last executing test programs: 7m10.34057788s ago: executing program 1 (id=50): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x4) vmsplice(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 7m9.713008415s ago: executing program 1 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/20, 0x14}, {&(0x7f0000000780)=""/231, 0xe7}], 0x2, 0x81000005, 0x10000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 7m8.653544892s ago: executing program 1 (id=61): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$kcm(0x21, 0x7, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x5, &(0x7f0000000540)={0x0, 0x37, 0x2, @tid=r1}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1400b04, 0x0, 0x2, 0x235}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) signalfd4(r0, 0x0, 0x0, 0x180000) socket$packet(0x11, 0x2, 0x300) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r9, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 7m8.076519006s ago: executing program 1 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 7m7.773935944s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x500) 7m7.447683632s ago: executing program 1 (id=69): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000380)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7m3.695814317s ago: executing program 2 (id=83): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$kcm(0x21, 0x7, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x5, &(0x7f0000000540)={0x0, 0x37, 0x2, @tid=r1}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1400b04, 0x0, 0x2, 0x235}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) signalfd4(r0, 0x0, 0x0, 0x180000) socket$packet(0x11, 0x2, 0x300) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 7m3.050865463s ago: executing program 2 (id=85): syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 7m2.653343033s ago: executing program 2 (id=88): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r0) 7m1.738260636s ago: executing program 2 (id=90): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r2, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x800000000fffa, 0x0) 7m1.226360069s ago: executing program 2 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x500) 7m0.546323176s ago: executing program 2 (id=95): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x10000, 0x1, 0x135}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x11) ioctl$TCSETS(r2, 0x5402, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x2b}, 0x8) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) readahead(0xffffffffffffffff, 0x8, 0x1) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6m52.160205757s ago: executing program 32 (id=69): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000380)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m45.384982267s ago: executing program 33 (id=95): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x10000, 0x1, 0x135}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x11) ioctl$TCSETS(r2, 0x5402, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x2b}, 0x8) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) readahead(0xffffffffffffffff, 0x8, 0x1) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6m11.779172793s ago: executing program 4 (id=243): socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 6m10.828790427s ago: executing program 4 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, 0x0, &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000003300)={0x4, 0x5, 0x1}) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xfffffcfc}, {0x4, @none, "40fef9efea518310c08b43e129089545c3e0aa1efb7d8b596ca666fcc6708b522b3c9119a043e367cc516feeb5111c81ed0ec0d07a09fa4a87c8864243feafdda0b1cc5a90c30c418c6efba5a292260168aed3433e5d6ab31ea56a25d4128d6d5f655c1cfd6eb54de914bda77d156fdcc5af2ea3aba9931216ff400a2413fe2fecb6705a038be6cdb6b05fb299a8616745294ce08982b15dc949d9665a4dda0a1ab9d0a9c2b723682bfa0c4f45d91aab4187fa00169f3289dc02a678a1ab6ae10b3240209aa5fc1706f8d7963e878950f20ad175cae28a0081b981924902ac89ced3d6493f0bac5f5a20b640fd2e09d1368a9b37cf451e1f"}}}, 0x102) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'veth0\x00', 0x200}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, 0x0, 0x0) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 6m9.734246475s ago: executing program 4 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, 0x0, &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000003300)={0x4, 0x5, 0x1}) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xfffffcfc}, {0x4, @none, "40fef9efea518310c08b43e129089545c3e0aa1efb7d8b596ca666fcc6708b522b3c9119a043e367cc516feeb5111c81ed0ec0d07a09fa4a87c8864243feafdda0b1cc5a90c30c418c6efba5a292260168aed3433e5d6ab31ea56a25d4128d6d5f655c1cfd6eb54de914bda77d156fdcc5af2ea3aba9931216ff400a2413fe2fecb6705a038be6cdb6b05fb299a8616745294ce08982b15dc949d9665a4dda0a1ab9d0a9c2b723682bfa0c4f45d91aab4187fa00169f3289dc02a678a1ab6ae10b3240209aa5fc1706f8d7963e878950f20ad175cae28a0081b981924902ac89ced3d6493f0bac5f5a20b640fd2e09d1368a9b37cf451e1f"}}}, 0x102) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'veth0\x00', 0x200}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000007c414a23f094eebe2508000300", @ANYRES32=r9, @ANYBLOB="24005a80"], 0x40}}, 0x0) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 6m8.596639554s ago: executing program 4 (id=252): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 6m7.906004451s ago: executing program 4 (id=258): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f00000009c0)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x57d, &(0x7f0000000440)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 6m6.77006736s ago: executing program 4 (id=264): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d", 0xd2}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2", 0x6d}, {&(0x7f0000000880)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466", 0x3c}], 0x4}}], 0x1, 0x4000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x580, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x1, 0x1a, 0x5, 0xcc6, 0x10001, 0x8, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0x2}, 0x845, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x7, 0x1, 0x3, 0x871}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0xf, 0x7, 0x3, 0x4, 0xff, 0x4}}]}}, @c_cbq={{0x8}, {0x8c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_RATE={0x10, 0x5, {0x16, 0x0, 0x9, 0x2, 0x90e5, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x8}, 0xff, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5e, 0x0, 0x2, 0xfc01, 0x4, 0xfff}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xd}, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x1000, 0x4, 0x2, 0x3}}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x580}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m0.40904045s ago: executing program 0 (id=289): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 6m0.304897664s ago: executing program 0 (id=290): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x3cd8a7582a2493f1, 0xffffffffffffffff, 0xa3418000) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x1000c01, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x2, 0x231, &(0x7f0000000240)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0xc2) 6m0.02628794s ago: executing program 0 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x8) 5m58.706197394s ago: executing program 0 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 5m58.431864581s ago: executing program 0 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x470bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xffe2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x40}}, 0x48890) 5m57.806175656s ago: executing program 0 (id=297): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5m57.220551702s ago: executing program 34 (id=297): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5m51.528440275s ago: executing program 35 (id=264): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d", 0xd2}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2", 0x6d}, {&(0x7f0000000880)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466", 0x3c}], 0x4}}], 0x1, 0x4000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x580, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x1, 0x1a, 0x5, 0xcc6, 0x10001, 0x8, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0x2}, 0x845, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x7, 0x1, 0x3, 0x871}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0xf, 0x7, 0x3, 0x4, 0xff, 0x4}}]}}, @c_cbq={{0x8}, {0x8c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_RATE={0x10, 0x5, {0x16, 0x0, 0x9, 0x2, 0x90e5, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x8}, 0xff, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5e, 0x0, 0x2, 0xfc01, 0x4, 0xfff}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xd}, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x1000, 0x4, 0x2, 0x3}}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x580}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 26.138070489s ago: executing program 5 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f00000004c0)="04", 0x1, 0x51, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000040)) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) 23.952383983s ago: executing program 5 (id=966): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x126}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, 0x0, 0x20000011) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r4 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040), 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 17.600397234s ago: executing program 7 (id=977): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) 17.599898574s ago: executing program 3 (id=978): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) pipe(&(0x7f0000000040)) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 17.37295566s ago: executing program 5 (id=980): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000400), 0x4) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x6, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x0, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0x7, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x220100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10004, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x71, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14) 17.173010745s ago: executing program 3 (id=981): shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000000c0)=""/173) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0xffffffffffffff9e) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) 16.002341975s ago: executing program 7 (id=982): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabb7fc9bb68d1df88a82b008100190008004ebd02f900680000082f9078ac1414bbac1414bb868700000000020f1ad9a4cd3bdbed2faeb6ca28ae0005d46a11634e2c62aedc01037b07101f3462d0fcfe0f647f6c28f4d157000da3e23df9148913333cd499051188f763d72d71cddf89e9be603984f006102784755e41ecd35e59b6d313b83e060b25974a58669da2a4dd0612d2d2d1fb3c6dd4e8eb9ff1ef232c6e64020f3fa96b73c2e7a272a2a3fe3dd044183430000000050000000600000005000000030000000344447bb1e00000010000000be000000200008ad86401010000000000e000000200000fffac141442000000066401010000000004ac1414aa00000008ffffffff0000000c000c21880b00fa00009b2047b600aa02605ba2d4d43ad536c3ead7ecc4c480adbcded174c7e91ced0004c8936012c776402e558872da2b52513290220f56811c8f0d6c4fe271892546669ae20a60d7fe38ac933428f50c85503e657d3ca40dcafb3bfbb37423ae8ffdc4ea9f64a6594bf2c3f7b76c81b92525c50e59300aa2ab958d6b1ffd656b7dd1eebbfc6441b800e7a0377b8fafcd2c7cc5cb8674aac57676cc96cabf92d356c8ed183430e3698919935602bf2ad8e0e85cf6e40a86319fae1029657f6ffd4a8ce88980d3d9daef15a657b15de657d35463966a87f5ca546f9c070075761f0808cdf8eaa9dc067e9a2b30c4f0a3984999a8ed973c94c680f20147040008000001f03291972cf310546effe1f556d9d152d80955de9d24d23fb9bfa475a0e616af1f1f9b6cd0732715dc32d1d89417bd000086dde044262c7deb71f3ad2075f421a376502d21fd380f95c20320016eeb637396877d86bdbfa381a12be1f2a916d96a47f188305bbc11e07e3f513e8e101d800aa43d698e1ddcd56577d52b69"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x126}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, 0x0, 0x20000011) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r4 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040), 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 14.966271611s ago: executing program 3 (id=983): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x18b302) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000002c0)=0xb700) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14.886331083s ago: executing program 5 (id=984): syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, &(0x7f0000000080), 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r2, &(0x7f0000000140)=""/46, 0x2e) getdents64(r2, 0xfffffffffffffffe, 0x29) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x9b) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) socket$l2tp6(0xa, 0x2, 0x73) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="79a9"], 0x0) 13.881968189s ago: executing program 7 (id=986): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r3, 0x0, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 13.238204275s ago: executing program 3 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0x0) sendfile(r7, r7, 0x0, 0x9) 10.798842817s ago: executing program 7 (id=988): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x240c408c}, 0xc008004) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000003c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x6e1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700)={0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, r4}, &(0x7f0000000cc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1ad, 0x40000, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a9b, 0x0, 0x20002, 0x226}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9874, 0x0, 0x0, 0x80000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2441}}], 0x1, &(0x7f0000000900)={0x2e, 0x4, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) r11 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r11, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r13, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x19e}) preadv(r12, &(0x7f000000e2c0)=[{&(0x7f000000bf80)=""/147, 0x93}], 0x1, 0xf, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000440)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r15, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r12, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e22, 0x7, @remote, 0x9bce}, r14}}, 0x38) write$FUSE_NOTIFY_INVAL_INODE(r11, 0x0, 0x0) syz_fuse_handle_req(r11, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0x0, 0x7, {0x0, 0x0, 0x5, 0x0, 0xd5a6, 0x9, 0x0, 0xfffffffd, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.783359677s ago: executing program 3 (id=989): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = io_uring_setup(0x423d, &(0x7f00000000c0)={0x0, 0x8c6c, 0x1040, 0xffffffff, 0x20161}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0xb, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x4b82, 0xa, 0x2, 0x7}]}) close(0x3) r5 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) close(0x3) socket(0x80000000000000a, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x1, 0x40], 0x2) 10.549862393s ago: executing program 5 (id=991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000680)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x68) landlock_restrict_self(r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r6, &(0x7f0000000000)='./file0\x00', 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xffffffffffffffff) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r8, r8, 0x0, 0x8) 10.381404817s ago: executing program 7 (id=992): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000020303000000369ede16464307d0a14c30a55bf3afe600"/36], 0x14}}, 0x20040000) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r6 = syz_clone(0x10800100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4000000000, 0x4e8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r8, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") close(0x3) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f00000000c0)={0xc, 0x1, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) 9.126633239s ago: executing program 6 (id=993): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r6, 0x0, &(0x7f00002ce000/0x1000)=nil, 0x1000, 0x1020800}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 6.202057853s ago: executing program 7 (id=994): r0 = getpid() openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$invalidate(0x15, r6) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x1, 0xf84a, r0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.150080854s ago: executing program 6 (id=995): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0xffff, 0x4, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(0x0, 0x201, 0x402) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, 0x0, &(0x7f00000001c0)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r6, 0x1}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.91940077s