqueue: hci3 hci_rx_work [ 794.299287][ T4280] Call Trace: [ 794.302639][ T4280] [ 794.305683][ T4280] dump_stack_lvl+0x188/0x24e [ 794.310502][ T4280] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 794.316236][ T4280] ? show_regs_print_info+0x12/0x12 [ 794.321529][ T4280] ? load_image+0x410/0x410 [ 794.326122][ T4280] ? sysfs_create_dir_ns+0x23f/0x290 [ 794.331473][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 794.336632][ T4280] ? __lock_acquire+0x7c40/0x7c40 [ 794.341731][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 794.346457][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 794.351702][ T4280] kobject_add_internal+0x617/0xca0 [ 794.356969][ T4280] kobject_add+0x160/0x230 [ 794.361431][ T4280] ? kobject_init+0x1c0/0x1c0 [ 794.366153][ T4280] ? __raw_spin_lock_init+0x41/0x100 [ 794.371503][ T4280] ? klist_children_get+0x50/0x50 [ 794.376669][ T4280] ? get_device_parent+0x121/0x3e0 [ 794.381841][ T4280] device_add+0x470/0x1050 [ 794.386316][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 794.391395][ T4280] le_conn_complete_evt+0xfac/0x15c0 [ 794.396742][ T4280] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 794.403041][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 794.408745][ T4280] ? mutex_unlock+0x10/0x10 [ 794.413299][ T4280] ? skb_pull_data+0xec/0x1f0 [ 794.418055][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 794.423660][ T4280] ? hci_remote_host_features_evt+0x230/0x230 [ 794.429769][ T4280] hci_event_packet+0x7b3/0x1290 [ 794.434770][ T4280] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 794.440450][ T4280] ? bis_list+0x280/0x280 [ 794.444843][ T4280] ? kcov_remote_start+0x1b1/0x7e0 [ 794.450005][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 794.455258][ T4280] hci_rx_work+0x3eb/0xd40 [ 794.459822][ T4280] ? process_one_work+0x7b4/0x1160 [ 794.465092][ T4280] process_one_work+0x8ab/0x1160 [ 794.470095][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 794.475775][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 794.480842][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 794.486434][ T4280] ? wq_worker_running+0x97/0x190 [ 794.491585][ T4280] worker_thread+0xaf5/0x12a0 [ 794.496332][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 794.502294][ T4280] kthread+0x29d/0x330 [ 794.506408][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 794.511476][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 794.516105][ T4280] ret_from_fork+0x1f/0x30 [ 794.520585][ T4280] [ 794.553011][ T4280] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 794.567717][ T4280] Bluetooth: hci3: failed to register connection device [ 797.057849][T10199] loop4: detected capacity change from 0 to 32768 [ 797.548692][T10199] XFS (loop4): Mounting V5 Filesystem [ 798.295521][T10199] XFS (loop4): log mount failed [ 799.344055][T10223] netlink: 'syz.4.1191': attribute type 12 has an invalid length. [ 800.942314][ T9159] Bluetooth: hci3: command 0x0406 tx timeout [ 804.440320][T10260] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1197'. [ 808.316021][T10283] netlink: 'syz.4.1204': attribute type 12 has an invalid length. [ 808.535436][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.571552][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.336205][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 810.480323][T10295] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.489861][T10295] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.498669][T10295] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.507490][T10295] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.554132][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 811.566691][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 811.574332][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 811.584435][ T4280] Workqueue: hci0 hci_rx_work [ 811.589206][ T4280] Call Trace: [ 811.592523][ T4280] [ 811.595495][ T4280] dump_stack_lvl+0x188/0x24e [ 811.600235][ T4280] ? show_regs_print_info+0x12/0x12 [ 811.605494][ T4280] ? load_image+0x410/0x410 [ 811.610055][ T4280] sysfs_create_dir_ns+0x26a/0x290 [ 811.615221][ T4280] ? __lock_acquire+0x7c40/0x7c40 [ 811.620339][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 811.625092][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 811.630350][ T4280] kobject_add_internal+0x617/0xca0 [ 811.635600][ T4280] kobject_add+0x160/0x230 [ 811.640155][ T4280] ? kobject_init+0x1c0/0x1c0 [ 811.644965][ T4280] ? __raw_spin_lock_init+0x41/0x100 [ 811.650303][ T4280] ? klist_children_get+0x50/0x50 [ 811.655401][ T4280] ? get_device_parent+0x121/0x3e0 [ 811.660581][ T4280] device_add+0x470/0x1050 [ 811.665061][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 811.670061][ T4280] le_conn_complete_evt+0xfac/0x15c0 [ 811.675408][ T4280] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 811.681706][ T4280] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 811.687405][ T4280] ? mutex_unlock+0x10/0x10 [ 811.691958][ T4280] ? skb_pull_data+0xec/0x1f0 [ 811.696680][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 811.702284][ T4280] ? hci_remote_host_features_evt+0x230/0x230 [ 811.708393][ T4280] hci_event_packet+0x7b3/0x1290 [ 811.713395][ T4280] ? __lock_acquire+0x7c40/0x7c40 [ 811.718473][ T4280] ? bis_list+0x280/0x280 [ 811.722854][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 811.728797][ T4280] ? kcov_remote_start+0x4b0/0x7e0 [ 811.733955][ T4280] ? do_machine_check+0x380/0x750 [ 811.739039][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 811.744294][ T4280] hci_rx_work+0x3eb/0xd40 [ 811.748768][ T4280] ? process_one_work+0x7b4/0x1160 [ 811.753946][ T4280] process_one_work+0x8ab/0x1160 [ 811.758966][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 811.764659][ T4280] ? _raw_spin_lock_irq+0xb7/0xf0 [ 811.769733][ T4280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 811.775371][ T4280] ? wq_worker_running+0x97/0x190 [ 811.780458][ T4280] worker_thread+0xaf5/0x12a0 [ 811.785202][ T4280] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 811.791162][ T4280] kthread+0x29d/0x330 [ 811.795273][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 811.800346][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 811.804988][ T4280] ret_from_fork+0x1f/0x30 [ 811.809479][ T4280] [ 811.812610][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.820598][ T9159] Bluetooth: hci5: command 0x0406 tx timeout [ 811.848674][ T4280] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 811.863660][ T4280] Bluetooth: hci0: failed to register connection device [ 811.884897][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 812.426537][T10313] loop8: detected capacity change from 0 to 8 [ 813.615264][T10319] Bluetooth: MGMT ver 1.22 [ 815.999954][T10333] netlink: 'syz.5.1214': attribute type 12 has an invalid length. [ 816.021676][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 816.517872][T10338] netlink: 'syz.4.1218': attribute type 12 has an invalid length. [ 817.243839][T10348] loop5: detected capacity change from 0 to 8 [ 817.662688][T10348] SQUASHFS error: lzo decompression failed, data probably corrupt [ 817.671548][T10348] SQUASHFS error: Failed to read block 0x91: -5 [ 817.677838][T10348] SQUASHFS error: Unable to read metadata cache entry [8f] [ 817.685086][T10348] SQUASHFS error: Unable to read inode 0x11f [ 822.268219][T10381] loop4: detected capacity change from 0 to 512 [ 823.699249][T10381] EXT4-fs: Ignoring removed oldalloc option [ 823.819465][T10381] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 824.011658][T10381] EXT4-fs (loop4): 1 truncate cleaned up [ 824.051205][T10381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 824.094559][T10393] netlink: 'syz.8.1230': attribute type 12 has an invalid length. [ 824.684239][T10397] netlink: 'syz.8.1231': attribute type 12 has an invalid length. [ 825.023804][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 830.626147][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1229'. [ 832.725550][ T26] audit: type=1326 audit(1785914672.853:11): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.4.1239" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd70e99e019 code=0x0 [ 835.810142][T10481] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1248'. [ 835.849872][T10482] loop8: detected capacity change from 0 to 128 [ 839.808453][T10504] loop6: detected capacity change from 0 to 32768 [ 840.046674][T10504] XFS (loop6): Mounting V5 Filesystem [ 840.067983][T10497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 840.075930][T10497] IPv6: NLM_F_CREATE should be set when creating new route [ 840.083233][T10497] IPv6: NLM_F_CREATE should be set when creating new route [ 840.090446][T10497] IPv6: NLM_F_CREATE should be set when creating new route [ 840.170722][T10504] XFS (loop6): Ending clean mount [ 840.182984][T10504] XFS (loop6): Quotacheck needed: Please wait. [ 840.350325][T10504] XFS (loop6): Quotacheck: Done. [ 841.082361][ T6271] XFS (loop6): Unmounting Filesystem [ 841.680738][T10530] loop7: detected capacity change from 0 to 1024 [ 841.771339][T10530] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 844.010375][T10530] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 845.208769][T10556] loop5: detected capacity change from 0 to 256 [ 845.280071][T10557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1259'. [ 846.392288][ T9313] EXT4-fs (loop7): unmounting filesystem. [ 846.463192][T10563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1261'. [ 848.280702][T10576] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1262'. [ 852.992464][T10590] loop5: detected capacity change from 0 to 4096 [ 853.337597][T10590] ext4: Unknown parameter 'fsname' [ 853.981779][ T8495] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 854.438321][T10607] loop7: detected capacity change from 0 to 128 [ 854.457566][T10614] syz.6.1272 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 854.469485][T10614] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 861.947923][T10660] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1284'. [ 862.913441][T10666] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1286'. [ 863.400347][T10665] loop6: detected capacity change from 0 to 256 [ 863.504941][T10665] exfat: Deprecated parameter 'utf8' [ 863.513576][T10668] loop5: detected capacity change from 0 to 128 [ 863.604319][T10668] EXT4-fs: Ignoring removed orlov option [ 863.685105][T10665] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 863.712309][T10668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 863.761237][T10668] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 864.003864][T10677] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1288'. [ 864.951470][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 865.977669][T10688] loop7: detected capacity change from 0 to 4096 [ 866.071604][T10693] zram0: detected capacity change from 0 to 8 [ 867.501240][T10696] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 867.561493][T10696] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 869.091473][ T4280] Bluetooth: hci0: command 0x0405 tx timeout [ 869.396618][T10696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 869.442694][T10696] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 869.571217][ T4275] Bluetooth: hci3: command 0x0c1a tx timeout [ 869.571260][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 870.173579][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.180109][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.392086][T10696] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 870.424573][T10696] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 870.451800][T10696] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 870.706312][T10726] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1298'. [ 871.371285][T10696] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 871.419129][T10696] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 871.451418][T10696] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 871.651224][ T9159] Bluetooth: hci3: command 0x0406 tx timeout [ 872.058105][T10736] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1299'. [ 872.317084][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 872.424079][T10696] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 872.451738][ T9159] Bluetooth: hci5: command 0x0c1a tx timeout [ 873.411204][ T9159] Bluetooth: hci0: command 0x0c1a tx timeout [ 875.071858][ T9159] Bluetooth: hci5: command 0x0406 tx timeout [ 875.491183][ T9159] Bluetooth: hci0: command 0x0406 tx timeout [ 877.595826][ T9159] Bluetooth: hci0: command 0x0406 tx timeout [ 877.813637][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1309'. [ 879.034565][T10785] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1312'. [ 880.177273][T10799] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1314'. [ 883.388544][ T4275] Bluetooth: hci0: command 0x0405 tx timeout [ 883.461855][T10813] No such timeout policy "syz1" [ 885.832298][T10827] gfs2: gfs2 mount does not exist [ 887.555153][T10846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1324'. [ 887.582040][T10842] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1322'. [ 894.424206][ T4275] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 896.671181][T10907] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1336'. [ 897.539893][T10915] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 906.123763][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1351'. [ 906.857834][T10964] loop5: detected capacity change from 0 to 1024 [ 906.888827][T10964] EXT4-fs: Invalid want_extra_isize 7 [ 910.003689][T10986] No such timeout policy "syz1" [ 912.339591][T11004] loop4: detected capacity change from 0 to 512 [ 914.196924][T11004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 914.765740][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 915.061129][T11016] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1362'. [ 915.742633][ T9159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 915.761270][ T9159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 915.771599][ T9159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 915.784593][ T9159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 915.803311][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 915.815863][ T9159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 916.153466][ T47] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.441595][ T47] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.683366][T11032] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 917.417784][T11032] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 917.912817][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 918.011050][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1359'. [ 918.020625][T11042] openvswitch: netlink: Flow key attr not present in new flow. [ 918.718205][ T47] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.153685][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 921.199019][ T47] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.203801][ T4275] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 922.631797][T11071] input: syz1 as /devices/virtual/input/input13 [ 923.172060][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 923.454217][T11013] chnl_net:caif_netlink_parms(): no params data found [ 925.253463][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 925.475371][T11088] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 925.776993][T11087] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 925.785627][T11087] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 925.794441][T11087] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 926.423056][T11013] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.522716][T11013] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.556873][T11013] device bridge_slave_0 entered promiscuous mode [ 926.612586][T11013] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.620056][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.636404][T11013] device bridge_slave_1 entered promiscuous mode [ 926.792410][T11013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.133168][T11013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.217606][T11114] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1373'. [ 928.667010][T11122] loop4: detected capacity change from 0 to 512 [ 929.073300][T11122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 929.135939][T11122] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.415427][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.421878][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.252406][T11013] team0: Port device team_slave_0 added [ 932.278444][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1390'. [ 932.359751][T11013] team0: Port device team_slave_1 added [ 934.664009][T11013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.799873][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.146337][T11013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.261884][T11013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.268918][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.295384][T11013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.620077][T11168] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1395'. [ 936.272598][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 936.280222][T11162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 936.313453][T11162] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 936.352840][T11162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 936.381532][ T4275] Bluetooth: hci1: command 0x0405 tx timeout [ 936.414682][T11162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 936.432179][T11162] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 936.498515][T11162] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 936.533607][T11162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 936.541348][T11162] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 936.583809][T11162] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 936.604383][T11013] device hsr_slave_0 entered promiscuous mode [ 936.637178][T11013] device hsr_slave_1 entered promiscuous mode [ 936.645164][T11013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.654851][T11013] Cannot create hsr debugfs directory [ 936.686653][ T47] device hsr_slave_0 left promiscuous mode [ 936.751490][ T47] device hsr_slave_1 left promiscuous mode [ 936.788227][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.816852][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.870389][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.166295][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.763177][ T47] device bridge_slave_1 left promiscuous mode [ 937.769503][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.839467][ T47] device bridge_slave_0 left promiscuous mode [ 938.011272][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.870702][ T9159] Bluetooth: hci0: command 0x0c1a tx timeout [ 938.871550][ T4275] Bluetooth: hci1: command 0x0c1a tx timeout [ 938.877235][ T9159] Bluetooth: hci3: command 0x0c1a tx timeout [ 938.890637][ T9159] Bluetooth: hci2: command 0x0c1a tx timeout [ 938.999420][T11197] program syz.6.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 939.450535][T11200] ip6t_srh: unknown srh match flags FF3F [ 940.027574][ T47] device veth1_macvtap left promiscuous mode [ 941.329707][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 941.329762][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 941.329816][T11195] Bluetooth: hci1: command 0x0406 tx timeout [ 941.425473][ T47] device veth0_macvtap left promiscuous mode [ 941.566193][ T47] device veth1_vlan left promiscuous mode [ 941.679644][ T47] device veth0_vlan left promiscuous mode [ 942.525617][T11197] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 943.209224][T11214] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1404'. [ 946.205748][T11249] loop5: detected capacity change from 0 to 512 [ 946.318463][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.338722][T11249] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 946.562093][T11249] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 946.843397][T11249] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 946.890123][T11249] Quota error (device loop5): write_blk: dquota write failed [ 946.901184][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.910110][T11249] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 946.921222][T11249] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1414: Failed to acquire dquot type 0 [ 946.969071][T11249] EXT4-fs (loop5): 1 truncate cleaned up [ 946.976778][T11249] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 948.035317][ T5008] EXT4-fs (loop5): unmounting filesystem. [ 948.250125][T11265] libceph: secret too big 32 [ 948.449289][T11269] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1416'. [ 949.150654][ T47] bond0 (unregistering): Released all slaves [ 949.497474][T11262] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1417'. [ 951.180509][T11289] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 952.237850][T11292] loop6: detected capacity change from 0 to 128 [ 953.775451][T11307] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1427'. [ 953.897523][T11013] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 954.343382][T11013] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 955.346750][T11013] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 955.397753][T11013] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 955.858088][T11328] loop6: detected capacity change from 0 to 1024 [ 955.998886][T11328] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 956.019962][T11328] EXT4-fs (loop6): invalid journal inode [ 956.026220][T11328] EXT4-fs (loop6): can't get journal size [ 956.074536][T11326] nvmet: adding nsid 1 to subsystem testnqn [ 956.170334][T11328] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #2: comm syz.6.1430: blocks 48-48 from inode overlap system zone [ 956.187317][T11328] EXT4-fs (loop6): failed to initialize