last executing test programs: 9m0.649858721s ago: executing program 2 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') pread64(r3, &(0x7f0000000040)=""/30, 0x1e, 0x800000000040042) syz_emit_vhci(0x0, 0x47) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8850, 0x0, 0x0) 8m57.024568202s ago: executing program 2 (id=75): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 8m55.657346227s ago: executing program 2 (id=78): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4", 0x2f}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d", 0x16}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8m53.178244589s ago: executing program 2 (id=85): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f00000002c0)={[{@dioread_lock}, {@noblock_validity}, {@delalloc}, {@block_validity}, {@nolazytime}, {@grpjquota, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, 0x0, 0x0) fanotify_init(0x8, 0x80000) ioprio_set$pid(0x2, 0x0, 0x2000) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 8m51.645715628s ago: executing program 2 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 8m48.550358876s ago: executing program 2 (id=97): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc8, 0x3}}}, 0x8) 8m45.830224725s ago: executing program 32 (id=97): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc8, 0x3}}}, 0x8) 6m43.615691353s ago: executing program 3 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x10, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) 6m41.706117252s ago: executing program 3 (id=377): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xc}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x5]}}}}, 0x19) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x9, "315dcd4542a918"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 6m39.319751722s ago: executing program 3 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$setstatus(r0, 0x4, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000040)={0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8000) 6m36.522107313s ago: executing program 3 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='memory'}, {@subsystem='cpuacct'}]}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x80000, 0x8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000140)='syz1\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804, &(0x7f0000002100)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@rodir}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlateno}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}]}, 0x1, 0x281, &(0x7f0000000440)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) open_tree(r2, &(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@multicast2}]}]}}, @timestamp}}}}, 0x0) 6m33.0744242s ago: executing program 3 (id=391): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) shutdown(0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) r3 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0xcb) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x2c, 0x0) syz_usb_connect$uac3(0x6, 0x0, 0x0, &(0x7f0000000640)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x1, 0x6, 0x6, 0x40, 0xfd}, 0x2b, 0x0, 0x2, [{0x2, 0x0}, {0x2, &(0x7f0000000540)=ANY=[@ANYBLOB]}]}) bind$can_j1939(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lstat(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 6m30.574039283s ago: executing program 3 (id=398): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xbf, &(0x7f0000000600)=""/191, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000829000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) landlock_restrict_self(0xffffffffffffffff, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 6m29.357761624s ago: executing program 33 (id=398): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xbf, &(0x7f0000000600)=""/191, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000829000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) landlock_restrict_self(0xffffffffffffffff, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 5m18.762086208s ago: executing program 4 (id=550): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x9, 0x6, 0x9, 0x40}}}, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$exfat(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1380443, 0x0, 0x3, 0x0, &(0x7f0000000000)) 5m17.703892185s ago: executing program 4 (id=553): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setsig(r0, 0xa, 0x21) socket$inet_udp(0x2, 0x2, 0x0) unlinkat(r0, 0x0, 0x200) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x104000, 0x180) creat(&(0x7f0000000100)='./file0\x00', 0x0) 5m16.529856414s ago: executing program 4 (id=559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) 5m11.331806126s ago: executing program 4 (id=568): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) mount(&(0x7f0000000380)=@nullb, 0x0, &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) unshare(0x2c020400) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="242007ffffffffffff601d4f35a4c6440cfe8a0febf006822b163cba0694c0d7f203a686138490ef5f61241995c1d53230fb36c566f9cde2e584da5d21e90b011a79d81982a2c4e23a555da3efc464165b0bea614ac0206a0501c1333967b65b16217171874ac2bdb1ac136c09487b8ba6f0e0506849017304876cb84028ff"], 0xa) r4 = open$dir(0x0, 0x200, 0x80) r5 = syz_open_procfs$userns(r0, &(0x7f0000000440)) mount_setattr(r4, 0x0, 0x0, &(0x7f0000000480)={0x70, 0x71, 0xe0000, {r5}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010003904000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500"], 0x4c}}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 5m7.071761524s ago: executing program 4 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x0, 0x1, 0x5ae9}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r6}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 5m5.053044934s ago: executing program 4 (id=580): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m49.849851949s ago: executing program 34 (id=580): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m12.270821474s ago: executing program 5 (id=677): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6}) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4m11.199079971s ago: executing program 5 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) fcntl$addseals(r3, 0x409, 0xe) 4m9.012867217s ago: executing program 5 (id=684): semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0, @ANYRES8=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x80007, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) 4m6.844611822s ago: executing program 5 (id=689): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6}) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4m1.583320155s ago: executing program 5 (id=699): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x2000, 0x0) 3m58.082729653s ago: executing program 5 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) 3m42.485363447s ago: executing program 35 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) 1m32.99200635s ago: executing program 1 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) truncate(0x0, 0x7f0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r6, 0x3) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) write(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 1m31.407742479s ago: executing program 1 (id=992): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r5, 0xb0d, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x6, 0x8, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x400000000000032a}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4) 1m28.032670495s ago: executing program 1 (id=997): creat(&(0x7f0000000200)='./file0\x00', 0x109) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x50180, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xea, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x202003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='guest,vers=2.1\x00') syz_genetlink_get_family_id$devlink(0x0, r6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000100)={0xb7ea1df7be7b3c6a, 