ago: executing program 6 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_socket_connect_nvme_tcp() r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@fallback, 0xffffffffffffffff, 0x1b, 0x8}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)=""/12, 0xa}, {0x0, 0x11}, {&(0x7f0000000040)=""/76}], 0x2, 0x0, 0x2) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) setsockopt$inet_buf(r4, 0x0, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x42000, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7ffc12178ac0ab1eb36bc2b6ddaa5effda9000", 0x5, 0x16, 0xfffffffb, 0x1}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000080)=0xd, 0x4) 4.671109442s ago: executing program 6 (id=997): socket$inet6(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xffb, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) r5 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x600202, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="ef7700000000000002004e21ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=ANY=[]) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) chdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 2.569060164s ago: executing program 6 (id=998): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x3, 0x91c, 0x218b}, 'syz0\x00', 0x13}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = geteuid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000380)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@errors_continue}, {@nogrpid, 0x0}, {@noauto_da_alloc}, {@norecovery}, {@noinit_itable}, {@inlinecrypt}, {@data_err_ignore}, {@sysvgroups}, {@nodiscard}, {@oldalloc}, {@orlov}, {@data_journal}, {@mblk_io_submit}, {@auto_da_alloc}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r4}}], 0x2c}, 0x0, 0x4f8, &(0x7f0000000700)="$eJzs3EtvVGUfAPD/mbaUvtC3fXm9cVFG0dhopLRcFy6AaMLGxERjcFnbQpAChtYESCPFGEhcaPgEXnYmfgJXujFqXGjcStwaE2K6AV2YY87MmTrt6fTGtGPp75fM8JzbPM//nPMwz2VOA9iwytlbErE1In6OiJ7q4uwdytV/7k5PDv8xPTmcRJq+8ntS2e/O9ORwbdfacVvyhb5SROm9JHYWs+0cv3zl7NDY2OjFfEX/RClPnRs6PXp69PzgkSMH9ncdPjR4sClxZmW6s+OdC7u2n3j95kvDJ2++8e3nWXnTfHt9HFW9lfdNS86hrbCmHOXZ57LOU0sv+rrQXZdO2rP3UusKw5Jld212uToq9b8n2ipLVT3x4rstLRywqtI0TTsLa2e+y6bSeklSPSBNr6XAfSCJVpcAaI3aF/2d6aynOjlc7Aff324fi0oPKIv7bv6qbmmv9GDLvdW+Uccq5f9ARJyc+vOj7BXzjkMAADTXl8cibhyvtjtqr+qWUjxUt99/87mh3oj4X0Rsi4j/5+2XByMq+z4cEY/UHdO9hFmA8pzlYvvnx648Ud9cbZqs/fd8Prc1u/03U/LetnypuxJ/R3LqzNjovvyc9EVHZ7Y8UPzomWG1r1746cNG+Zfr2n/ZK8u/1hbMy/Fb+5wBupGhiaF7jbvm9rXKib1ajD+J9qSWitgeETtW8PnZOTvzzGe7Gm2fFX8WZyH+Dxp/ePsKCjRH+knE09XrPxVz4o98/i+pzE+ee6t//PKV587Uz08OHD40eLB/c4yN7uuv3RVF3/1w/eU8WehGLHD9a1VjVSfSsuv/n3nv/5mZy94sNTNfO778PK7futGwT7PS+39T8molXZufvTQ0MXFxIGJTMlVcP/jPsZeGumbtn8Xft2f++r8t4q+P8+N2RkR2Ez8aEY9FxO687I9HxBMRsWeB+L85/uSbjbqQi8e/urL4R5Z1/Rsljn4fMf+mtrNff1HI+P1yIf6OaHT9D1RSffmakaGJzYvFtVBJ6xP3fAIBAABgHdgdEVsjKe3NB5q2Rqm0d2/ElpkRlPGJZ09dePv8SPUZgd7oKNVGunrqxkMH8rHhbDk7arBuOdu+vzJunKZp2pUtZ/33se7Whg4b3pYG9T/za/GRFuB+s6x5tEZPtAHr0tz6f2vJRzb/BxnA2mrC72iAdUr9h41ryfV/tZ6CA1pmvvp/NeJuC4oCrLH56v9rhTVH16QswNrS/4eNa+X1348BYL3z/Q8b0pIekl9BYtuJBfZJ2lcn08aJUiz8VwB6I2pram2ahT/wl1JEc0rY1tRIu2Zd09K8+2yOZuQVpUX3aV/GH2JY20Tp31GMaqIzIha5e2dutqu1xJXVLlilEnza2v+dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7t3fAQAA///tUdPr") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 2.568302504s ago: executing program 3 (id=999): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff7fff) sendmsg$WG_CMD_GET_DEVICE(r2, 0x0, 0x20040000) brk(0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) 334.044761ms ago: executing program 6 (id=1000): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000400000000000000ff0100008520000035470100"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ptrace$getenv(0x4201, r1, 0x400, &(0x7f0000000280)) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@deltclass={0x24, 0x29, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0xffe0, 0xfff3}, {0x3, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6f8, 0x48a21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x203}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r6, 0x1, 0x5}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 5 (id=1001): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x8000000, 0x1000, 0x1}}) socket(0x2b, 0x80801, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, 0x0) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3e}]}, 0x24}}, 0x8800) kernel console output (not intermixed with test programs): kets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.754409][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.765165][ T51] Bluetooth: hci0: command tx timeout [ 85.765188][ T5794] Bluetooth: hci2: command tx timeout [ 85.765474][ T5794] Bluetooth: hci1: command tx timeout [ 85.883356][ T5780] hsr_slave_0: entered promiscuous mode [ 85.893370][ T5780] hsr_slave_1: entered promiscuous mode [ 85.899990][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.908559][ T5780] Cannot create hsr debugfs directory [ 85.927280][ T5777] hsr_slave_0: entered promiscuous mode [ 85.936249][ T5777] hsr_slave_1: entered promiscuous mode [ 85.942549][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.950814][ T5777] Cannot create hsr debugfs directory [ 86.375114][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.397281][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.409331][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.419853][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.497763][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.511121][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.522237][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.550470][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.641777][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.653678][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.675105][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.686470][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.749970][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.760269][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.782299][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.807241][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.879018][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.943162][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.979350][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.011164][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.018607][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.035041][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.042289][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.096774][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.181464][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.188672][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.207706][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.214899][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.243945][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.328427][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.384689][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.401036][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.408279][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.462572][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.469872][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.491664][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.543458][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.550720][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.578378][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.585629][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.748615][ T5794] Bluetooth: hci3: command tx timeout [ 87.826493][ T5794] Bluetooth: hci0: command tx timeout [ 87.827558][ T5789] Bluetooth: hci2: command tx timeout [ 87.831946][ T5794] Bluetooth: hci1: command tx timeout [ 88.030684][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.158396][ T5778] veth0_vlan: entered promiscuous mode [ 88.198678][ T5778] veth1_vlan: entered promiscuous mode [ 88.302034][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.327449][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.353792][ T5778] veth0_macvtap: entered promiscuous mode [ 88.371609][ T5778] veth1_macvtap: entered promiscuous mode [ 88.440560][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.458566][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.480164][ T5776] veth0_vlan: entered promiscuous mode [ 88.489367][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.502245][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.511974][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.520802][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.531442][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.572018][ T5777] veth0_vlan: entered promiscuous mode [ 88.582760][ T5776] veth1_vlan: entered promiscuous mode [ 88.619565][ T5777] veth1_vlan: entered promiscuous mode [ 88.724982][ T5776] veth0_macvtap: entered promiscuous mode [ 88.766171][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.774222][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.782915][ T5780] veth0_vlan: entered promiscuous mode [ 88.794756][ T5776] veth1_macvtap: entered promiscuous mode [ 88.825160][ T5777] veth0_macvtap: entered promiscuous mode [ 88.846452][ T5777] veth1_macvtap: entered promiscuous mode [ 88.866352][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.874241][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.897144][ T5780] veth1_vlan: entered promiscuous mode [ 88.908128][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.933376][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.947363][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.978987][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.990754][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.003881][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.022558][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.035427][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.049096][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.060027][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.072678][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.092667][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.106680][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.115471][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.126278][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.154264][ T5780] veth0_macvtap: entered promiscuous mode [ 89.168247][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.179506][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.190275][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.201808][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.213822][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.228297][ T5780] veth1_macvtap: entered promiscuous mode [ 89.289269][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.311449][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.324229][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.334940][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.372138][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.383418][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.394507][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.406946][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.417168][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.428330][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.440796][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.483860][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.506621][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.520641][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.532103][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.542323][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.565592][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.590988][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.615963][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.641954][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.653673][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.662749][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.678259][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.771288][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.797108][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.835864][ T5789] Bluetooth: hci3: command tx timeout [ 89.906129][ T5789] Bluetooth: hci2: command tx timeout [ 89.911614][ T5789] Bluetooth: hci1: command tx timeout [ 89.917677][ T51] Bluetooth: hci0: command tx timeout [ 89.960777][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.976017][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.025089][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.033262][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.056936][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 90.184254][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.206141][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.332252][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.356361][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.369105][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.390252][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.687273][ T5862] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 90.834886][ T5868] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 90.878448][ T5869] netlink: 'syz.1.10': attribute type 2 has an invalid length. [ 90.897705][ T5869] netlink: 'syz.1.10': attribute type 6 has an invalid length. [ 91.072971][ T5873] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.043508][ T51] Bluetooth: hci1: command tx timeout [ 93.043514][ T5794] Bluetooth: hci0: command tx timeout [ 93.043606][ T5794] Bluetooth: hci2: command tx timeout [ 93.050048][ T5789] Bluetooth: hci3: command tx timeout [ 93.079063][ T5875] sched: RT throttling activated [ 93.217592][ T23] cfg80211: failed to load regulatory.db [ 94.234148][ T5906] syz.2.23[5906]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.644496][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 94.686651][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 94.749950][ T5919] ======================================================= [ 94.749950][ T5919] WARNING: The mand mount option has been deprecated and [ 94.749950][ T5919] and is ignored by this kernel. Remove the mand [ 94.749950][ T5919] option from the mount to silence this warning. [ 94.749950][ T5919] ======================================================= [ 94.926449][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 95.275859][ T5906] loop2: detected capacity change from 0 to 32768 [ 95.444049][ T5906] JBD2: Ignoring recovery information on journal [ 95.648723][ T5906] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.225000][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 96.723512][ T5947] loop0: detected capacity change from 0 to 32768 [ 96.808165][ T5947] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 96.951542][ T5947] XFS (loop0): Ending clean mount [ 97.296942][ T5778] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 98.150153][ T6003] loop0: detected capacity change from 0 to 8192 [ 100.060577][ T6038] loop0: detected capacity change from 0 to 512 [ 100.116513][ T6038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.248800][ T6038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.313266][ T6038] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.523710][ T6038] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.49: Allocating blocks 64-65 which overlap fs metadata [ 100.594301][ T6038] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.49: Allocating blocks 64-65 which overlap fs metadata [ 100.755190][ T6037] EXT4-fs (loop0): pa ffff888076875488: logic 1, phys. 44, len 84 [ 100.763610][ T6037] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5393: group 0, free 63, pa_free 64 [ 100.961121][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.116087][ T6062] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 101.173918][ T6062] CIFS: Attempting to mount //127.0.0.1/share [ 101.256428][ T6068] CIFS: VFS: Invalid response size 0 for command 0 [ 101.263312][ T6068] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 101.944529][ T6062] CIFS: VFS: cifs_mount failed w/return code = -512 [ 102.026519][ T1192] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.235914][ T1192] usb 3-1: Using ep0 maxpacket: 16 [ 102.291812][ T1192] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 102.335741][ T1192] usb 3-1: config 0 has no interface number 0 [ 102.352632][ T1192] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 102.400808][ T1192] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 102.465315][ T1192] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 102.495599][ T1192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.508385][ T6095] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 102.540612][ T1192] usb 3-1: Product: syz [ 