system zone (-117) [ 956.195294][T11328] EXT4-fs (loop6): mount failed [ 956.565146][T11336] netlink: 'syz.8.1433': attribute type 12 has an invalid length. [ 956.845579][T11338] futex_wake_op: syz.5.1432 tries to shift op by 144; fix this program [ 956.862116][T11338] loop5: detected capacity change from 0 to 256 [ 957.366255][T11338] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 957.433033][ T26] audit: type=1800 audit(1785914798.483:12): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1432" name="file1" dev="loop5" ino=1048685 res=0 errno=0 [ 957.548514][T11013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.717570][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 957.736109][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 957.920146][T11013] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.679009][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 958.711712][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 958.857637][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.864897][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.960110][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 959.147754][T11340] netlink: 'syz.4.1435': attribute type 2 has an invalid length. [ 959.155791][T11340] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1435'. [ 959.244268][T11359] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1438'. [ 959.930731][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 960.110529][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 960.120838][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.128067][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.184806][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 961.181500][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 961.190643][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 961.252180][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 961.310777][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 961.339753][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 961.385386][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 961.424849][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 961.497102][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 961.506477][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 961.523678][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 961.823694][T11013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 962.905473][T11382] loop4: detected capacity change from 0 to 512 [ 963.083200][T11382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 963.092764][T11382] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.739748][T11389] netlink: 'syz.5.1445': attribute type 12 has an invalid length. [ 963.763474][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 964.335007][T11404] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1448'. [ 965.225845][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1446'. [ 970.954238][T11453] libceph: secret too big 32 [ 971.124573][T11443] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1455'. [ 971.207449][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 971.235168][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 971.252561][ T9159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 971.260569][ T9159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 971.272577][ T9159] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 971.283537][ T9159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 971.412835][T11461] netlink: 'syz.5.1457': attribute type 12 has an invalid length. [ 971.846642][T11466] loop4: detected capacity change from 0 to 4096 [ 973.734884][T11195] Bluetooth: hci1: command 0x0409 tx timeout [ 973.971888][T11464] netlink: 'syz.6.1458': attribute type 2 has an invalid length. [ 974.932965][T11464] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1458'. [ 975.811276][T11195] Bluetooth: hci1: command 0x041b tx timeout [ 977.546406][T11503] input: syz1 as /devices/virtual/input/input14 [ 977.891470][T11195] Bluetooth: hci1: command 0x040f tx timeout [ 978.496780][T11456] chnl_net:caif_netlink_parms(): no params data found [ 978.744533][T11512] 9pnet_fd: Insufficient options for proto=fd [ 979.739625][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.762232][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.847220][T11456] device bridge_slave_0 entered promiscuous mode [ 979.856298][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.864485][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.873455][T11456] device bridge_slave_1 entered promiscuous mode [ 979.897810][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.973394][T11195] Bluetooth: hci1: command 0x0419 tx timeout [ 981.955509][T11535] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1474'. [ 984.084092][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.063992][T11557] loop8: detected capacity change from 0 to 1764 [ 986.167156][T11456] team0: Port device team_slave_0 added [ 986.175715][T11020] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 986.353115][T11560] netlink: 'syz.6.1480': attribute type 12 has an invalid length. [ 986.401714][T11456] team0: Port device team_slave_1 added [ 987.203976][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.279093][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.361022][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.614650][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.697205][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.695642][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.077351][T11456] device