0x0, 0x2}) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1m14.008393859s ago: executing program 1 (id=1024): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x60, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv4_newaddr={0x18, 0x14, 0x100, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0xa6, 0xff}}, 0x18}}, 0x40000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 1m3.71502224s ago: executing program 1 (id=1047): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x101, 0x2) syz_open_dev$sndctrl(&(0x7f0000000080), 0x100000003, 0x410200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r3 = semget(0x1, 0x4, 0x39c) semop(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8,nocompress\x00hide,dmode=0x0000000000000005,map=off,cruftAsession=0x000000000000000a,unhide,unhide,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f726f636b2c67ed2a4b", @ANYRESHEX=0x0, @ANYBLOB=',norock,\x00'], 0x2, 0x69a, &(0x7f0000000840)="$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") 57.501859456s ago: executing program 1 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) rt_tgsigqueueinfo(r0, r2, 0x28, &(0x7f0000000200)={0x2c, 0x4993, 0x8}) 41.707228616s ago: executing program 36 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) rt_tgsigqueueinfo(r0, r2, 0x28, &(0x7f0000000200)={0x2c, 0x4993, 0x8}) 16.469726204s ago: executing program 8 (id=1117): r0 = socket$inet(0x2, 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r1 = fanotify_init(0x40, 0x80000) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r6, 0x0) getdents64(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) 15.203939306s ago: executing program 8 (id=1118): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "b2f85ddd571a5001"}}}, 0x11) 14.903113943s ago: executing program 8 (id=1119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) write$yama_ptrace_scope(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0xffffffffffffff24, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r7, 0x0, 0x3, 0x1}}, 0x20) eventfd2(0x4, 0x800) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {0x2}, {}, @raw32={[0x2600]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 8.937584724s ago: executing program 6 (id=1130): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6}) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 8.594478592s ago: executing program 8 (id=1131): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x34}}, 0x4000080) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0xffffff00, 'pim6reg0\x00', 'veth0\x00', {0xff}, {}, 0x8, 0x2, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x1, 0x4, 0x1, 0x1], 0x2, 0x7}, {0xffffffffffffffff, [0x0, 0x1, 0x3, 0x0, 0x3], 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff, 'veth1_virt_wifi\x00', 'sit0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x2}, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x5, 0x8000}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x254) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e1d, 0x100a86c, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xa0000}, 0x1c) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 7.016294412s ago: executing program 0 (id=1135): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 6.663268381s ago: executing program 0 (id=1136): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 6.055894947s ago: executing program 0 (id=1137): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) 5.778338803s ago: executing program 6 (id=1138): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6}) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 5.726029875s ago: executing program 7 (id=1139): r0 = socket$inet(0x2, 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r1 = fanotify_init(0x40, 0x80000) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r6, 0x0) getdents64(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) 5.337501385s ago: executing program 6 (id=1140): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6}) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 3.748654725s ago: executing program 0 (id=1141): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x5, 0x8000]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000200000000", @ANYRES32, @ANYBLOB="ffff00"/19, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x5, 0x6, 0x20, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x2, 0x2}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x10}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x20000011}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.748423145s ago: executing program 7 (id=1142): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 3.677816727s ago: executing program 7 (id=1143): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'batadv_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f0000000180)='#{)!!\\(-,]@-\x00', 0x4080, &(0x7f00000001c0)={@align=0xb0, {0x60c, 0x101, 0x9, 0x4}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xc38f}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x6232, @private0, 0x100}, @in6={0xa, 0x4e24, 0x81, @private2, 0xfffffffa}, @in6={0xa, 0x4e22, 0x400, @empty, 0x4}], 0x64) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x3, 0x7fff0006}]}) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x40000002, 0x0, 0x0) 3.677089357s ago: executing program 6 (id=1152): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) 2.281450092s ago: executing program 7 (id=1144): mkdirat(0xffffffffffffff9c, 0x0, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x43f, 0x6, 0x80c20048}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r8 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90c, 0x40001) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x41045508, 0xfffffffffffffffe) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, 0x0, &(0x7f0000000bc0)=0x2c) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 2.265412503s ago: executing program 6 (id=1154): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0x0, 0x59a, &(0x7f00000006c0)="$eJzs3c9rJFkdAPBvdbrzYyaaqHtYhV0Hd2Bm0UkmO+5uENkZQbwtKLuCtzFmekKYTjrkx84kLJLBP0AQ0QUvevIi+AcIMgfvirDg3sUVZdBZBfegW1I/Oj863SYz052WzucDr+tVvar6vtedrq6qV6kK4My6EBE3ImIkIl6MiKlyeqVMsVukbL4PHr29mKUk0vSNvyWRlNOy2ZIyZc6Xi40Xg0MulsON7Z07C41Gfb0cn91cWZvd2N65sryysFRfqq9euzb3yvyr8y/PX+1JO7N2vfbVP//o+z//2mu//sLdP9786+XvZvWdLMtb7ei14j2pZe/FnmpErPcj2ACMlO2pResFAID/Z9k+/icj4nP5/v9UjOR7c92NHsgnfa8dAAAA0Avp9cn4dxKRAgAAAEOrkl8Dm1RmymsBJqNSmZkpruF9Js5VGs2Nzc/fbm6t3iqulZ2OWuX2cqN+NeLCVDGeTCw36nN7ZxRqSVb+Ul6WpeTQNcA/nJrIy2cWm41bgzjhAQAAAGfQ+bbj/39OFcf/AAAAwJCZHnQFAAAAgL47cPz/8UHWAwAAAOifJ+j/H+1HPQAAAIC++Prrr2cpbT3/+tZb21t3mm9duVXfuDOzsrU4s9hcX5tZajaXGulYxErb4kn7I74bzebaF2N1697sZn1jc3Zje+fmSnNrdfPm8qFHYLeM9LNtAAAAQOETn33wXhIRu1+a2Ds+z/v2ux2Zu1cADI3KCedLs5f3+1sX4HQ5AQ9nV/V/F7vMF4ZYrRgkg64HMDjHbQDGu83xu37UBgAA6IdLn37wXprk/f95ivKkX3X/3AAwpE7a/w8Mny79/+nUaVcEOHXH9P8DQ6zmCkA484727o8dGut0845c0f9/4/gIaXrsugAAgL6azFNSmSn7Aiej8mFaiOmoJbeXG/Wr5XMB/zBVG8vG5/IlE/80AAAAAAAAAAAAAAAAAAAAAAAAAAAnlKZJpE+g+kRLAQAAAIMQUflLUj7/69LUxcn28wOjyYf5o4A/StP07k/e+PG9hc3N9bls+t/z6aMRsflOOf2l7ucZ3jzX19MYAAAAQMTeU/6L4/TagGsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLD64NHbi610mnEffiUipjvFr8Z4PhyPWkSc+0cS1QPLJREx0oP4u/cj4tlO8ZOsWjFd1qI9fiUiJvJa9D3+c2madox//qmjw9n2INv+3Djy/Rvdn6Pz979apOtPG7/79q+yt/0baY9fLbZ/HzthjM+8+8vZA6Pf3M+OFeXVztufVvyky/b3hU7BqkcnffvNnZ1udUt/FnGp4+9PcijW7ObK2uzG9s6V5ZWFpfpSffXatblX5l+df3n+6uzt5Ua9fO0Y4wfP/eqjbvEf/ibiXBm/9aGn5Q/LdDH4ctn+hfb2X8wytW5r3vefd+89+lSRrbWtIh7ej7j8QufP/9l82PH9/+m/0lz+O5CVXyp/E5LdIh8RF1ozP/+L3z/ftf33x8vc43/+l49veu7Fb3zvTyecFQA4BRvbO3cWGo36eo8y2T7CkaLv3I1ovJOm6cnWk+2VnjxoErHbXpTtwPW2XesTEdGl6FCspJWJk675ma5VfX+iw5v5lJlYKz74p1zP9ceZOR17rD+2ZLe3TT6U6UHbhz0zmv9B/vZbg9wuAQAAvbe/93+wzwsAAAAAAAAAAAAAAAAAAAA4TR1vAzbew9uJjR2NuTuIhgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOO/AQAA//8wu83b") 2.221650653s ago: executing program 8 (id=1145): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2.191688374s ago: executing