102.544867][ T1192] usb 3-1: Manufacturer: syz [ 102.564589][ T1192] usb 3-1: SerialNumber: syz [ 102.591694][ T1192] usb 3-1: config 0 descriptor?? [ 102.601128][ T6095] veth1_virt_wifi: entered promiscuous mode [ 102.609447][ T6081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.612970][ T6095] veth1_virt_wifi: entered allmulticast mode [ 102.632593][ T6081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.896094][ T6081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.913721][ T6081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.146926][ T1192] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 103.253090][ T6093] loop3: detected capacity change from 0 to 32768 [ 103.345225][ T6093] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 103.438172][ T6093] XFS (loop3): Ending clean mount [ 103.755919][ T5777] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 103.795192][ T6123] can0: slcan on ttyS3. [ 104.366898][ T6121] can0 (unregistered): slcan off ttyS3. [ 104.470022][ T1192] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 104.530110][ T1192] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 104.572207][ T1192] asix: probe of 3-1:0.34 failed with error -71 [ 104.600277][ T1192] usb 3-1: USB disconnect, device number 2 [ 105.246231][ T6154] syzkaller0: entered promiscuous mode [ 105.251780][ T6154] syzkaller0: entered allmulticast mode [ 105.276723][ T6154] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 106.172217][ T6180] process 'syz.2.81' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 106.237834][ T6182] Zero length message leads to an empty skb [ 107.207179][ T6196] loop0: detected capacity change from 0 to 512 [ 107.248254][ T6196] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.323188][ T6196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.444282][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.485859][ T6196] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.626377][ T6196] EXT4-fs: Ignoring sb option on remount [ 107.647249][ T6196] EXT4-fs: can't change dax mount option while remounting [ 107.717673][ T6196] trusted_key: syz.0.92 sent an empty control message without MSG_MORE. [ 107.861557][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.972756][ T6210] can0: slcan on ttyS3. [ 108.577173][ T6206] can0 (unregistered): slcan off ttyS3. [ 109.248886][ T6231] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 109.455789][ T6231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.602171][ T6236] bond1: (slave veth0_to_bond): making interface the new active one [ 109.742653][ T6236] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 109.950789][ T6238] bond1: entered promiscuous mode [ 110.003134][ T6238] veth0_to_bond: entered promiscuous mode [ 110.275574][ T6238] bond1: entered allmulticast mode [ 110.295079][ T6238] veth0_to_bond: entered allmulticast mode [ 110.537613][ T6254] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.061318][ T6263] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 112.170295][ T6281] can0: slcan on ttyS3. [ 112.636968][ T6278] can0 (unregistered): slcan off ttyS3. [ 113.068052][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 114.496825][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.520379][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 114.535023][ T9] usb 4-1: can't read configurations, error -71 [ 116.287736][ T6319] can0: slcan on ttyS3. [ 116.846923][ T6316] can0 (unregistered): slcan off ttyS3. [ 117.306782][ T6332] loop0: detected capacity change from 0 to 128 [ 117.329292][ T6332] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.348717][ T6332] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.488327][ T6340] loop3: detected capacity change from 0 to 256 [ 117.524509][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.566364][ T6340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 117.618818][ T6340] syz.3.118: attempt to access beyond end of device [ 117.618818][ T6340] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 117.651608][ T6340] syz.3.118: attempt to access beyond end of device [ 117.651608][ T6340] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.676009][ T27] audit: type=1800 audit(1785868747.154:2): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.118" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 117.686938][ T6340] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 117.709242][ T6340] exFAT-fs (loop3): Filesystem has been set read-only [ 117.722746][ T6340] exFAT-fs (loop3): hint_cluster is invalid (1), rewind to the first cluster [ 117.739784][ T6340] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 117.749047][ T6340] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805d0307e0 iblock : 9, err : -5) [ 117.760060][ T6340] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 117.769080][ T6340] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 118.435159][ T6354] can0: slcan on ttyS3. [ 118.997715][ T6349] can0 (unregistered): slcan off ttyS3. [ 120.402125][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.413808][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.427645][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.448671][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.464826][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 120.473164][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.636389][ T6371] 0: reclassify loop, rule prio 0, protocol 03 [ 121.096334][ T2940] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.770192][ T2940] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.981123][ T2940] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.213679][ T2940] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.547148][ T5794] Bluetooth: hci4: command tx timeout [ 122.772645][ T6393] slcan: can't register candev [ 122.778065][ T6393] Falling back ldisc for ttyS3. [ 123.420502][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 123.875875][ T173] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.135676][ T173] usb 1-1: Using ep0 maxpacket: 32 [ 124.148140][ T173] usb 1-1: config 16 interface 0 has no altsetting 0 [ 124.168595][ T173] usb 1-1: New USB device found, idVendor=07ca, idProduct=a805, bcdDevice=2d.9e [ 124.188512][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.225033][ T173] usb 1-1: Product: syz [ 124.255933][ T173] usb 1-1: Manufacturer: syz [ 124.280886][ T173] usb 1-1: SerialNumber: syz [ 124.440483][ T6419] loop3: detected capacity change from 0 to 1024 [ 124.529165][ T6419] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 124.543826][ T173] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 124.554562][ T173] dvb_usb_af9015: probe of 1-1:16.0 failed with error -22 [ 124.566849][ T173] usb 1-1: USB disconnect, device number 2 [ 124.637059][ T5794] Bluetooth: hci4: command tx timeout [ 124.797531][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.804811][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.820081][ T6364] bridge_slave_0: entered allmulticast mode [ 124.831829][ T6364] bridge_slave_0: entered promiscuous mode [ 124.866882][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.886085][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.903578][ T6364] bridge_slave_1: entered allmulticast mode [ 124.915118][ T6364] bridge_slave_1: entered promiscuous mode [ 125.040615][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.143584][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.433411][ T6364] team0: Port device team_slave_0 added [ 125.494092][ T6364] team0: Port device team_slave_1 added [ 126.163732][ T6443] loop0: detected capacity change from 0 to 256 [ 126.291493][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.358833][ T6443] FAT-fs (loop0): Directory bread(block 64) failed [ 126.367608][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.426174][ T6443] FAT-fs (loop0): Directory bread(block 65) failed [ 126.432884][ T6443] FAT-fs (loop0): Directory bread(block 66) failed [ 126.446755][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.465585][ T6443] FAT-fs (loop0): Directory bread(block 67) failed [ 126.473083][ T6443] FAT-fs (loop0): Directory bread(block 68) failed [ 126.491519][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.508795][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.554636][ T6443] FAT-fs (loop0): Directory bread(block 69) failed [ 126.584438][ T6443] FAT-fs (loop0): Directory bread(block 70) failed [ 126.613302][ T6443] FAT-fs (loop0): Directory bread(block 71) failed [ 126.630205][ T6443] FAT-fs (loop0): Directory bread(block 72) failed [ 126.640288][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.659140][ T6443] FAT-fs (loop0): Directory bread(block 73) failed [ 126.706171][ T5794] Bluetooth: hci4: command tx timeout [ 127.087046][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.106005][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.122069][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.130689][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.138777][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.146332][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.274880][ T6364] hsr_slave_0: entered promiscuous mode [ 127.452834][ T6364] hsr_slave_1: entered promiscuous mode [ 127.567973][ T6364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.694416][ T6364] Cannot create hsr debugfs directory [ 128.147332][ T6467] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 128.186551][ T6467] bond2: entered promiscuous mode [ 128.191688][ T6467] bond2: entered allmulticast mode [ 128.197487][ T6467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.352826][ T6470] macvlan2: entered promiscuous mode [ 128.365783][ T6470] macvlan2: entered allmulticast mode [ 128.373627][ T6470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.591321][ T2940] hsr_slave_0: left promiscuous mode [ 128.607100][ T2940] hsr_slave_1: left promiscuous mode [ 128.615857][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.623375][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.657065][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.664530][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.708280][ T2940] bridge_slave_1: left allmulticast mode [ 128.713995][ T2940] bridge_slave_1: left promiscuous mode [ 128.726936][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.753681][ T2940] bridge_slave_0: left allmulticast mode [ 128.759498][ T2940] bridge_slave_0: left promiscuous mode [ 128.765237][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.785636][ T5789] Bluetooth: hci4: command tx timeout [ 128.815278][ T2940] veth1_macvtap: left promiscuous mode [ 128.833793][ T2940] veth0_macvtap: left promiscuous mode [ 128.852968][ T2940] veth1_vlan: left promiscuous mode [ 128.863717][ T2940] veth0_vlan: left promiscuous mode [ 129.164144][ T6480] loop0: detected capacity change from 0 to 512 [ 129.188174][ T5789] Bluetooth: hci1: command tx timeout [ 129.230295][ T6480] EXT4-fs (loop0): 1 truncate cleaned up [ 129.241859][ T6480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.761265][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.840648][ T6493] loop0: detected capacity change from 0 to 1024 [ 129.848429][ T6493] EXT4-fs: Ignoring removed bh option [ 129.853958][ T6493] EXT4-fs: Ignoring removed bh option [ 129.863089][ T6493] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 129.927260][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.347668][ T6493] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.149: Invalid inode table block 5 in block_group 0 [ 130.516437][ T6493] EXT4-fs (loop0): Remounting filesystem read-only [ 130.874840][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.958608][ T2940] team0 (unregistering): Port device team_slave_1 removed [ 131.033613][ T2940] team0 (unregistering): Port device team_slave_0 removed [ 131.146116][ T2940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.261039][ T2940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.269903][ T5789] Bluetooth: hci1: command tx timeout [ 131.658795][ T2940] bond0 (unregistering): Released all slaves [ 132.330589][ T6455] chnl_net:caif_netlink_parms(): no params data found [ 132.371354][ T6364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.424956][ T6364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.451753][ T6364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.464745][ T6522] syz.0.154 uses obsolete (PF_INET,SOCK_PACKET) [ 132.523452][ T6364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.852226][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.882327][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.891032][ T6455] bridge_slave_0: entered allmulticast mode [ 132.898685][ T6455] bridge_slave_0: entered promiscuous mode [ 133.030822][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.048417][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.127110][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.141104][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.150149][ T6455] bridge_slave_1: entered allmulticast mode [ 133.190965][ T6455] bridge_slave_1: entered promiscuous mode [ 133.347835][ T5789] Bluetooth: hci1: command tx timeout [ 133.830212][ T6455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.993330][ T2940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.041466][ T6455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.121338][ T6455] team0: Port device team_slave_0 added [ 134.198904][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.240993][ T2940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.258896][ T6455] team0: Port device team_slave_1 added [ 134.655310][ T2940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.879313][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.915706][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.995534][ T6455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.043447][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.065045][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.093362][ T6455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.131724][ T2940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.224789][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.258667][ T6455] hsr_slave_0: entered promiscuous mode [ 135.265628][ T6455] hsr_slave_1: entered promiscuous mode [ 135.272482][ T6455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.280860][ T6455] Cannot create hsr debugfs directory [ 135.289516][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.296743][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.425640][ T5789] Bluetooth: hci1: command tx timeout [ 135.449128][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.456350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.208495][ T6575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.231556][ T6558] loop3: detected capacity change from 0 to 32768 [ 136.289823][ T6558] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.425808][ T6558] XFS (loop3): Ending clean mount [ 136.604120][ T6455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.699754][ T6455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.747783][ T6455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.792346][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.794201][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.851613][ T6455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.315195][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.326974][ T6603] loop0: detected capacity change from 0 to 256 [ 137.434307][ T6603] exFAT-fs (loop0): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 137.460418][ T6603] exFAT-fs (loop0): Filesystem has been set read-only [ 137.472297][ T6455] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.539557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.546814][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.679107][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.687055][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.820782][ T2940] hsr_slave_0: left promiscuous mode [ 137.843624][ T2940] hsr_slave_1: left promiscuous mode [ 137.854448][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.863274][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.873199][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.882736][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.894161][ T2940] bridge_slave_1: left allmulticast mode [ 137.907022][ T2940] bridge_slave_1: left promiscuous mode [ 137.917140][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.940171][ T2940] bridge_slave_0: left allmulticast mode [ 137.946612][ T2940] bridge_slave_0: left promiscuous mode [ 137.952414][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.142514][ T2940] veth1_macvtap: left promiscuous mode [ 138.166296][ T2940] veth0_macvtap: left promiscuous mode [ 138.172059][ T2940] veth1_vlan: left promiscuous mode [ 138.205659][ T2940] veth0_vlan: left promiscuous mode [ 138.759066][ T6642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.358449][ T2940] team0 (unregistering): Port device team_slave_1 removed [ 139.411349][ T2940] team0 (unregistering): Port device team_slave_0 removed [ 139.488575][ T2940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.548509][ T2940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.884343][ T2940] bond0 (unregistering): Released all slaves [ 140.010220][ T6364] veth0_vlan: entered promiscuous mode [ 140.070679][ T6364] veth1_vlan: entered promiscuous mode [ 140.126947][ T6455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.282956][ T6364] veth0_macvtap: entered promiscuous mode [ 140.314170][ T6364] veth1_macvtap: entered promiscuous mode [ 140.363621][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.383794][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.403997][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.415073][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.433178][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.472140][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.484093][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.535115][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.570306][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.600775][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.640748][ T6364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.678720][ T6364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.705990][ T6364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.733549][ T6364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.781104][ T6668] loop3: detected capacity change from 0 to 1024 [ 140.992949][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.010519][ T6674] loop0: detected capacity change from 0 to 256 [ 141.050641][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.096649][ T6674] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.107684][ T6674] FAT-fs (loop0): Filesystem has been set read-only [ 141.115238][ T6674] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.126137][ T6674] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.142184][ T27] audit: type=1800 audit(1785868770.624:3): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.179" name="file1" dev="loop0" ino=1048602 res=0 errno=0 [ 141.268695][ T6455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.324813][ T6678] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.355506][ T6678] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.407602][ T6678] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.596999][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.745848][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.870439][ T6674] syz.0.179 (6674) used greatest stack depth: 20584 bytes left [ 143.824818][ T6710] loop4: detected capacity change from 0 to 128 [ 143.885936][ T6710] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.893435][ T6455] veth0_vlan: entered promiscuous mode [ 143.913101][ T6455] veth1_vlan: entered promiscuous mode [ 144.003216][ T6710] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.054416][ T6710] EXT4-fs (loop4): shut down requested (1) [ 144.086253][ T6455] veth0_macvtap: entered promiscuous mode [ 144.099497][ T6710] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 144.117869][ T6455] veth1_macvtap: entered promiscuous mode [ 144.145220][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.163547][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.196078][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.207264][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.217797][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.228747][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.241594][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.258895][ T6364] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.260394][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.322085][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.368829][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.408803][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.435514][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.454026][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.470892][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.613609][ T6455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.684298][ T6455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.713692][ T6455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.745582][ T6455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.871384][ T6734] can0: slcan on ttyS3. [ 145.337805][ T6724] can0 (unregistered): slcan off ttyS3. [ 145.709161][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.748022][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.846356][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.854382][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.960235][ T6777] netlink: 'syz.5.197': attribute type 12 has an invalid length. [ 147.056000][ T6777] netlink: 'syz.5.197': attribute type 29 has an invalid length. [ 147.484112][ T6783] slcan: can't register candev [ 147.489309][ T6783] Falling back ldisc for ttyS3. [ 147.568095][ T6777] netlink: 148 bytes leftover after parsing attributes in process `syz.5.197'. [ 147.751846][ T6777] netlink: 'syz.5.197': attribute type 1 has an invalid length. [ 147.788924][ T6777] netlink: 'syz.5.197': attribute type 2 has an invalid length. [ 147.807031][ T6777] netlink: 11 bytes leftover after parsing attributes in process `syz.5.197'. [ 147.934129][ T6780] bridge_slave_0: left allmulticast mode [ 148.020243][ T6780] bridge_slave_0: left promiscuous mode [ 148.051934][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.107720][ T6780] bridge_slave_1: left allmulticast mode [ 148.116411][ T6780] bridge_slave_1: left promiscuous mode [ 148.116637][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.502415][ T6780] bond0: (slave bond_slave_0): Releasing backup interface [ 148.707604][ T6780] bond0: (slave bond_slave_1): Releasing backup interface [ 148.835420][ T6780] team0: Port device team_slave_0 removed [ 148.937073][ T6780] team0: Port device team_slave_1 removed [ 148.978324][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.998039][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.020845][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.031544][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.767587][ T6838] slcan: can't register candev [ 151.773289][ T6838] Falling back ldisc for ttyS3. [ 152.039928][ T6846] netlink: 'syz.4.214': attribute type 12 has an invalid length. [ 152.075226][ T6846] netlink: 'syz.4.214': attribute type 29 has an invalid length. [ 152.124628][ T6846] netlink: 148 bytes leftover after parsing attributes in process `syz.4.214'. [ 152.150170][ T6846] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 152.163053][ T6846] netlink: 'syz.4.214': attribute type 2 has an invalid length. [ 152.171619][ T6846] netlink: 11 bytes leftover after parsing attributes in process `syz.4.214'. [ 152.240999][ T6848] bridge_slave_0: left allmulticast mode [ 152.258375][ T6858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.273380][ T6848] bridge_slave_0: left promiscuous mode [ 152.283876][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.312731][ T6848] bridge_slave_1: left allmulticast mode [ 152.332754][ T6848] bridge_slave_1: left promiscuous mode [ 152.354075][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.374698][ T6848] bond0: (slave bond_slave_0): Releasing backup interface [ 152.408259][ T6848] bond0: (slave bond_slave_1): Releasing backup interface [ 152.453788][ T6848] team0: Port device team_slave_0 removed [ 152.490762][ T6848] team0: Port device team_slave_1 removed [ 152.508750][ T6848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.523545][ T6848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.535936][ T6848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.543516][ T6848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.884157][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 152.902314][ T6869] loop0: detected capacity change from 0 to 512 [ 152.946866][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.970040][ T6869] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 153.010719][ T6869] EXT4-fs (loop0): invalid journal inode [ 153.041523][ T6869] EXT4-fs (loop0): can't get journal size [ 153.068351][ T6869] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.218: blocks 4-4 from inode overlap system zone [ 153.342192][ T6869] EXT4-fs (loop0): failed to initialize system zone (-117) [ 153.570606][ T6869] EXT4-fs (loop0): mount failed [ 154.037656][ T6875] fido_id[6875]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.836965][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.061701][ T5822] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 155.079898][ T6915] binder: 6914:6915 ioctl c0306201 200000000080 returned -14 [ 155.081187][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.120151][ T5822] usb 6-1: config 0 descriptor?? [ 155.135147][ T6915] binder: BINDER_SET_CONTEXT_MGR already set [ 155.164223][ T5822] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 155.166785][ T6915] binder: 6914:6915 ioctl 4018620d 200000000040 returned -16 [ 155.201300][ T6915] binder: 6914:6915 ioctl c0306201 2000000003c0 returned -14 [ 155.988937][ T6942] loop4: detected capacity change from 0 to 128 [ 156.744569][ T6954] bond3: entered allmulticast mode [ 156.773068][ T5822] gspca_stv06xx: HDCS-1020 sensor detected [ 156.795094][ T6959] gre1: entered allmulticast mode [ 156.801144][ T6959] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 156.818532][ T6959] bond3: (slave gre1): Error -95 calling set_mac_address [ 157.587009][ T5822] STV06xx: probe of 6-1:0.0 failed with error -71 [ 157.595942][ T5822] usb 6-1: USB disconnect, device number 2 [ 157.666713][ T1192] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.858302][ T1192] usb 4-1: Using ep0 maxpacket: 16 [ 157.905675][ T1192] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 157.924157][ T6979] loop0: detected capacity change from 0 to 2048 [ 157.930691][ T1192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.952738][ T1192] usb 4-1: config 0 descriptor?? [ 157.970449][ T1192] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 158.074491][ T5793] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.083437][ T1192] gspca_sonixj: reg_r err -71 [ 160.117181][ T1192] sonixj: probe of 4-1:0.0 failed with error -71 [ 160.194228][ T1192] usb 4-1: USB disconnect, device number 4 [ 163.338482][ T7064] loop4: detected capacity change from 0 to 1024 [ 163.753374][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 164.808955][ T7116] io-wq is not configured for unbound workers [ 164.822288][ T7113] vivid-007: ================= START STATUS ================= [ 164.841447][ T7113] vivid-007: Enable Output Cropping: true [ 164.857651][ T7113] vivid-007: Enable Output Composing: true [ 164.876813][ T7113] vivid-007: Enable Output Scaler: true [ 164.882791][ T7113] vivid-007: Tx RGB Quantization Range: Automatic [ 164.905548][ T7113] vivid-007: Transmit Mode: HDMI [ 164.910656][ T7113] vivid-007: Display Present: true inactive [ 164.935562][ T7113] vivid-007: Hotplug Present: 0x00000001 [ 164.941325][ T7113] vivid-007: RxSense Present: 0x00000001 [ 164.982320][ T7113] vivid-007: EDID Present: 0x00000001 [ 165.009626][ T7113] vivid-007: ================== END STATUS ================== [ 165.095808][ T5822] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 165.275878][ T5822] usb 6-1: device descriptor read/64, error -71 [ 165.596031][ T5822] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 167.711478][ T7177] netlink: 'syz.0.277': attribute type 5 has an invalid length. [ 167.897687][ T7183] sit0: entered promiscuous mode [ 167.927258][ T7183] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 167.934983][ T7183] netlink: 1 bytes leftover after parsing attributes in process `syz.0.279'. [ 169.741471][ T7219] loop2: detected capacity change from 0 to 7 [ 169.752487][ T7219] Dev loop2: unable to read RDB block 7 [ 169.758722][ T7219] loop2: unable to read partition table [ 169.764749][ T7219] loop2: partition table beyond EOD, truncated [ 169.771942][ T7219] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.812687][ T5143] Dev loop2: unable to read RDB block 7 [ 169.819596][ T5143] loop2: unable to read partition table [ 169.826932][ T5143] loop2: partition table beyond EOD, truncated [ 170.259212][ T7229] loop0: detected capacity change from 0 to 16 [ 170.288954][ T7229] erofs: (device loop0): mounted with root inode @ nid 36. [ 170.340579][ T7229] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 170.358511][ T7229] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 170.467079][ T7223] loop3: detected capacity change from 0 to 32768 [ 170.975915][ T7231] loop5: detected capacity change from 0 to 32768 [ 171.017018][ T7231] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.291 (7231) [ 171.090882][ T7231] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 171.114760][ T7231] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 171.126176][ T7231] BTRFS info (device loop5): using free space tree [ 171.798515][ T7231] BTRFS info (device loop5): enabling ssd optimizations [ 171.865808][ T7231] BTRFS info (device loop5): auto enabling async discard [ 172.961723][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.030321][ T6455] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 173.088195][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.239876][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.450577][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.484608][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.493719][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.507418][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.520077][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.529791][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.545859][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.622993][ T7310] tipc: Started in network mode [ 177.630024][ T7310] tipc: Node identity ce465b5c15cd, cluster identity 4711 [ 177.637938][ T7310] tipc: Enabled bearer , priority 0 [ 177.769035][ T7310] tipc: Disabling bearer [ 179.161591][ T59] hsr_slave_0: left promiscuous mode [ 179.181067][ T59] hsr_slave_1: left promiscuous mode [ 179.276829][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.305765][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.354013][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.400130][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.418665][ T59] bridge_slave_1: left allmulticast mode [ 179.424367][ T59] bridge_slave_1: left promiscuous mode [ 179.455001][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.483233][ T59] bridge_slave_0: left allmulticast mode [ 179.509333][ T59] bridge_slave_0: left promiscuous mode [ 179.529899][ T7348] overlayfs: failed to verify origin (88/file1, ino=487, err=-116) [ 179.549989][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.573936][ T7348] overlayfs: failed to verify origin (88/file1, ino=487, err=-116) [ 179.587680][ T5789] Bluetooth: hci2: command tx timeout [ 179.785763][ T59] veth1_macvtap: left promiscuous mode [ 179.791382][ T59] veth0_macvtap: left promiscuous mode [ 179.855771][ T59] veth1_vlan: left promiscuous mode [ 179.861231][ T59] veth0_vlan: left promiscuous mode [ 180.121890][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.137479][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.146996][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.155045][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.182721][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 180.192297][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.341603][ T59] bond3 (unregistering): Released all slaves [ 180.545089][ T59] bond2 (unregistering): Released all slaves [ 180.711101][ T59] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 180.719987][ T59] veth0_to_bond (unregistering): left promiscuous mode [ 180.727359][ T59] veth0_to_bond (unregistering): left allmulticast mode [ 180.740860][ T59] bond1 (unregistering): Released all slaves [ 180.769951][ T7369] loop5: detected capacity change from 0 to 32768 [ 180.820392][ T7369] JBD2: Ignoring recovery information on journal [ 180.949441][ T7369] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 181.095992][ T27] audit: type=1804 audit(1785868810.574:4): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.311" name="/newroot/24/bus/file1" dev="loop5" ino=17059 res=1 errno=0 [ 181.174686][ T27] audit: type=1804 audit(1785868810.654:5): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.311" name="/newroot/24/bus/bus" dev="loop5" ino=17058 res=1 errno=0 [ 181.303497][ T6455] ocfs2: Unmounting device (7,5) on (node local) [ 181.671665][ T5794] Bluetooth: hci2: command tx timeout [ 181.691685][ T7376] loop3: detected capacity change from 0 to 32768 [ 181.716780][ T7376] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.313 (7376) [ 181.787075][ T7376] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 