hsr_slave_0 entered promiscuous mode [ 989.151849][T11456] device hsr_slave_1 entered promiscuous mode [ 990.717401][T11456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.725431][T11456] Cannot create hsr debugfs directory [ 990.803473][T11598] loop6: detected capacity change from 0 to 1024 [ 990.868932][T11598] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 991.002039][T11598] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 991.482740][ T4687] device hsr_slave_0 left promiscuous mode [ 991.503924][ T4687] device hsr_slave_1 left promiscuous mode [ 991.606026][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.733825][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.774971][ T4687] device bridge_slave_1 left promiscuous mode [ 991.830915][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.868164][ T4687] device bridge_slave_0 left promiscuous mode [ 991.888155][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.855415][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.861951][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.705489][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 994.974587][T11629] program syz.5.1489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.310270][T11629] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 996.339378][T11630] Process accounting resumed [ 996.461373][T11636] loop5: detected capacity change from 0 to 128 [ 997.463625][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.473261][T11644] FAT-fs (loop5): Filesystem has been set read-only [ 997.482633][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.491322][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.499807][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.508399][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.517192][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.525735][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.534265][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.542871][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.551759][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.560203][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.568925][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.577539][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.586093][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.594608][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.603164][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.611691][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.620141][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.628893][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.637464][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.646034][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.654580][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.663134][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.671801][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.680269][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.688764][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.697253][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.705837][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.714314][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.722770][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.731300][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.739755][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.748235][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.756720][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.765193][T11644] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 997.775186][ T26] audit: type=1800 audit(1785914838.833:13): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1497" name="file1" dev="loop5" ino=1048686 res=0 errno=0 [ 1000.655703][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 1000.775855][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 1000.852503][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.926662][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.269007][T11660] loop6: detected capacity change from 0 to 512 [ 1001.281649][T11660] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1001.323786][T11660] EXT4-fs (loop6): 1 truncate cleaned up [ 1001.329527][T11660] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1001.560753][ T4687] bond0 (unregistering): Released all slaves [ 1002.373234][ T6271] EXT4-fs (loop6): unmounting filesystem. [ 1007.190031][ C1] ------------[ cut here ]------------ [ 1007.196308][ C1] WARNING: CPU: 1 PID: 11729 at net/mac80211/tx.c:4961 __ieee80211_beacon_get+0x1141/0x1520 [ 1007.206769][ C1] Modules linked in: [ 1007.210775][ C1] CPU: 1 PID: 11729 Comm: syz.8.1512 Not tainted syzkaller #0 [ 1007.218418][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1007.228733][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1007.235245][ C1] Code: f7 4c 89 ef e8 80 75 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 db d0 ce f7 0f 0b e9 61 f8 ff ff e8 cf d0 ce f7 <0f> 0b e9 85 fb ff ff e8 c3 d0 ce f7 48 c7 c7 a0 fc fb 8d 4c 89 e6 [ 1007.255325][ C1] RSP: 0018:ffffc900001e0a48 EFLAGS: 00010246 [ 1007.261661][ C1] RAX: ffffffff89b35d51 RBX: dffffc0000000000 RCX: ffff88801e70da00 [ 1007.269804][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1007.277970][ C1] RBP: 0000000000000000 R08: ffff88801e70da00 R09: 0000000000000003 [ 1007.286129][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88801f68a228 [ 1007.294304][ C1] R13: ffff88807d5b7424 R14: ffff88801f68a760 R15: ffff88807d5b7400 [ 1007.302490][ C1] FS: 00007fe3e7e8d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1007.311654][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1007.318373][ C1] CR2: 0000200000001000 CR3: 00000000285f2000 CR4: 00000000003506e0 [ 1007.326568][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1007.334725][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1007.342885][ C1] Call Trace: [ 1007.346256][ C1] [ 1007.349200][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1007.354956][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1007.360571][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1007.366299][ C1] __iterate_interfaces+0x225/0x4c0 [ 1007.371670][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1007.378059][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1007.385492][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1007.391903][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1007.399103][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1007.404498][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1007.409843][ C1] ? hw_scan_work+0xf00/0xf00 [ 1007.414711][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1007.419968][ C1] hrtimer_run_softirq+0x173/0x290 [ 1007.425254][ C1] handle_softirqs+0x291/0x910 [ 1007.430163][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1007.435181][ C1] ? do_softirq+0x210/0x210 [ 1007.439816][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1007.445118][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1007.450475][ C1] __irq_exit_rcu+0x13b/0x230 [ 1007.455289][ C1] ? irq_exit_rcu+0x20/0x20 [ 1007.459966][ C1] irq_exit_rcu+0x5/0x20 [ 1007.464342][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1007.470121][ C1] [ 1007.473169][ C1] [ 1007.476185][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1007.482332][ C1] RIP: 0010:unix_dgram_sendmsg+0xa7e/0x16f0 [ 1007.488399][ C1] Code: 24 58 48 8b 44 24 10 44 0f b7 30 bf 05 00 00 00 44 89 f6 e8 04 8b 94 f8 41 83 fe 05 75 07 e8 19 88 94 f8 eb 6c 4c 8b 74 24 70 <4c> 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bc b4 e5 f8 [ 1007.508386][ C1] RSP: 0018:ffffc90004187740 EFLAGS: 00000293 [ 1007.514631][ C1] RAX: ffffffff88eda5fc RBX: 1ffff1100e5f5a8c RCX: 0000000000000002 [ 1007.522805][ C1] RDX: ffff88801e70da00 RSI: 0000000000000002 RDI: 0000000000000005 [ 1007.530987][ C1] RBP: ffffc900041878f0 R08: ffff888072fad067 R09: 1ffff1100e5f5a0c [ 1007.539161][ C1] R10: dffffc0000000000 R11: ffffed100e5f5a0d R12: dffffc0000000000 [ 1007.547331][ C1] R13: ffff888072fab000 R14: ffff888072fab470 R15: 1ffff92000830f04 [ 1007.555522][ C1] ? unix_dgram_sendmsg+0xa6c/0x16f0 [ 1007.561015][ C1] ? unix_dgram_poll+0x680/0x680 [ 1007.566106][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1007.572791][ C1] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1007.578580][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1007.584062][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 1007.589700][ C1] ? unix_dgram_poll+0x680/0x680 [ 1007.594796][ C1] ____sys_sendmsg+0x5ed/0x9a0 [ 1007.599784][ C1] ? __might_fault+0xa6/0x120 [ 1007.604731][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1007.609913][ C1] ? __import_iovec+0x306/0x510 [ 1007.615015][ C1] ? import_iovec+0x6f/0xa0 [ 1007.619669][ C1] ___sys_sendmsg+0x2a2/0x360 [ 1007.624519][ C1] ? __sched_text_start+0x8/0x8 [ 1007.629689][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 1007.634701][ C1] ? __might_fault+0xc2/0x120 [ 1007.639532][ C1] ? __might_fault+0xa6/0x120 [ 1007.644371][ C1] __sys_sendmmsg+0x2c3/0x510 [ 1007.649209][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 1007.654412][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1007.660586][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1007.666753][ C1] ? lock_chain_count+0x20/0x20 [ 1007.671766][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 1007.676762][ C1] do_syscall_64+0x4c/0xa0 [ 1007.681330][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1007.686257][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1007.691125][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.697192][ C1] RIP: 0033:0x7fe3e6f9e019 [ 1007.701782][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.721789][ C1] RSP: 002b:00007fe3e7e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1007.730382][ C1] RAX: ffffffffffffffda RBX: 00007fe3e7225fa0 RCX: 00007fe3e6f9e019 [ 1007.738571][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 1007.746726][ C1] RBP: 00007fe3e703500c R08: 0000000000000000 R09: 0000000000000000 [ 1007.754888][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.763043][ C1] R13: 00007fe3e7226038 R14: 00007fe3e7225fa0 R15: 00007ffcb33e21d8 [ 1007.771238][ C1] [ 1007.774352][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1007.781654][ C1] CPU: 1 PID: 11729 Comm: syz.8.1512 Not tainted syzkaller #0 [ 1007.789215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1007.799323][ C1] Call Trace: [ 1007.802648][ C1] [ 1007.805537][ C1] dump_stack_lvl+0x188/0x24e [ 1007.810260][ C1] ? memcpy+0x3c/0x60 [ 1007.814353][ C1] ? show_regs_print_info+0x12/0x12 [ 1007.819595][ C1] ? load_image+0x410/0x410 [ 1007.824151][ C1] panic+0x2d3/0x710 [ 1007.828171][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1007.832735][ C1] __warn+0x2f8/0x4f0 [ 1007.836783][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1007.842546][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1007.848302][ C1] report_bug+0x2ba/0x4f0 [ 1007.852678][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1007.858442][ C1] handle_bug+0x3a/0x70 [ 1007.862641][ C1] exc_invalid_op+0x16/0x40 [ 1007.867202][ C1] asm_exc_invalid_op+0x16/0x20 [ 1007.872088][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1007.878450][ C1] Code: f7 4c 89 ef e8 80 75 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 db d0 ce f7 0f 0b e9 61 f8 ff ff e8 cf d0 ce f7 <0f> 0b e9 85 fb ff ff e8 c3 d0 ce f7 48 c7 c7 a0 fc fb 8d 4c 89 e6 [ 1007.898101][ C1] RSP: 0018:ffffc900001e0a48 EFLAGS: 00010246 [ 1007.904203][ C1] RAX: ffffffff89b35d51 RBX: dffffc0000000000 RCX: ffff88801e70da00 [ 1007.912212][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1007.920211][ C1] RBP: 0000000000000000 R08: ffff88801e70da00 R09: 0000000000000003 [ 1007.928211][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88801f68a228 [ 1007.936212][ C1] R13: ffff88807d5b7424 R14: ffff88801f68a760 R15: ffff88807d5b7400 [ 1007.944228][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1007.949997][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1007.955753][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1007.961341][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1007.966839][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1007.972425][ C1] __iterate_interfaces+0x225/0x4c0 [ 1007.977661][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1007.984000][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1007.991243][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1007.997518][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1008.004586][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1008.009832][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1008.015079][ C1] ? hw_scan_work+0xf00/0xf00 [ 1008.019778][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1008.024907][ C1] hrtimer_run_softirq+0x173/0x290 [ 1008.030026][ C1] handle_softirqs+0x291/0x910 [ 1008.034795][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1008.039651][ C1] ? do_softirq+0x210/0x210 [ 1008.044164][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1008.049278][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1008.054484][ C1] __irq_exit_rcu+0x13b/0x230 [ 1008.059163][ C1] ? irq_exit_rcu+0x20/0x20 [ 1008.063701][ C1] irq_exit_rcu+0x5/0x20 [ 1008.067943][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1008.073579][ C1] [ 1008.076514][ C1] [ 1008.079449][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1008.085443][ C1] RIP: 0010:unix_dgram_sendmsg+0xa7e/0x16f0 [ 1008.091347][ C1] Code: 24 58 48 8b 44 24 10 44 0f b7 30 bf 05 00 00 00 44 89 f6 e8 04 8b 94 f8 41 83 fe 05 75 07 e8 19 88 94 f8 eb 6c 4c 8b 74 24 70 <4c> 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bc b4 e5 f8 [ 1008.110971][ C1] RSP: 0018:ffffc90004187740 EFLAGS: 00000293 [ 1008.117065][ C1] RAX: ffffffff88eda5fc RBX: 1ffff1100e5f5a8c RCX: 0000000000000002 [ 1008.125041][ C1] RDX: ffff88801e70da00 RSI: 0000000000000002 RDI: 0000000000000005 [ 1008.133014][ C1] RBP: ffffc900041878f0 R08: ffff888072fad067 R09: 1ffff1100e5f5a0c [ 1008.141003][ C1] R10: dffffc0000000000 R11: ffffed100e5f5a0d R12: dffffc0000000000 [ 1008.148989][ C1] R13: ffff888072fab000 R14: ffff888072fab470 R15: 1ffff92000830f04 [ 1008.156971][ C1] ? unix_dgram_sendmsg+0xa6c/0x16f0 [ 1008.162286][ C1] ? unix_dgram_poll+0x680/0x680 [ 1008.167231][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1008.173654][ C1] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1008.179212][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1008.184498][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 1008.189960][ C1] ? unix_dgram_poll+0x680/0x680 [ 1008.194906][ C1] ____sys_sendmsg+0x5ed/0x9a0 [ 1008.199680][ C1] ? __might_fault+0xa6/0x120 [ 1008.204364][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1008.209392][ C1] ? __import_iovec+0x306/0x510 [ 1008.214259][ C1] ? import_iovec+0x6f/0xa0 [ 1008.218770][ C1] ___sys_sendmsg+0x2a2/0x360 [ 1008.223460][ C1] ? __sched_text_start+0x8/0x8 [ 1008.228320][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 1008.233123][ C1] ? __might_fault+0xc2/0x120 [ 1008.237805][ C1] ? __might_fault+0xa6/0x120 [ 1008.242486][ C1] __sys_sendmmsg+0x2c3/0x510 [ 1008.247189][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 1008.252233][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1008.258157][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1008.264149][ C1] ? lock_chain_count+0x20/0x20 [ 1008.269013][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 1008.273874][ C1] do_syscall_64+0x4c/0xa0 [ 1008.278296][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1008.282982][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1008.287672][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1008.293569][ C1] RIP: 0033:0x7fe3e6f9e019 [ 1008.297988][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.317595][ C1] RSP: 002b:00007fe3e7e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1008.326012][ C1] RAX: ffffffffffffffda RBX: 00007fe3e7225fa0 RCX: 00007fe3e6f9e019 [ 1008.333985][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 1008.341955][ C1] RBP: 00007fe3e703500c R08: 0000000000000000 R09: 0000000000000000 [ 1008.349943][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.357916][ C1] R13: 00007fe3e7226038 R14: 00007fe3e7225fa0 R15: 00007ffcb33e21d8 [ 1008.365901][ C1] [ 1008.369521][ C1] Kernel Offset: disabled [ 1008.373919][ C1] Rebooting in 86400 seconds..