program 0 (id=1146): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_tx_power={{0x5}, {0x3, 0xc9, 0x9}}}}, 0xa) 1.155417001s ago: executing program 6 (id=1147): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setsig(0x4203, r1, 0x3, &(0x7f0000000040)={0x38, 0x1000000, 0x6}) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 1.153770341s ago: executing program 7 (id=1148): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\xcfPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0xa4) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x48) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[], 0x2b) sendfile(r4, r2, 0x0, 0x4000000053d2) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2050012fffff2f14e946f3890de706415d3ffbebcffffff375e54a26a633a320000000c049078640109006401010069775428c8a9fd4148"], 0x0) close(r0) sendmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setns(0xc9, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r5, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x20340) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 686.281983ms ago: executing program 8 (id=1149): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28f, 0x1001, 0x4}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x2, 0x0, 0x0) prlimit64(r2, 0xf, 0x0, &(0x7f0000000000)) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r4, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r7 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000080)) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 100.685487ms ago: executing program 7 (id=1150): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@errors_continue}, {@grpjquota}, {@nodioread_nolock}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xb0, &(0x7f00000003c0)='smaps\x00') r3 = landlock_create_ruleset(&(0x7f0000000140)={0x6000}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c854}, 0x20004000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r9, 0x8040552c, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) read$FUSE(r8, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x0) 0s ago: executing program 0 (id=1151): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) kernel console output (not intermixed with test programs): ding directory block [ 107.033831][ T4838] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 107.125043][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 108.456231][ T4852] loop4: detected capacity change from 0 to 1024 [ 108.616654][ T4320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.624762][ T4857] sched: RT throttling activated [ 111.122779][ T4860] tipc: Enabled bearer , priority 0 [ 111.130977][ T4856] device syzkaller0 entered promiscuous mode [ 111.197936][ T4320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.469117][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 111.492760][ T4870] tipc: Resetting bearer [ 111.512187][ T4855] tipc: Resetting bearer [ 112.259665][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.269786][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.279164][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.287058][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.294887][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.304067][ T4855] tipc: Disabling bearer [ 112.309588][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.429823][ T4874] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 112.497331][ T4320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.587337][ T7] tipc: Node number set to 3945368015 [ 112.646269][ T4320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.207666][ T4906] Bluetooth: MGMT ver 1.22 [ 114.418926][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 114.995068][ T4879] chnl_net:caif_netlink_parms(): no params data found [ 115.888254][ T4932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.067743][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 117.132544][ T4918] device syzkaller0 entered promiscuous mode [ 117.427091][ T4940] kvm [4939]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000000000 [ 117.485070][ T4940] kvm [4939]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000080 [ 117.497439][ T4940] kvm [4939]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 117.514881][ T4940] kvm [4939]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800000000080 [ 119.139227][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 119.426887][ T4957] device-mapper: space map common: metadata block out of bounds [ 119.439105][ T4957] device-mapper: space map common: dm_tm_shadow_block() failed [ 119.462412][ T4957] device-mapper: space map metadata: dm_sm_metadata_create: apply_bops failed [ 119.479669][ T4957] device-mapper: transaction manager: couldn't create metadata space map [ 119.509581][ T4957] device-mapper: thin metadata: tm_create_with_sm failed [ 119.707031][ T4957] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EINVAL) [ 119.717886][ T4957] device-mapper: ioctl: error adding target to table [ 120.025805][ T4964] loop1: detected capacity change from 0 to 128 [ 120.087945][ T4962] loop4: detected capacity change from 0 to 32768 [ 120.097552][ T4962] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.115 (4962) [ 120.126641][ T4964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.129183][ T4962] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 120.135742][ T4964] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.145313][ T4962] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 120.145363][ T4962] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 120.173899][ T4962] BTRFS info (device loop4): use zstd compression, level 3 [ 120.181478][ T4962] BTRFS info (device loop4): force clearing of disk cache [ 120.188611][ T4962] BTRFS info (device loop4): enabling disk space caching [ 120.195757][ T4962] BTRFS info (device loop4): disk space caching is enabled [ 120.292778][ T4964] syz.1.116 (pid 4964) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 120.345663][ T4962] BTRFS info (device loop4): enabling ssd optimizations [ 120.366855][ T4962] BTRFS info (device loop4): rebuilding free space tree [ 120.390973][ T4962] BTRFS info (device loop4): disabling free space tree [ 120.398037][ T4962] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.407828][ T4962] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.191494][ T4272] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 121.217834][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 121.219708][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 122.876874][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.888589][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.903751][ T4879] device bridge_slave_0 entered promiscuous mode [ 122.919554][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.085075][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.093284][ T4879] device bridge_slave_1 entered promiscuous mode [ 123.676346][ T4879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.914870][ T4879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.549458][ T4879] team0: Port device team_slave_0 added [ 125.557965][ T4879] team0: Port device team_slave_1 added [ 125.745492][ T5036] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 125.836091][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.845718][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.957976][ T4879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.128085][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.142079][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.244879][ T4879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.366466][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 126.495836][ T4879] device hsr_slave_0 entered promiscuous mode [ 126.542276][ T4879] device hsr_slave_1 entered promiscuous mode [ 126.577389][ T4879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.650011][ T4879] Cannot create hsr debugfs directory [ 129.846557][ T4879] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.891218][ T4879] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.938062][ T4879] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.968148][ T5090] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 129.969079][ T26] audit: type=1800 audit(1786062859.586:2): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.138" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 129.977913][ T5090] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 130.008065][ T5090] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 130.031330][ T4879] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.056109][ T5090] syz.3.138 (5090) used greatest stack depth: 20160 bytes left [ 130.904680][ T4320] device hsr_slave_0 left promiscuous mode [ 130.918392][ T4320] device hsr_slave_1 left promiscuous mode [ 130.941340][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.056248][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.095131][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.149080][ T4996] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.188556][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.352108][ T4320] device bridge_slave_1 left promiscuous mode [ 131.400130][ T4996] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.491003][ T4996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.521343][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.633849][ T4996] usb 1-1: Product: syz [ 131.702782][ T4996] usb 1-1: Manufacturer: syz [ 131.749456][ T4996] usb 1-1: SerialNumber: syz [ 131.770663][ T4320] device bridge_slave_0 left promiscuous mode [ 131.787268][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.842188][ T4996] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.062331][ T4320] device veth1_macvtap left promiscuous mode [ 132.116838][ T4320] device veth0_macvtap left promiscuous mode [ 132.143497][ T4996] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.147915][ T4320] device veth1_vlan left promiscuous mode [ 132.659347][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 132.674461][ T4320] device veth0_vlan left promiscuous mode [ 132.849249][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.006162][ T5141] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 133.102199][ T26] audit: type=1800 audit(1786062862.726:3): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.147" name="members" dev="configfs" ino=35788 res=0 errno=0 [ 133.539099][ T4996] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 133.546992][ T4996] ath9k_htc: Failed to initialize the device [ 134.190723][ T4996] usb 1-1: ath9k_htc: USB layer deinitialized [ 134.796088][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 134.848284][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 134.893008][ T4320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.944302][ T4320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.293273][ T4320] bond0 (unregistering): Released all slaves [ 135.408735][ T5145] tipc: Enabling of bearer rejected, failed to enable media [ 136.111263][ T5175] "syz.1.150" (5175) uses obsolete ecb(arc4) skcipher [ 136.219981][ T5175] syz.1.150 sent an empty control message without MSG_MORE. [ 136.869642][ T4879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.994271][ T4879] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.255647][ T4879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.293620][ T4879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.393935][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.458249][ T4319] usb 1-1: USB disconnect, device number 3 [ 137.479508][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.575026][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.637330][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.724553][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.731774][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.877771][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.953971][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.973959][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.981206][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.025854][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.107125][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.157861][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.205605][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.775121][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.886287][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.007073][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.121669][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.255893][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.432984][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.522581][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.596871][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.627768][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.680102][ T5212] device syzkaller0 entered promiscuous mode [ 141.160525][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.170684][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.212135][ T4879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.106084][ T5302] device syzkaller0 entered promiscuous mode [ 146.579358][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.609321][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.696480][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.719777][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.967526][ T4879] device veth0_vlan entered promiscuous mode [ 147.979574][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.019635][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.067709][ T4879] device veth1_vlan entered promiscuous mode [ 148.195707][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.236881][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.279191][ T4879] device veth0_macvtap entered promiscuous mode [ 148.323279][ T4879] device veth1_macvtap entered promiscuous mode [ 148.402071][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.449051][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.500291][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.558911][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.592509][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.644005][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.685766][ T4879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.721725][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.741669][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.769689][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.798634][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.849655][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.875706][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.916439][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.947460][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.987982][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.027772][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.070736][ T4879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.121697][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.165864][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.228188][ T4879] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.257589][ T4879] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.294166][ T4879] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.323587][ T4879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.366513][ T5330] loop3: detected capacity change from 0 to 512 [ 149.442930][ T26] audit: type=1804 audit(1786062879.066:4): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.178" name="bus" dev="ramfs" ino=37288 res=1 errno=0 [ 149.559370][ T5330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.569572][ T5330] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.583727][ T26] audit: type=1804 