181.806129][ T7376] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 181.825920][ T7376] BTRFS info (device loop3): using free space tree [ 181.970048][ T7376] BTRFS info (device loop3): enabling ssd optimizations [ 181.995381][ T7376] BTRFS info (device loop3): auto enabling async discard [ 182.224233][ T59] team0 (unregistering): Port device team_slave_1 removed [ 182.232158][ T5794] Bluetooth: hci3: command tx timeout [ 182.323768][ T59] team0 (unregistering): Port device team_slave_0 removed [ 182.441988][ T5777] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 182.476710][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.581842][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.730656][ T7405] binder_alloc: 7404: binder_alloc_buf size 280 failed, no address space [ 182.746209][ T7405] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 183.155256][ T7409] kvm: pic: non byte write [ 183.229887][ T59] bond0 (unregistering): Released all slaves [ 183.359299][ T7304] chnl_net:caif_netlink_parms(): no params data found [ 183.753161][ T5794] Bluetooth: hci2: command tx timeout [ 183.803580][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.858034][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.865339][ T7304] bridge_slave_0: entered allmulticast mode [ 183.882399][ T7304] bridge_slave_0: entered promiscuous mode [ 183.993356][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.033843][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.055955][ T7304] bridge_slave_1: entered allmulticast mode [ 184.065246][ T7304] bridge_slave_1: entered promiscuous mode [ 184.230308][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.253417][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.305572][ T5794] Bluetooth: hci3: command tx timeout [ 184.363706][ T7304] team0: Port device team_slave_0 added [ 184.419095][ T7304] team0: Port device team_slave_1 added [ 184.590718][ T7445] loop3: detected capacity change from 0 to 128 [ 184.618301][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.654840][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.685697][ T7445] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 184.725946][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.746045][ T7445] hpfs: filesystem error: improperly stopped [ 184.752113][ T7445] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 184.769653][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.775780][ T7445] hpfs: You really don't want any checks? You are crazy... [ 184.785336][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.787427][ T7445] hpfs: Code page index out of array [ 184.835323][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.835778][ T7445] hpfs: code page support is disabled [ 184.868078][ T7445] hpfs: hpfs_map_4sectors(): unaligned read [ 184.876615][ T7445] hpfs: hpfs_map_4sectors(): unaligned read [ 184.882568][ T7445] hpfs: filesystem error: unable to find root dir [ 185.054344][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.150224][ T7362] chnl_net:caif_netlink_parms(): no params data found [ 185.432183][ T7304] hsr_slave_0: entered promiscuous mode [ 185.679121][ T7304] hsr_slave_1: entered promiscuous mode [ 185.835862][ T5794] Bluetooth: hci2: command tx timeout [ 186.328190][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.385834][ T5794] Bluetooth: hci3: command tx timeout [ 186.454552][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.599967][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.031249][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.043156][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.066090][ T7362] bridge_slave_0: entered allmulticast mode [ 187.085222][ T7362] bridge_slave_0: entered promiscuous mode [ 187.163313][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.175877][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.190617][ T7362] bridge_slave_1: entered allmulticast mode [ 187.206377][ T7362] bridge_slave_1: entered promiscuous mode [ 187.382001][ T7362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.428137][ T7362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.644954][ T7362] team0: Port device team_slave_0 added [ 187.728718][ T7362] team0: Port device team_slave_1 added [ 187.943484][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.966671][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.997827][ T7362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.015110][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.032350][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.091450][ T7506] binder: BINDER_SET_CONTEXT_MGR already set [ 188.103776][ T7362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.125840][ T7506] binder: 7505:7506 ioctl 4018620d 200000004a80 returned -16 [ 188.160681][ T7506] binder: 7505:7506 ioctl c0306201 2000000004c0 returned -22 [ 188.176026][ T7304] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.466338][ T5794] Bluetooth: hci3: command tx timeout [ 188.712379][ T7304] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.801862][ T7304] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.993820][ T7304] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 189.050480][ T7362] hsr_slave_0: entered promiscuous mode [ 189.059785][ T7362] hsr_slave_1: entered promiscuous mode [ 189.068712][ T7362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.076664][ T7362] Cannot create hsr debugfs directory [ 189.842238][ T7362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 189.909402][ T7362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 189.937398][ T7362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 189.959101][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.017291][ T59] hsr_slave_0: left promiscuous mode [ 190.033164][ T59] hsr_slave_1: left promiscuous mode [ 190.106699][ T59] veth1_macvtap: left promiscuous mode [ 190.121269][ T59] veth0_macvtap: left promiscuous mode [ 190.134837][ T59] veth1_vlan: left promiscuous mode [ 190.140745][ T59] veth0_vlan: left promiscuous mode [ 190.604111][ T7537] loop5: detected capacity change from 0 to 32768 [ 190.621106][ T7537] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.333 (7537) [ 190.681994][ T7537] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 190.711419][ T7537] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 190.721669][ T7537] BTRFS info (device loop5): using free space tree [ 190.781772][ T7537] BTRFS info (device loop5): enabling ssd optimizations [ 190.805103][ T7537] BTRFS info (device loop5): auto enabling async discard [ 191.467791][ T6455] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 192.540582][ T59] bond0 (unregistering): Released all slaves [ 192.634830][ T7362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 192.741720][ T7304] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.804946][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.812193][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.874886][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.882156][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.470346][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.521695][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.695636][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.118628][ T7362] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.147370][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.154515][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.167840][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.175037][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.544983][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.953303][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.158677][ T7626] loop5: detected capacity change from 0 to 8192 [ 197.484853][ T7304] veth0_vlan: entered promiscuous mode [ 197.551248][ T7304] veth1_vlan: entered promiscuous mode [ 197.661303][ T7304] veth0_macvtap: entered promiscuous mode [ 197.713666][ T7304] veth1_macvtap: entered promiscuous mode [ 197.802491][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.840081][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.871070][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.907667][ T7647] tipc: Enabled bearer , priority 0 [ 197.935420][ T7646] tipc: Disabling bearer [ 197.958921][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.969864][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.981789][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.039536][ T7304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.066184][ T7304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.075083][ T7304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.095574][ T7304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.289167][ T7362] veth0_vlan: entered promiscuous mode [ 198.358419][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.382219][ T7362] veth1_vlan: entered promiscuous mode [ 198.388602][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.463559][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.503526][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.547739][ T7362] veth0_macvtap: entered promiscuous mode [ 198.604605][ T7362] veth1_macvtap: entered promiscuous mode [ 198.687358][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.721672][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.890581][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.925637][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.959305][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.971103][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.982103][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.982372][ T7670] loop5: detected capacity change from 0 to 128 [ 198.992003][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.992020][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.996305][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.719262][ T7670] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.757339][ T7670] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.761845][ T7362] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.923272][ T7362] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.942416][ T7362] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.964532][ T7362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.054801][ T7670] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 200.108754][ T7681] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 200.171615][ T7670] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.5.349: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 200.337338][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.356803][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.453664][ T6455] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.521374][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.553840][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.628698][ T7691] loop3: detected capacity change from 0 to 1024 [ 200.686548][ T7691] EXT4-fs: Ignoring removed bh option [ 200.761010][ T7691] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 200.862125][ T7691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.190365][ T7703] tipc: Started in network mode [ 201.202821][ T7703] tipc: Node identity 2007ff, cluster identity 4711 [ 201.242643][ T7703] tipc: Node number set to 2099199 [ 201.309460][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.280642][ T7715] loop5: detected capacity change from 0 to 1024 [ 202.298907][ T7715] EXT4-fs: Ignoring removed orlov option [ 202.399542][ T7715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.505082][ T7720] Bluetooth: MGMT ver 1.22 [ 203.075989][ T6455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.123312][ T7736] loop3: detected capacity change from 0 to 512 [ 203.160261][ T7736] EXT4-fs: Ignoring removed oldalloc option [ 203.237048][ T7736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.370278][ T7736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.415053][ T7736] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.689111][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.311566][ T7768] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.982543][ T7788] netlink: 'syz.6.369': attribute type 1 has an invalid length. [ 206.480674][ T7796] syzkaller0: entered promiscuous mode [ 206.500467][ T7796] syzkaller0: entered allmulticast mode [ 206.790175][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 206.868358][ T7805] loop6: detected capacity change from 0 to 512 [ 206.885901][ T7805] EXT4-fs: Ignoring removed oldalloc option [ 206.929771][ T7805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.949791][ T7801] loop3: detected capacity change from 0 to 8192 [ 206.982896][ T7805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.020841][ T7805] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.451962][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.350311][ T7843] capability: warning: `syz.6.380' uses deprecated v2 capabilities in a way that may be insecure [ 211.176546][ T1192] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 211.397699][ T1192] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.415697][ T1192] usb 7-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 211.435379][ T1192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.463364][ T1192] usb 7-1: config 0 descriptor?? [ 211.508544][ T1192] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 211.735766][ T7878] loop5: detected capacity change from 0 to 128 [ 212.240276][ T7878] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.264843][ T7880] loop3: detected capacity change from 0 to 1024 [ 212.281681][ T5850] usb 7-1: USB disconnect, device number 2 [ 212.349713][ T7878] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.403945][ T7880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.691032][ T6455] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.527224][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.547743][ T7923] syzkaller0: entered promiscuous mode [ 215.553284][ T7923] syzkaller0: entered allmulticast mode [ 215.622178][ T7927] loop6: detected capacity change from 0 to 512 [ 215.693317][ T7927] EXT4-fs (loop6): inodes count not valid: 40 vs 32 [ 216.112938][ T7941] syzkaller0: entered promiscuous mode [ 216.118677][ T7941] syzkaller0: entered allmulticast mode [ 216.924730][ T7965] 8021q: VLANs not supported on wg0 [ 217.421835][ T7976] loop3: detected capacity change from 0 to 512 [ 217.495598][ T7976] EXT4-fs (loop3): inodes count not valid: 40 vs 32 [ 217.548207][ T7980] loop5: detected capacity change from 0 to 1024 [ 217.669119][ T7980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.863326][ T7980] usb usb8: usbfs: process 7980 (syz.5.406) did not claim interface 0 before use [ 218.266773][ T7985] ISOFS: Unable to identify CD-ROM format. [ 218.444308][ T6455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.543043][ T7992] block device autoloading is deprecated and will be removed. [ 218.565644][ T7994] block device autoloading is deprecated and will be removed. [ 219.802114][ T8017] futex_wake_op: syz.7.411 tries to shift op by 144; fix this program [ 220.192187][ T8030] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 221.262441][ T8039] syzkaller0: entered promiscuous mode [ 221.286641][ T8039] syzkaller0: entered allmulticast mode [ 221.329436][ T8041] syzkaller0: entered promiscuous mode [ 221.345182][ T8041] syzkaller0: entered allmulticast mode [ 221.458537][ T8051] syzkaller0: entered promiscuous mode [ 221.464094][ T8051] syzkaller0: entered allmulticast mode [ 221.871487][ T8064] loop6: detected capacity change from 0 to 8192 [ 221.915755][ T1192] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 222.051055][ T8069] TC_ACT_REPEAT abuse ? [ 222.128729][ T1192] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 222.137329][ T1192] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 222.148210][ T1192] usb 4-1: config 220 has no interface number 2 [ 222.154663][ T1192] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 222.168403][ T1192] usb 4-1: config 220 interface 0 has no altsetting 0 [ 222.175230][ T1192] usb 4-1: config 220 interface 76 has no altsetting 0 [ 222.195060][ T1192] usb 4-1: config 220 interface 1 has no altsetting 0 [ 222.227733][ T1192] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 222.258291][ T1192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.277866][ T1192] usb 4-1: Product: syz [ 222.282174][ T1192] usb 4-1: Manufacturer: syz [ 222.287447][ T1192] usb 4-1: SerialNumber: syz [ 222.537074][ T1192] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 222.553807][ T1192] usb 4-1: No valid video chain found. [ 222.570689][ T1192] usb 4-1: selecting invalid altsetting 0 [ 222.666900][ T1192] usb 4-1: selecting invalid altsetting 0 [ 222.672723][ T1192] usbtest: probe of 4-1:220.1 failed with error -22 [ 222.713071][ T1192] usb 4-1: USB disconnect, device number 5 [ 223.213193][ T8075] loop5: detected capacity change from 0 to 512 [ 223.260097][ T8075] ext4: Unknown parameter 