audit(1786062879.106:5): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.178" name="bus" dev="ramfs" ino=37288 res=1 errno=0 [ 151.527280][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.554294][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.583102][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 151.615091][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.732070][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.750541][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.780421][ T5348] loop3: detected capacity change from 0 to 512 [ 151.827598][ T5348] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 151.871639][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.910322][ T5348] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.964040][ T5352] Zero length message leads to an empty skb [ 152.197280][ T5348] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.182: orphan file block 0: bad magic [ 152.237167][ T5348] EXT4-fs (loop3): mount failed [ 152.278759][ T5360] Cannot find add_set index 0 as target [ 157.190483][ T5416] device syzkaller0 entered promiscuous mode [ 157.206787][ T5406] kvm [5404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 157.232807][ T5406] kvm [5404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x180 [ 157.260966][ T5406] kvm [5404]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 157.341276][ T5406] kvm [5404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x380 [ 158.311962][ T5426] input: syz0 as /devices/virtual/input/input6 [ 159.377557][ T5438] loop3: detected capacity change from 0 to 128 [ 160.706133][ T5438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.717298][ T5438] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.985435][ T49] Bluetooth: hci0: Malformed Event: 0x02 [ 161.403826][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 161.576819][ T5451] loop5: detected capacity change from 0 to 2048 [ 161.732858][ T5451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.499160][ T5471] sctp: failed to load transform for md5: -2 [ 164.551979][ T5451] sctp: failed to load transform for md5: -2 [ 164.909655][ T5491] netlink: 'syz.3.211': attribute type 10 has an invalid length. [ 164.929526][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.320462][ T5491] device bridge_slave_1 left promiscuous mode [ 165.327082][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.381810][ T5491] device bridge_slave_1 entered promiscuous mode [ 165.391747][ T5491] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 168.588235][ T5505] loop3: detected capacity change from 0 to 1024 [ 168.779743][ T5505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.788346][ T5505] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.620602][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 170.087086][ T5538] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5538] [ 170.511928][ T5550] using random self ethernet address [ 170.518913][ T5550] using random host ethernet address [ 173.784992][ T26] audit: type=1326 audit(1786062903.406:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.1.234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f266d59e0d9 code=0x0 [ 178.023345][ T5625] loop0: detected capacity change from 0 to 128 [ 179.073599][ T5640] jffs2: notice: (5640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 179.653151][ T5625] EXT4-fs (loop0): Test dummy encryption mode enabled [ 179.690459][ T5625] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 179.726699][ T5625] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.816142][ T26] audit: type=1800 audit(1786062909.436:7): pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.247" name="attr_allow_any_host" dev="configfs" ino=39029 res=0 errno=0 [ 179.882542][ T5662] nvmet: adding nsid 1 to subsystem testnqn [ 179.926395][ T26] audit: type=1800 audit(1786062909.546:8): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.247" name="addr_trtype" dev="configfs" ino=39040 res=0 errno=0 [ 179.928394][ T5664] nvmet_rdma: address family 255 not supported [ 180.020107][ T26] audit: type=1800 audit(1786062909.546:9): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.247" name="addr_adrfam" dev="configfs" ino=39041 res=0 errno=0 [ 180.568738][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 183.143235][ T5706] loop1: detected capacity change from 0 to 512 [ 183.194161][ T5706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.967117][ T5706] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 184.072539][ T5706] EXT4-fs (loop1): 1 truncate cleaned up [ 184.075706][ T5709] fuse: Unknown parameter 'GPL' [ 184.078684][ T5706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.777930][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 185.304065][ T5735] loop5: detected capacity change from 0 to 512 [ 185.396458][ T5735] EXT4-fs (loop5): Test dummy encryption mode enabled [ 185.455868][ T5735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 185.504797][ T5735] System zones: 1-2, 4-12, 8-8 [ 185.619814][ T5735] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.255: iget: bad i_size value: 38620345925642 [ 185.712771][ T5735] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.255: couldn't read orphan inode 15 (err -117) [ 185.755521][ T5735] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 185.914265][ T5744] futex_wake_op: syz.0.264 tries to shift op by 144; fix this program [ 187.030491][ T4879] EXT4-fs (loop5): unmounting filesystem. [ 187.229095][ T49] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 187.247841][ T5753] loop3: detected capacity change from 0 to 256 [ 187.419551][ T5753] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.946806][ T5753] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 188.063722][ T5753] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 188.092667][ T5760] loop5: detected capacity change from 0 to 128 [ 188.147838][ T5760] EXT4-fs (loop5): Test dummy encryption mode enabled [ 188.180830][ T5760] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 188.316206][ T4990] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 188.339297][ T5760] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.590804][ T4990] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.224223][ T4879] EXT4-fs (loop5): unmounting filesystem. [ 191.219072][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 191.225196][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 191.231457][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 192.257021][ T4285] Bluetooth: hci4: link tx timeout [ 192.262876][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.275797][ T4285] Bluetooth: hci4: link tx timeout [ 192.281097][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.270463][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.194917][ T5856] loop3: detected capacity change from 0 to 1024 [ 196.287896][ T4273] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 196.298496][ T4273] Bluetooth: hci0: Injecting HCI hardware error event [ 196.312007][ T4285] Bluetooth: hci0: hardware error 0x00 [ 196.906823][ T5856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.916100][ T4273] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 196.925972][ T4273] Bluetooth: hci4: Injecting HCI hardware error event [ 196.936537][ T49] Bluetooth: hci4: hardware error 0x00 [ 197.010588][ T5859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.284'. [ 197.572023][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 197.757051][ T5874] device syzkaller0 entered promiscuous mode [ 198.659045][ T4285] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 198.876326][ T5893] loop0: detected capacity change from 0 to 512 [ 198.897936][ T5893] EXT4-fs: Ignoring removed i_version option [ 198.979209][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 200.028939][ T5893] EXT4-fs: Ignoring removed bh option [ 200.092664][ T5893] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.292: inode #13: comm syz.0.292: iget: illegal