'fscontext' [ 224.281143][ T8097] syzkaller0: entered promiscuous mode [ 224.286755][ T8097] syzkaller0: entered allmulticast mode [ 226.397313][ T8119] syzkaller0: entered promiscuous mode [ 226.429580][ T8119] syzkaller0: entered allmulticast mode [ 227.799638][ T8125] CIFS: Attempting to mount //127.0.0.1/share [ 227.877371][ T8128] CIFS: VFS: Invalid response size 0 for command 0 [ 227.897885][ T8128] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 227.906400][ T8125] CIFS: VFS: cifs_mount failed w/return code = -5 [ 228.535878][ T5850] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 228.777697][ T8157] loop7: detected capacity change from 0 to 512 [ 229.149626][ T8157] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 229.160838][ T8157] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 229.170984][ T8157] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.440: Failed to acquire dquot type 1 [ 229.200372][ T8157] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 229.212925][ T8157] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 229.223212][ T8157] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.440: Failed to acquire dquot type 1 [ 229.284022][ T8157] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.440: bg 0: block 248: padding at end of block bitmap is not set [ 229.325547][ T8157] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 229.361927][ T8157] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 229.373268][ T8157] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 229.383398][ T8157] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.440: Failed to acquire dquot type 1 [ 229.410863][ T8157] EXT4-fs (loop7): 1 orphan inode deleted [ 229.427108][ T8157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.440299][ T8157] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.753329][ T8130] loop6: detected capacity change from 0 to 512 [ 229.787234][ T8130] ext4: Unknown parameter 'fscontext' [ 230.920546][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.195979][ T5850] usb 6-1: device descriptor read/all, error -71 [ 231.408403][ T8177] loop5: detected capacity change from 0 to 1024 [ 231.446039][ T8177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.452742][ T8177] EXT4-fs: inline encryption not supported [ 231.523454][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.6.444'. [ 231.542717][ T8177] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.571208][ T8179] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 231.583247][ T8177] EXT4-fs (loop5): orphan cleanup on readonly fs [ 231.613830][ T8177] Quota error (device loop5): v2_read_file_info: Free block number 131072 out of range (1, 6). [ 231.643768][ T8177] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 231.716223][ T8177] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 231.738303][ T8177] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.443: Freeing blocks not in datazone - block = 0, count = 4096 [ 231.802528][ T8177] EXT4-fs (loop5): Remounting filesystem read-only [ 231.825057][ T8177] EXT4-fs (loop5): 1 orphan inode deleted [ 231.842463][ T8191] netlink: 'syz.7.446': attribute type 4 has an invalid length. [ 231.852628][ T8177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.041354][ T6455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.364486][ T8200] loop5: detected capacity change from 0 to 1024 [ 232.414305][ T8200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.701419][ T8195] loop6: detected capacity change from 0 to 8192 [ 235.738002][ T8234] null_blk: disk nullb1 created [ 235.821888][ T8237] syz_tun: entered promiscuous mode [ 235.842278][ T8237] vlan2: entered promiscuous mode [ 235.878996][ T6455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.082861][ T8242] syzkaller0: entered promiscuous mode [ 236.094582][ T8242] syzkaller0: entered allmulticast mode [ 236.687722][ T8258] syzkaller0: entered promiscuous mode [ 236.695647][ T8258] syzkaller0: entered allmulticast mode [ 236.849039][ T8267] syzkaller0: entered promiscuous mode [ 236.865173][ T8267] syzkaller0: entered allmulticast mode [ 239.749053][ T8286] loop3: detected capacity change from 0 to 32768 [ 240.979940][ T8326] syzkaller0: entered promiscuous mode [ 241.016251][ T8326] syzkaller0: entered allmulticast mode [ 242.356927][ T8337] syzkaller0: entered promiscuous mode [ 242.362476][ T8337] syzkaller0: entered allmulticast mode [ 244.212286][ T8363] syzkaller0: entered promiscuous mode [ 244.245988][ T8363] syzkaller0: entered allmulticast mode [ 244.923234][ T8380] syzkaller0: entered promiscuous mode [ 244.937578][ T8380] syzkaller0: entered allmulticast mode [ 247.064863][ T8412] netlink: 'syz.5.494': attribute type 1 has an invalid length. [ 247.225523][ T8412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.280933][ T8416] bond1: (slave syz_tun): making interface the new active one [ 247.352086][ T8416] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 247.448684][ T8417] bond1: entered promiscuous mode [ 247.460472][ T8417] syz_tun: entered promiscuous mode [ 247.475928][ T8417] bond1: entered allmulticast mode [ 247.483107][ T8417] syz_tun: entered allmulticast mode [ 248.256074][ T8450] loop6: detected capacity change from 0 to 1024 [ 248.296247][ T8450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.765451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 250.209874][ T8450] EXT4-fs error (device loop6): ext4_xattr_set_entry:1672: inode #18: comm syz.6.501: corrupted xattr entries [ 250.457944][ T8468] syzkaller0: entered promiscuous mode [ 250.471629][ T8468] syzkaller0: entered allmulticast mode [ 250.490410][ T8449] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.501: bit already cleared for inode 18 [ 250.608699][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.658678][ T8470] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 250.846696][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.509'. [ 250.989683][ T8479] netlink: 'syz.5.509': attribute type 5 has an invalid length. [ 251.018172][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.509'. [ 252.443722][ T27] audit: type=1326 audit(1785868881.924:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 252.546117][ T27] audit: type=1326 audit(1785868881.924:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 252.649456][ T27] audit: type=1326 audit(1785868881.924:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 252.737034][ T27] audit: type=1326 audit(1785868881.924:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 252.835544][ T27] audit: type=1326 audit(1785868881.924:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 252.869936][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 252.919879][ T27] audit: type=1326 audit(1785868881.924:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 252.944353][ T27] audit: type=1326 audit(1785868881.924:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 252.968745][ T27] audit: type=1326 audit(1785868881.924:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 252.993715][ T27] audit: type=1326 audit(1785868881.924:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 253.030403][ T27] audit: type=1326 audit(1785868881.924:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93419e019 code=0x7ffc0000 [ 253.363340][ T8543] Mass Storage Function, version: 2009/09/11 [ 253.370054][ T8543] LUN: removable file: (no medium) [ 254.104025][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.111747][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.125726][ T1200] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 254.148939][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 254.707657][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.7.524'. [ 255.912981][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.921906][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.943645][ T1200] usb 1-1: Dual-Role OTG device on HNP port [ 256.178411][ T1200] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 256.188520][ T1200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.206543][ T1200] usb-storage 1-1:1.0: USB Mass Storage device detected [ 256.245590][ T1200] scsi host1: usb-storage 1-1:1.0 [ 256.344144][ T8566] loop3: detected capacity change from 0 to 512 [ 256.582074][ T173] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 256.785764][ T8566] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.526: Failed to acquire dquot type 1 [ 256.813223][ T8566] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.526: Failed to acquire dquot type 1 [ 256.829299][ T8566] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.526: bg 0: block 248: padding at end of block bitmap is not set [ 256.855072][ T8566] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 256.875902][ T8566] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.526: Failed to acquire dquot type 1 [ 256.894454][ T8566] EXT4-fs (loop3): 1 orphan inode deleted [ 256.907762][ T8566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.920861][ T8566] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.113816][ T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.507351][ T8558] fido_id[8558]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 257.736375][ T59] scsi 1:0:0:0: Direct-Access Linux File-Stor Gadget 0606 PQ: 0 ANSI: 2 [ 258.369926][ T173] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 258.612966][ T173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.661270][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.687062][ T173] usb 6-1: config 0 descriptor?? [ 258.694428][ T59] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 258.717800][ T8564] sd 1:0:0:0: Power-on or device reset occurred [ 258.775570][ T11] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 258.819076][ T8576] syzkaller0: entered promiscuous mode [ 258.882051][ T8576] syzkaller0: entered allmulticast mode [ 258.953815][ T173] usbhid 6-1:0.0: can't add hid device: -71 [ 258.960218][ T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 258.990684][ T173] usbhid: probe of 6-1:0.0 failed with error -71 [ 259.025798][ T173] usb 6-1: USB disconnect, device number 7 [ 263.451181][ T8621] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 267.219912][ T6298] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 267.439119][ T6298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.470805][ T6298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.520826][ T8676] fuse: Bad value for 'fd' [ 267.531444][ T6298] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.764128][ T6298] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.933128][ T6298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.143085][ T6298] usb 4-1: config 0 descriptor?? [ 268.655655][ T6298] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 269.034357][ T6298] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 269.346567][ T6298] usb 4-1: USB disconnect, device number 6 [ 269.621773][ T8699] loop7: detected capacity change from 0 to 256 [ 270.196509][ T8699] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.303070][ T8699] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 270.418909][ T8696] fido_id[8696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 270.489853][ T8699] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 270.550223][ T8699] exFAT-fs (loop7): failed to load alloc-bitmap [ 270.565580][ T8699] exFAT-fs (loop7): failed to recognize exfat type [ 270.764661][ T8712] netlink: 'syz.5.554': attribute type 1 has an invalid length. [ 270.869758][ T8712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.993595][ T8718] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 271.059434][ T23] IPVS: starting estimator thread 0... [ 271.147757][ T8725] syzkaller0: entered promiscuous mode [ 271.176157][ T8725] syzkaller0: entered allmulticast mode [ 271.205819][ T8723] IPVS: using max 22 ests per chain, 52800 per kthread [ 273.494234][ T8762] nvme nvme0: failed to connect socket: -512 [ 274.144153][ T8785] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 275.062810][ T8785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.216763][ T8791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.250043][ T8791] bond1: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 275.292661][ T8791] bond1: (slave ip6gre0): Error -95 calling set_mac_address [ 275.324115][ T8795] bond1: entered promiscuous mode [ 275.330646][ T8795] bond1: entered allmulticast mode [ 275.656366][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.6.579'. [ 275.754659][ T8820] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 275.767322][ T8820] retu-mfd: probe of 0-0002 failed with error -5 [ 275.786175][ T8815] bridge1: port 1(veth3) entered blocking state [ 275.792706][ T8815] bridge1: port 1(veth3) entered disabled state [ 275.804502][ T8820] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 275.823941][ T8815] veth3: entered allmulticast mode [ 275.843909][ T8815] veth3: entered promiscuous mode [ 275.857824][ T8820] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16) [ 275.885334][ T8821] bridge1: port 2(veth0_to_bond) entered blocking state [ 275.913074][ T8821] bridge1: port 2(veth0_to_bond) entered disabled state [ 275.929671][ T8821] veth0_to_bond: entered allmulticast mode [ 275.941338][ T8821] veth0_to_bond: entered promiscuous mode [ 276.630217][ T8828] virtio-fs: tag not found [ 277.515736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 280.632433][ T8868] syz_tun: entered allmulticast mode [ 280.688713][ T8866] syz_tun: left allmulticast mode [ 280.706696][ T8871] netlink: 'syz.6.587': attribute type 1 has an invalid length. [ 280.804161][ T8871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.911553][ T8875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.930074][ T8875] bond1: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 280.951188][ T8875] bond1: (slave ip6gre0): Error -95 calling set_mac_address [ 281.157965][ T8871] bond1: entered promiscuous mode [ 281.828209][ T8871] bond1: entered allmulticast mode [ 285.278982][ T8939] loop5: detected capacity change from 0 to 512 [ 287.713276][ T8958] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 287.787105][ T8958] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 287.830339][ T8958] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 287.925885][ T8958] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 287.969742][ T8958] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 288.027937][ T8958] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 288.060887][ T8958] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 288.097602][ T8958] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 288.131233][ T8958] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 288.306532][ T8979] syzkaller0: entered promiscuous mode [ 288.336011][ T8979] syzkaller0: entered allmulticast mode [ 296.454175][ T9048] loop5: detected capacity change from 0 to 32768 [ 296.463703][ T9048] overlayfs: failed to get inode (-116) [ 296.475977][ T9048] overlayfs: failed to get inode (-116) [ 296.481702][ T9048] overlayfs: failed to get inode (-116) [ 297.405807][ T9048] overlayfs: failed to get inode (-116) [ 297.411608][ T9048] overlayfs: failed to get inode (-116) [ 297.423339][ T9048] overlayfs: failed to get inode (-116) [ 297.430676][ T9048] overlayfs: failed to get inode (-116) [ 297.443871][ T9048] overlayfs: failed to get inode (-116) [ 297.456966][ T9048] overlayfs: failed to get inode (-116) [ 297.463914][ T9048] overlayfs: failed to get inode (-116) [ 298.713745][ T9057] netlink: 'syz.3.627': attribute type 12 has an invalid length. [ 298.723186][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 302.276182][ T9107] IPv6: sit1: Disabled Multicast RS [ 303.115685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 303.525888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 304.145780][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 304.147748][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 305.564372][ T9142] tipc: Enabling of bearer rejected, failed to enable media [ 306.324568][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.649'. [ 307.536114][ T9182] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 307.566846][ T9182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.596670][ T9182] bond2: (slave gretap1): making interface the new active one [ 307.606956][ T9182] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 307.665179][ T9182] syz.3.653 (9182) used greatest stack depth: 20056 bytes left [ 309.138757][ T9199] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 310.270023][ T9210] xt_l2tp: invalid flags combination: 0 [ 312.044313][ T9231] loop5: detected capacity change from 0 to 16 [ 312.163361][ T9231] erofs: (device loop5): mounted with root inode @ nid 36. [ 314.400376][ T9244] overlayfs: overlapping lowerdir path [ 318.407509][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.413875][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.646560][ T9271] fuse: Bad value for 'fd' [ 324.663677][ T9338] tipc: Enabled bearer , priority 0 [ 324.702288][ T9338] syzkaller0: entered promiscuous mode [ 324.721711][ T9338] syzkaller0: entered allmulticast mode [ 325.781550][ T9338] tipc: Resetting bearer [ 326.430865][ T9337] tipc: Resetting bearer [ 327.044707][ T9337] tipc: Disabling bearer [ 328.759114][ T9396] loop5: detected capacity change from 0 to 256 [ 328.777218][ T9396] exfat: Deprecated parameter 'namecase' [ 328.801265][ T9394] loop7: detected capacity change from 0 to 1024 [ 328.839398][ T9396] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 328.897294][ T9394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.610758][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.876743][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'. [ 342.241267][ T9511] loop5: detected capacity change from 0 to 1024 [ 343.019269][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.057979][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.129539][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.142575][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.174376][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.197202][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.230639][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.260060][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.321250][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.340585][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.393632][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.401130][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.422024][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.437930][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.450314][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.462936][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.483797][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.491660][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.515285][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.523000][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.546078][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.555924][ T9511] hfsplus: request for non-existent node 33423360 in B*Tree [ 345.507270][ T9550] syzkaller0: entered promiscuous mode [ 345.513256][ T9550] syzkaller0: entered allmulticast mode [ 345.583533][ T9550] tipc: Enabled bearer , priority 0 [ 346.635691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 347.756900][ T9550] tipc: Resetting bearer [ 347.841714][ T9546] tipc: Resetting bearer [ 347.865682][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 347.968570][ T9546] tipc: Disabling bearer [ 349.412759][ T9573] loop7: detected capacity change from 0 to 1024 [ 349.565256][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.615505][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.675981][ T9576] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.683357][ T9576] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.775999][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.783360][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.836978][ T9576] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.844358][ T9576] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.908245][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.942057][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.995892][ T9576] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.003290][ T9576] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.059080][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.080067][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.141140][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.155485][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.195608][ T9576] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.220875][ T9576] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.248605][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.265828][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.295355][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.315571][ T9573] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.684955][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.691624][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.697803][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.703913][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.710120][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.716271][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.722387][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.728538][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.734678][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.740828][ T9585] tc action pedit 'at' offset 2 out of bounds [ 350.747046][ T9585] TC_ACT_REPEAT abuse ? [ 351.756294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 357.604897][ T9662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.959961][ T9734] C: renamed from team_slave_0 [ 363.983332][ T9734] netlink: 'syz.5.753': attribute type 1 has an invalid length. [ 363.991232][ T9734] netlink: 152 bytes leftover after parsing attributes in process `syz.5.753'. [ 364.000268][ T9734] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 367.275401][ C1] hrtimer: interrupt took 51232 ns [ 367.940092][ T9770] syzkaller0: entered promiscuous mode [ 367.980380][ T9770] syzkaller0: entered allmulticast mode [ 369.205525][ T9770] TC_ACT_REPEAT abuse ? [ 371.565751][ T6298] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 371.755524][ T6298] usb 6-1: Using ep0 maxpacket: 16 [ 371.779439][ T6298] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.823777][ T6298] usb 6-1: config 0 has no interfaces? [ 371.849275][ T6298] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 371.895505][ T6298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.935420][ T6298] usb 6-1: Product: syz [ 371.941287][ T6298] usb 6-1: Manufacturer: syz [ 371.963384][ T6298] usb 6-1: SerialNumber: syz [ 372.011588][ T6298] usb 6-1: config 0 descriptor?? [ 373.055415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 373.940430][ T9793] ipvlan2: entered promiscuous mode [ 373.972541][ T9793] ipvlan2: entered allmulticast mode [ 373.982753][ T9793] bond0: entered allmulticast mode [ 374.014443][ T9793] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 374.022040][ T9793] team0: Device ipvlan2 failed to register rx_handler [ 374.089784][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.097189][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.103991][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.110830][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.117682][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.124458][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.131261][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.138048][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.144813][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.151590][ T9829] tc action pedit offset must be on 32 bit boundaries [ 374.158477][ T9829] 0: reclassify loop, rule prio 0, protocol 800 [ 374.248836][ T1200] usb 6-1: USB disconnect, device number 8 [ 376.078857][ T9836] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 376.087452][ T9836] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 376.095992][ T9836] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 377.215956][ T9844] loop7: detected capacity change from 0 to 40427 [ 377.237391][ T9844] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 377.245737][ T9844] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 377.294207][ T9844] F2FS-fs (loop7): invalid crc value [ 377.336629][ T9844] F2FS-fs (loop7): Found nat_bits in checkpoint [ 377.419352][ T9844] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 377.426869][ T9844] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 378.808179][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.814554][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.261676][ T9901] syz.3.792 (9901) used greatest stack depth: 17512 bytes left [ 388.005437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 390.696322][ T9933] overlayfs: failed to clone lowerpath [ 391.987305][ T9938] tipc: Started in network mode [ 392.006583][ T9938] tipc: Node identity f2ab765836d8, cluster identity 4711 [ 392.014134][ T9938] tipc: Enabled bearer , priority 0 [ 392.033141][ T9938] syzkaller0: entered promiscuous mode [ 392.041226][ T9938] syzkaller0: entered allmulticast mode [ 392.061030][ T9938] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 392.121176][ T9938] tipc: Resetting bearer [ 392.183835][ T9936] tipc: Resetting bearer [ 392.270078][ T9936] tipc: Disabling bearer [ 392.418263][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.799'. [ 392.441534][ T9946] dummy0: entered promiscuous mode [ 392.441990][ T9946] macsec1: entered promiscuous mode [ 392.442530][ T9946] macsec1: entered allmulticast mode [ 392.442582][ T9946] dummy0: entered allmulticast mode [ 393.964844][ T9953] overlayfs: failed to clone upperpath [ 394.640867][ T9958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.480287][ T9982] syzkaller0: entered promiscuous mode [ 398.489025][ T9982] syzkaller0: entered allmulticast mode [ 400.274611][ T9994] loop5: detected capacity change from 0 to 1024 [ 400.313472][ T9994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.470298][ T9998] overlayfs: failed to clone upperpath [ 400.818290][ T9994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.729697][ T6455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.875167][T10045] netlink: 'syz.6.823': attribute type 1 has an invalid length. [ 408.975111][T10045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.027906][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.6.823'. [ 409.293272][T10051] loop5: detected capacity change from 0 to 40427 [ 409.337694][T10051] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 409.345628][T10051] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 409.358707][T10051] F2FS-fs (loop5): invalid crc value [ 409.383266][T10051] F2FS-fs (loop5): Found nat_bits in checkpoint [ 409.390307][T10049] bond2: (slave geneve2): making interface the new active one [ 409.449737][T10049] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 409.458929][T10051] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 409.458988][T10051] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 409.882251][T10063] syz.5.824: attempt to access beyond end of device [ 409.882251][T10063] loop5: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 410.883219][T10064] loop7: detected capacity change from 0 to 512 [ 411.013408][T10064] EXT4-fs error (device loop7): __ext4_iget:5079: inode #11: block 16777240: comm syz.7.825: invalid block [ 411.130423][T10064] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.825: couldn't read orphan inode 11 (err -117) [ 411.146555][T10064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.251736][T10075] overlayfs: failed to clone upperpath [ 411.825514][T10072] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 411.941908][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.452462][T10076] process '/newroot/245/file0' started with executable stack [ 413.783880][T10090] loop7: detected capacity change from 0 to 2048 [ 414.095639][T10090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.188727][T10128] overlayfs: failed to resolve './file2': -2 [ 425.755380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 426.815508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 427.045163][T10179] syzkaller0: entered promiscuous mode [ 427.051241][T10179] syzkaller0: entered allmulticast mode [ 429.543803][T10202] loop5: detected capacity change from 0 to 64 [ 430.405858][ T5789] Bluetooth: hci2: Malformed LE Event: 0x1b [ 431.819128][T10239] tipc: Enabling of bearer rejected, failed to enable media [ 432.259959][ T5789] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 434.129291][T10269] syz.5.866 (10269): drop_caches: 2 [ 436.731100][T10290] netlink: 144 bytes leftover after parsing attributes in process `syz.5.872'. [ 436.793259][T10290] netlink: 144 bytes leftover after parsing attributes in process `syz.5.872'. [ 438.550304][T10298] netlink: 'syz.5.875': attribute type 13 has an invalid length. [ 438.615639][T10298] netlink: 'syz.5.875': attribute type 17 has an invalid length. [ 438.936717][T10298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.243121][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.256825][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.745944][T10313] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 440.759972][T10313] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 440.767012][T10313] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 440.775000][T10313] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 440.782067][T10313] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 440.789478][T10313] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 440.801035][T10313] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 440.811543][T10314] netlink: 'syz.5.878': attribute type 1 has an invalid length. [ 440.819897][T10314] netlink: 'syz.5.878': attribute type 2 has an invalid length. [ 440.835229][T10313] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 440.842065][T10313] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 440.850652][T10313] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 440.857678][T10313] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 440.864918][T10313] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 440.871819][T10313] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 440.878810][T10313] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 440.886320][T10313] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 440.893759][T10313] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 440.900699][T10313] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 440.907943][T10313] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 440.914838][T10313] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 440.921711][T10313] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 440.928431][T10313] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 440.935472][T10313] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 440.942145][T10313] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 440.950732][T10313] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 440.957514][T10313] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 440.964256][T10313] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 442.398760][ T173] IPVS: starting estimator thread 0... [ 442.495504][T10315] IPVS: using max 31 ests per chain, 74400 per kthread [ 442.777145][T10318] overlayfs: failed to resolve './file2': -2 [ 444.468812][T10327] loop7: detected capacity change from 0 to 64 [ 445.480042][T10327] syz.7.880: attempt to access beyond end of device [ 445.480042][T10327] loop7: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 445.494111][T10327] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 445.503635][T10327] syz.7.880: attempt to access beyond end of device [ 445.503635][T10327] loop7: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 445.517049][T10327] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 445.525913][T10327] syz.7.880: attempt to access beyond end of device [ 445.525913][T10327] loop7: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 445.539264][T10327] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 445.548061][T10327] syz.7.880: attempt to access beyond end of device [ 445.548061][T10327] loop7: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 445.562329][T10327] Buffer I/O error on dev loop7, logical block 162, lost async page write [ 445.571204][T10327] syz.7.880: attempt to access beyond end of device [ 445.571204][T10327] loop7: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 445.584578][T10327] Buffer I/O error on dev loop7, logical block 163, lost async page write [ 445.593458][T10327] syz.7.880: attempt to access beyond end of device [ 445.593458][T10327] loop7: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 445.606821][T10327] Buffer I/O error on dev loop7, logical block 167, lost async page write [ 445.615572][T10327] syz.7.880: attempt to access beyond end of device [ 445.615572][T10327] loop7: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 445.628913][T10327] Buffer I/O error on dev loop7, logical block 169, lost async page write [ 445.637944][T10327] syz.7.880: attempt to access beyond end of device [ 445.637944][T10327] loop7: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 445.651351][T10327] Buffer I/O error on dev loop7, logical block 171, lost async page write [ 445.661642][T10327] syz.7.880: attempt to access beyond end of device [ 445.661642][T10327] loop7: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 445.675274][T10327] Buffer I/O error on dev loop7, logical block 172, lost async page write [ 445.684041][T10327] syz.7.880: attempt to access beyond end of device [ 445.684041][T10327] loop7: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 445.697444][T10327] Buffer I/O error on dev loop7, logical block 173, lost async page write [ 448.637952][T10337] loop7: detected capacity change from 0 to 512 [ 449.948618][T10337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.040384][T10337] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.235858][T10335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.335948][T10335] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 450.389442][T10335] bridge0: port 3(syz_tun) entered blocking state [ 450.441621][T10335] bridge0: port 3(syz_tun) entered disabled state [ 450.467398][T10335] syz_tun: entered allmulticast mode [ 450.516926][T10335] bridge0: port 3(syz_tun) entered blocking state [ 450.523745][T10335] bridge0: port 3(syz_tun) entered forwarding state [ 451.818933][ T7362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.065840][T10371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.282723][T10396] loop5: detected capacity change from 0 to 512 [ 460.290919][T10396] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 460.305024][T10396] EXT4-fs (loop5): can't mount with both data=journal and dax [ 461.918032][T10401] syz.5.902 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 463.807284][T10407] tipc: Cannot configure node identity twice [ 465.077713][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.904'. [ 465.086861][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.904'. [ 465.865689][T10416] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.875185][T10416] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.883992][T10416] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.892870][T10416] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.925944][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.904'. [ 465.935751][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.904'. [ 466.758506][T10424] fuse: Bad value for 'fd' [ 471.474973][T10453] loop7: detected capacity change from 0 to 8 [ 471.551886][T10453] SQUASHFS error: Unable to read inode 0x11f [ 472.702331][T10459] bond0: option use_carrier: invalid value (9) [ 478.944939][T10488] loop7: detected capacity change from 0 to 32768 [ 479.046072][T10488] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 480.099128][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 480.099168][ T27] audit: type=1800 audit(1785869108.924:57): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.922" name="file1" dev="loop7" ino=17059 res=0 errno=0 [ 480.481544][ T7362] ocfs2: Unmounting device (7,7) on (node local) [ 486.737184][ T5789] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 486.879234][ T2931] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 488.357645][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.937'. [ 488.401982][ T5789] Bluetooth: hci0: unexpected subevent 0x06 length: 18 > 10 [ 489.460183][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.940'. [ 489.472538][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.940'. [ 489.481675][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.940'. [ 489.491666][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.940'. [ 489.500686][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.940'. [ 490.135483][ T27] audit: type=1326 audit(1785869119.244:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.7.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f403619e019 code=0x0 [ 490.501323][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 490.758633][T10567] syz_tun: entered allmulticast mode [ 491.567496][T10562] syz_tun: left allmulticast mode [ 493.697264][T10581] netlink: 60 bytes leftover after parsing attributes in process `syz.6.948'. [ 494.940434][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.950'. [ 500.393976][T10625] vivid-001: kernel_thread() failed [ 501.672133][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.728534][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.345480][T10675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.438481][T10678] program syz.5.965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.084242][T10697] bridge1: entered promiscuous mode [ 509.090373][T10697] bridge1: entered allmulticast mode [ 512.558203][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.6.975'. [ 516.669155][T10747] overlayfs: failed to clone upperpath [ 517.241002][T10746] loop5: detected capacity change from 0 to 1024 [ 518.835931][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 519.847154][ T9] usb 6-1: device descriptor read/all, error -71 [ 531.333008][T10816] Error parsing options; rc = [-22] [ 531.416415][T10817] loop5: detected capacity change from 0 to 64 [ 531.468886][ C0] ------------[ cut here ]------------ [ 531.477022][ C0] WARNING: CPU: 0 PID: 10815 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 531.492252][ C0] Modules linked in: [ 531.497023][ C0] CPU: 0 PID: 10815 Comm: syz.5.1001 Not tainted syzkaller #0 [ 531.506713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.519144][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 531.526627][ C0] Code: f7 4c 89 ef e8 70 5b ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 ab 6f 7c f7 0f 0b e9 61 f8 ff ff e8 9f 6f 7c f7 <0f> 0b e9 85 fb ff ff e8 93 6f 7c f7 48 c7 c7 60 bd 65 8e 4c 89 e6 [ 531.555537][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 531.562365][ C0] RAX: ffffffff8a0b01e1 RBX: dffffc0000000000 RCX: ffff888024e93c00 [ 531.573052][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.583352][ C0] RBP: 0000000000000000 R08: ffff888024e93c00 R09: 0000000000000003 [ 531.592538][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c3a6440 [ 531.601618][ C0] R13: ffff88802eecf024 R14: ffff88805c3a6930 R15: ffff88802eecf000 [ 531.610892][ C0] FS: 00007f39550ae6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 531.621120][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.630123][ C0] CR2: 00007f39550adff8 CR3: 000000005ee3b000 CR4: 00000000003506f0 [ 531.641202][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001e5a [ 531.653427][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 531.664146][ C0] Call Trace: [ 531.668776][ C0] [ 531.672202][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 531.678561][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 531.688584][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 531.697296][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 531.704328][ C0] __iterate_interfaces+0x225/0x4c0 [ 531.713190][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 531.720910][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 531.729133][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 531.736395][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 531.744481][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 531.750048][ C0] ? hw_scan_work+0xf10/0xf10 [ 531.755241][ C0] __hrtimer_run_queues+0x525/0xc10 [ 531.761148][ C0] ? hrtimer_interrupt+0x980/0x980 [ 531.768849][ C0] ? read_tsc+0x9/0x20 [ 531.773105][ C0] hrtimer_run_softirq+0x177/0x290 [ 531.778647][ C0] handle_softirqs+0x27d/0x820 [ 531.783869][ C0] ? read_tsc+0x9/0x20 [ 531.788042][ C0] ? ktime_get+0x24b/0x280 [ 531.792523][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 531.797642][ C0] ? do_softirq+0x1a0/0x1a0 [ 531.802325][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 531.807916][ C0] __irq_exit_rcu+0xd3/0x190 [ 531.812928][ C0] ? irq_exit_rcu+0x20/0x20 [ 531.817928][ C0] irq_exit_rcu+0x9/0x20 [ 531.824399][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 531.831800][ C0] [ 531.834959][ C0] [ 531.838556][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.845359][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 531.852187][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 fb 4e c6 f6 65 8b 05 5c 1d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 531.873331][ C0] RSP: 0018:ffffc9000b57f580 EFLAGS: 00000206 [ 531.880153][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 6693e4b794f1b200 [ 531.888261][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 531.896888][ C0] RBP: ffffc9000b57f610 R08: ffffffff911eb5af R09: 1ffffffff223d6b5 [ 531.905593][ C0] R10: dffffc0000000000 R11: fffffbfff223d6b6 R12: dffffc0000000000 [ 531.913906][ C0] R13: 0000000000000000 R14: ffff88802c707ec0 R15: 1ffff920016afeb0 [ 531.922243][ C0] ? _raw_spin_unlock+0x40/0x40 [ 531.927222][ C0] ? __wake_up_common+0x28e/0x4d0 [ 531.932495][ C0] __wake_up_sync_key+0x12c/0x1a0 [ 531.937819][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 531.944050][ C0] ? sock_load_diag_module+0x140/0x140 [ 531.950053][ C0] __unix_dgram_recvmsg+0x4bb/0xd90 [ 531.955938][ C0] ? unix_unhash+0x10/0x10 [ 531.960426][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 531.967439][ C0] ? lock_chain_count+0x20/0x20 [ 531.972645][ C0] ? mark_lock+0x94/0x320 [ 531.977099][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 531.982194][ C0] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 531.988118][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 531.994451][ C0] ____sys_recvmsg+0x4d7/0x5d0 [ 532.002417][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 532.007761][ C0] ? import_iovec+0x73/0xa0 [ 532.012459][ C0] ___sys_recvmsg+0x214/0x590 [ 532.018059][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 532.023312][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 532.029956][ C0] ? __might_fault+0xc6/0x120 [ 532.036325][ C0] ? __might_fault+0xaa/0x120 [ 532.041726][ C0] do_recvmmsg+0x377/0x810 [ 532.046831][ C0] ? __sys_recvmmsg+0x290/0x290 [ 532.054802][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 532.061279][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 532.068162][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 532.074587][ C0] ? do_recvmmsg+0x810/0x810 [ 532.079854][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 532.085560][ C0] do_syscall_64+0x55/0xb0 [ 532.090712][ C0] ? clear_bhb_loop+0x40/0x90 [ 532.095789][ C0] ? clear_bhb_loop+0x40/0x90 [ 532.102977][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.110739][ C0] RIP: 0033:0x7f395419e019 [ 532.115386][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.135742][ C0] RSP: 002b:00007f39550ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 532.145839][ C0] RAX: ffffffffffffffda RBX: 00007f3954426090 RCX: 00007f395419e019 [ 532.154493][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 532.163354][ C0] RBP: 00007f395423500c R08: 0000000000000000 R09: 0000000000000000 [ 532.172009][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 532.180297][ C0] R13: 00007f3954426128 R14: 00007f3954426090 R15: 00007ffe117e7dc8 [ 532.188431][ C0] [ 532.191515][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 532.198934][ C0] CPU: 0 PID: 10815 Comm: syz.5.1001 Not tainted syzkaller #0 [ 532.206713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.217119][ C0] Call Trace: [ 532.220623][ C0] [ 532.223528][ C0] dump_stack_lvl+0x18c/0x250 [ 532.228307][ C0] ? show_regs_print_info+0x20/0x20 [ 532.233659][ C0] ? load_image+0x420/0x420 [ 532.238313][ C0] panic+0x2ca/0x720 [ 532.242327][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 532.247005][ C0] __warn+0x2e0/0x470 [ 532.251046][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 532.256916][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 532.262700][ C0] report_bug+0x2be/0x4f0 [ 532.267148][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 532.272948][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 532.278871][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 532.285269][ C0] handle_bug+0xcf/0x120 [ 532.289710][ C0] exc_invalid_op+0x1a/0x50 [ 532.294461][ C0] asm_exc_invalid_op+0x1a/0x20 [ 532.299466][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 532.305903][ C0] Code: f7 4c 89 ef e8 70 5b ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 ab 6f 7c f7 0f 0b e9 61 f8 ff ff e8 9f 6f 7c f7 <0f> 0b e9 85 fb ff ff e8 93 6f 7c f7 48 c7 c7 60 bd 65 8e 4c 89 e6 [ 532.326356][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 532.333914][ C0] RAX: ffffffff8a0b01e1 RBX: dffffc0000000000 RCX: ffff888024e93c00 [ 532.342924][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.350961][ C0] RBP: 0000000000000000 R08: ffff888024e93c00 R09: 0000000000000003 [ 532.359152][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c3a6440 [ 532.367157][ C0] R13: ffff88802eecf024 R14: ffff88805c3a6930 R15: ffff88802eecf000 [ 532.375360][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 532.381257][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 532.387304][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 532.392902][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 532.398504][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 532.405324][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 532.411114][ C0] __iterate_interfaces+0x225/0x4c0 [ 532.416534][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 532.422797][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 532.430608][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 532.436990][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 532.444132][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 532.449389][ C0] ? hw_scan_work+0xf10/0xf10 [ 532.454141][ C0] __hrtimer_run_queues+0x525/0xc10 [ 532.459411][ C0] ? hrtimer_interrupt+0x980/0x980 [ 532.464676][ C0] ? read_tsc+0x9/0x20 [ 532.469280][ C0] hrtimer_run_softirq+0x177/0x290 [ 532.474880][ C0] handle_softirqs+0x27d/0x820 [ 532.479692][ C0] ? read_tsc+0x9/0x20 [ 532.483818][ C0] ? ktime_get+0x24b/0x280 [ 532.488605][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 532.493805][ C0] ? do_softirq+0x1a0/0x1a0 [ 532.498548][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 532.504510][ C0] __irq_exit_rcu+0xd3/0x190 [ 532.509421][ C0] ? irq_exit_rcu+0x20/0x20 [ 532.514333][ C0] irq_exit_rcu+0x9/0x20 [ 532.519009][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 532.524805][ C0] [ 532.527889][ C0] [ 532.530976][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.537019][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 532.543587][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 fb 4e c6 f6 65 8b 05 5c 1d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 532.563959][ C0] RSP: 0018:ffffc9000b57f580 EFLAGS: 00000206 [ 532.570288][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 6693e4b794f1b200 [ 532.579024][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 532.588757][ C0] RBP: ffffc9000b57f610 R08: ffffffff911eb5af R09: 1ffffffff223d6b5 [ 532.598007][ C0] R10: dffffc0000000000 R11: fffffbfff223d6b6 R12: dffffc0000000000 [ 532.606302][ C0] R13: 0000000000000000 R14: ffff88802c707ec0 R15: 1ffff920016afeb0 [ 532.614602][ C0] ? _raw_spin_unlock+0x40/0x40 [ 532.620608][ C0] ? __wake_up_common+0x28e/0x4d0 [ 532.626415][ C0] __wake_up_sync_key+0x12c/0x1a0 [ 532.631581][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 532.637620][ C0] ? sock_load_diag_module+0x140/0x140 [ 532.643179][ C0] __unix_dgram_recvmsg+0x4bb/0xd90 [ 532.648569][ C0] ? unix_unhash+0x10/0x10 [ 532.653016][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 532.659317][ C0] ? lock_chain_count+0x20/0x20 [ 532.664229][ C0] ? mark_lock+0x94/0x320 [ 532.668793][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 532.673934][ C0] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 532.680052][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 532.685822][ C0] ____sys_recvmsg+0x4d7/0x5d0 [ 532.690628][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 532.695827][ C0] ? import_iovec+0x73/0xa0 [ 532.700405][ C0] ___sys_recvmsg+0x214/0x590 [ 532.705532][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 532.710416][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 532.716119][ C0] ? __might_fault+0xc6/0x120 [ 532.721411][ C0] ? __might_fault+0xaa/0x120 [ 532.726136][ C0] do_recvmmsg+0x377/0x810 [ 532.730708][ C0] ? __sys_recvmmsg+0x290/0x290 [ 532.735799][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 532.742032][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 532.748327][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 532.753454][ C0] ? do_recvmmsg+0x810/0x810 [ 532.758117][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 532.763838][ C0] do_syscall_64+0x55/0xb0 [ 532.768335][ C0] ? clear_bhb_loop+0x40/0x90 [ 532.773224][ C0] ? clear_bhb_loop+0x40/0x90 [ 532.777931][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.784144][ C0] RIP: 0033:0x7f395419e019 [ 532.788615][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.808654][ C0] RSP: 002b:00007f39550ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 532.818087][ C0] RAX: ffffffffffffffda RBX: 00007f3954426090 RCX: 00007f395419e019 [ 532.826291][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 532.834848][ C0] RBP: 00007f395423500c R08: 0000000000000000 R09: 0000000000000000 [ 532.843285][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 532.852623][ C0] R13: 00007f3954426128 R14: 00007f3954426090 R15: 00007ffe117e7dc8 [ 532.861717][ C0] [ 532.865745][ C0] Kernel Offset: disabled [ 532.870454][ C0] Rebooting in 86400 seconds..