inode # [ 200.258271][ T5893] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.292: couldn't read orphan inode 13 (err -117) [ 200.692930][ T5893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 201.441154][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 202.562857][ T5938] netlink: 68 bytes leftover after parsing attributes in process `syz.0.298'. [ 204.511590][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 204.562036][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 204.588577][ T5957] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.598734][ T5957] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.604217][ T5959] loop5: detected capacity change from 0 to 2048 [ 204.608050][ T5957] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.622625][ T5957] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.577408][ T5959] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 205.650307][ T5960] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 205.661840][ T5960] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 205.689260][ T5959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.752684][ T5965] sctp: failed to load transform for md5: -2 [ 209.045593][ T6015] capability: warning: `syz.1.314' uses deprecated v2 capabilities in a way that may be insecure [ 209.869582][ T49] Bluetooth: hci3: failed to read key size for handle 200 [ 214.422347][ T6057] fuse: Bad value for 'fd' [ 216.395397][ T6089] loop3: detected capacity change from 0 to 1024 [ 217.467256][ T6101] tipc: Enabling of bearer rejected, failed to enable media [ 218.769729][ T6118] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 218.778028][ T6118] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 218.786520][ T6118] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 220.861851][ T6141] 9pnet_fd: Insufficient options for proto=fd [ 225.708953][ T4318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 226.579423][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 226.594402][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.192362][ T4318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.220135][ T4318] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 227.244728][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.255713][ T4318] usb 2-1: SerialNumber: syz [ 227.357909][ T4318] usb 2-1: 0:2 : does not exist [ 227.415918][ T6217] loop7: detected capacity change from 0 to 16384 [ 227.487993][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.5.358'. [ 228.315072][ T6224] loop7: detected capacity change from 16384 to 0 [ 228.491711][ T6221] team0 (unregistering): Port device team_slave_0 removed [ 229.109584][ T4318] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 229.110932][ T6221] team0 (unregistering): Port device team_slave_1 removed [ 229.182973][ T4318] usb 2-1: USB disconnect, device number 2 [ 230.167813][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.501073][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 235.919997][ T6315] loop3: detected capacity change from 0 to 128 [ 236.019026][ T49] Bluetooth: hci3: command 0x0405 tx timeout [ 236.762278][ T6319] input: syz1 as /devices/virtual/input/input10 [ 237.330422][ T6327] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6327] [ 237.349608][ T6327] netlink: 260 bytes leftover after parsing attributes in process `syz.3.377'. [ 237.359255][ T6327] netlink: 104 bytes leftover after parsing attributes in process `syz.3.377'. [ 237.368534][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 241.685726][ T6354] loop3: detected capacity change from 0 to 4096 [ 242.353891][ T6354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 242.595811][ T6354] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 244.016279][ T6381] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 246.556943][ T6404] loop0: detected capacity change from 0 to 512 [ 246.961699][ T6406] netlink: 592 bytes leftover after parsing attributes in process `syz.1.396'. [ 247.325219][ T9] Bluetooth: Error in BCSP hdr checksum [ 247.410266][ T6404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.583942][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.610986][ T4395] Bluetooth: Error in BCSP hdr checksum [ 248.773275][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.898961][ T49] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.061209][ T6434] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 249.075679][ T6434] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 249.082827][ T6434] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 249.090842][ T6434] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 249.097410][ T6434] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 249.104428][ T6434] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 249.112584][ T6434] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 249.120757][ T6434] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 249.137940][ T6434] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 249.146205][ T6434] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 249.153133][ T6434] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 249.160366][ T6434] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 249.167073][ T6434] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 249.174179][ T6434] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 249.181353][ T6434] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 249.188736][ T6434] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 249.195704][ T6434] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 249.203430][ T6434] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 249.210248][ T6434] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 249.216944][ T6434] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 249.223667][ T6434] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 249.230672][ T6434] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 249.239384][ T6434] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 249.246484][ T6434] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 249.253299][ T6434] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 249.260004][ T6434] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 250.798144][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 250.998278][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.914231][ T26] audit: type=1326 audit(1786062980.324:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.0.403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39d279e0d9 code=0x0 [ 252.057289][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.070181][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.079862][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.088657][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.097629][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.100420][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.130181][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.223610][ T26] audit: type=1326 audit(1786062980.634:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.5.406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f319e0d9 code=0x0 [ 252.455432][ T6461] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 254.179218][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 254.760610][ T6447] chnl_net:caif_netlink_parms(): no params data found [ 255.701900][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.258908][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 256.845902][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.889045][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.917854][ T6447] device bridge_slave_0 entered promiscuous mode [ 257.302357][ T49] Bluetooth: hci2: failed to read key size for handle 200 [ 257.644080][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.651608][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.660222][ T6447] device bridge_slave_1 entered promiscuous mode [ 257.733754][ T6447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.429593][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 258.529396][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.538000][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.546792][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.568750][ T6447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.876997][ T6447] team0: Port device team_slave_0 added [ 258.993597][ T6447] team0: Port device team_slave_1 added [ 259.038898][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 259.206272][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.244619][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 259.258935][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.305808][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.333110][ T7] usb 2-1: Product: syz [ 259.342626][ T7] usb 2-1: Manufacturer: syz [ 259.347291][ T7] usb 2-1: SerialNumber: syz [ 259.384707][ T6447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.410545][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 259.491184][ T4994] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 259.588664][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.623935][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.201238][ T6447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.499487][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 260.579383][ T4994] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 260.593146][ T4994] ath9k_htc: Failed to initialize the device [ 260.624427][ T6447] device hsr_slave_0 entered promiscuous mode [ 260.636643][ T4994] usb 2-1: ath9k_htc: USB layer deinitialized [ 260.660144][ T6447] device hsr_slave_1 entered promiscuous mode [ 260.670417][ T6447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.723667][ T6447] Cannot create hsr debugfs directory [ 260.908667][ T6536] mac80211_hwsim hwsim3 wlan99: renamed from wlan0 [ 261.246070][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 261.835086][ T34] device hsr_slave_0 left promiscuous mode [ 261.848266][ T34] device hsr_slave_1 left promiscuous mode [ 261.867010][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.885373][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.912421][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.929972][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.954646][ T34] device bridge_slave_0 left promiscuous mode [ 261.969493][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.082264][ T34] device bond_slave_0 left promiscuous mode [ 262.088851][ T34] device bond_slave_1 left promiscuous mode [ 262.094947][ T34] device bridge_slave_1 left promiscuous mode [ 262.866495][ T34] device veth1_macvtap left promiscuous mode [ 262.872853][ T34] device veth0_macvtap left promiscuous mode [ 262.881543][ T34] device veth1_vlan left promiscuous mode [ 263.181914][ T34] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 263.203840][ T34] bond1 (unregistering): Released all slaves [ 263.269992][ T4994] usb 2-1: USB disconnect, device number 3 [ 265.905289][ T34] team0 (unregistering): Port device team_slave_1 removed [ 265.964480][ T34] team0 (unregistering): Port device team_slave_0 removed [ 266.024785][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.087608][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.153847][ T34] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 266.600267][ T34] bond0 (unregistering): Released all slaves [ 266.708735][ T6604] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 266.718532][ T6604] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 266.728386][ T6604] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 266.758974][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 266.767137][ T26] audit: type=1800 audit(1786062995.114:12): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.430" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 267.047900][ T6447] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.201988][ T6447] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.903348][ T6447] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.924607][ T6447] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.074461][ T6620] "syz.4.437" (6620) uses obsolete ecb(arc4) skcipher [ 269.226493][ T6447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.019520][ T6447] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.061665][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.094221][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.142583][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.269824][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.298662][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.305926][ T5628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.736959][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.903295][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.025208][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.032438][ T5628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.092816][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.151744][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.312049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.323068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.384658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.430575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.478176][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.519787][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.630962][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.840185][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.956328][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.011236][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.094278][ T6661] syz.0.445 (6661) used greatest stack depth: 18128 bytes left [ 272.104869][ T6447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.179018][ T6685] "syz.5.449" (6685) uses obsolete ecb(arc4) skcipher [ 274.732249][ T6697] loop1: detected capacity change from 0 to 8 [ 275.518553][ T6447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.604183][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.632203][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.047933][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.067716][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.126033][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.169769][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.195927][ T6447] device veth0_vlan entered promiscuous mode [ 280.221689][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.263150][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.677657][ T6447] device veth1_vlan entered promiscuous mode [ 281.049554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.120279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.019107][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.032168][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.212311][ T6447] device veth0_macvtap entered promiscuous mode [ 283.260293][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.301169][ T6447] device veth1_macvtap entered promiscuous mode [ 283.368525][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.408956][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.437653][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.493606][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.513830][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.538942][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.575884][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.591813][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.618899][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.628760][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.659033][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.679216][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.708871][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.754828][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.779899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.794462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.834468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.854512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.883372][ T6447] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.917172][ T6447] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.938936][ T6447] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.947772][ T6447] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.157219][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.195512][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.235251][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.309045][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.325287][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.367442][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.753905][ T6838] loop6: detected capacity change from 0 to 128 [ 290.532580][ T6838] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 290.579343][ T6838] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.037861][ T49] Bluetooth: hci0: Malformed Event: 0x02 [ 291.644237][ T6857] loop0: detected capacity change from 0 to 512 [ 291.758243][ T6857] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 291.786059][ T6857] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.794099][ T6866] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 291.855383][ T6866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.863289][ T6866] IPv6: NLM_F_CREATE should be set when creating new route [ 292.936151][ T6447] EXT4-fs (loop6): unmounting filesystem. [ 296.774057][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 296.980639][ T6908] netlink: 'syz.6.495': attribute type 1 has an invalid length. [ 297.344861][ T6916] xt_limit: Overflow, try lower: 324382443/0 [ 298.895323][ T6912] loop0: detected capacity change from 0 to 32768 [ 299.015270][ T6912] XFS (loop0): Mounting V5 Filesystem [ 299.119433][ T6912] XFS (loop0): Ending clean mount [ 299.248945][ T26] audit: type=1800 audit(1786063027.654:13): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.497" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 299.331851][ T6912] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 299.935032][ T26] audit: type=1326 audit(1786063028.344:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6943 comm="syz.5.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f319e0d9 code=0x0 [ 300.188429][ T4277] XFS (loop0): Unmounting Filesystem [ 300.426675][ T6957] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6957] [ 301.261458][ T6974] device syzkaller0 entered promiscuous mode [ 302.433177][ T6996] tipc: Enabling of bearer rejected, failed to enable media [ 302.576096][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 304.164566][ T7027] netlink: 'syz.6.516': attribute type 1 has an invalid length. [ 304.274926][ T7027] device xfrm0 entered promiscuous mode [ 305.901351][ T7063] xt_limit: Overflow, try lower: 324382443/0 [ 306.851755][ T7078] loop0: detected capacity change from 0 to 128 [ 307.010225][ T7078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 307.054828][ T7078] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.130270][ T7089] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 307.342449][ T7093] bond1: (slave veth3): Enslaving as an active interface with a down link [ 307.417667][ T49] Bluetooth: hci2: Malformed Event: 0x02 [ 307.857490][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 307.927539][ T7097] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 310.436581][ T7118] Cannot find add_set index 0 as target [ 311.563237][ T7154] xt_limit: Overflow, try lower: 324382443/0 [ 312.402516][ T7163] device syzkaller0 entered promiscuous mode [ 312.430967][ T7166] netlink: 'syz.6.546': attribute type 1 has an invalid length. [ 312.448591][ T7166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.455894][ T7166] IPv6: NLM_F_CREATE should be set when creating new route [ 312.806071][ T7171] loop1: detected capacity change from 0 to 128 [ 312.853616][ T7171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 312.866909][ T7171] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.136960][ T49] Bluetooth: hci3: Malformed Event: 0x02 [ 313.859641][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 317.144220][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.888997][ T7254] xt_limit: Overflow, try lower: 324382443/0 [ 318.909321][ T49] Bluetooth: hci1: Malformed Event: 0x02 [ 320.891760][ T7275] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 321.170389][ T7267] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 324.019341][ T7296] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 324.086656][ T7296] bond1: (slave veth3): Enslaving as an active interface with a down link [ 324.174059][ T7299] bond1: (slave veth0_to_bond): making interface the new active one [ 324.190872][ T7299] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 325.943387][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.568'. [ 327.517357][ T7340] loop6: detected capacity change from 0 to 512 [ 327.525857][ T7340] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 327.555509][ T7340] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.566: orphan file block 0: bad magic [ 327.659771][ T7340] EXT4-fs (loop6): mount failed [ 328.188822][ C0] hrtimer: interrupt took 48141 ns [ 332.795198][ T7379] loop6: detected capacity change from 0 to 128 [ 333.982822][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.581'. [ 337.274972][ T7413] zram0: detected capacity change from 0 to 8 [ 337.387331][ T7422] jffs2: notice: (7422) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 338.099069][ T49] Bluetooth: hci0: link tx timeout [ 338.105159][ T49] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 338.113899][ T49] Bluetooth: hci0: link tx timeout [ 338.695178][ T49] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.780865][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 341.423778][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 341.470623][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.477874][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.053968][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 343.063837][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 343.076110][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 343.083687][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.093757][ T4273] Workqueue: hci0 hci_rx_work [ 343.098458][ T4273] Call Trace: [ 343.101734][ T4273] [ 343.104667][ T4273] dump_stack_lvl+0x188/0x24e [ 343.109477][ T4273] ? show_regs_print_info+0x12/0x12 [ 343.114680][ T4273] ? load_image+0x410/0x410 [ 343.119210][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 343.124327][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 343.129615][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 343.134309][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 343.139543][ T4273] kobject_add_internal+0x617/0xca0 [ 343.144774][ T4273] kobject_add+0x160/0x230 [ 343.149194][ T4273] ? kobject_init+0x1c0/0x1c0 [ 343.153889][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 343.159167][ T4273] ? klist_children_get+0x50/0x50 [ 343.164229][ T4273] ? get_device_parent+0x121/0x3e0 [ 343.169355][ T4273] device_add+0x470/0x1050 [ 343.173798][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 343.178756][ T4273] le_conn_complete_evt+0xfac/0x15c0 [ 343.184087][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 343.190333][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 343.195965][ T4273] ? mutex_unlock+0x10/0x10 [ 343.200495][ T4273] ? skb_pull_data+0xec/0x1f0 [ 343.205173][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 343.210728][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 343.216787][ T4273] hci_event_packet+0x7b3/0x1290 [ 343.221733][ T4273] ? __lock_acquire+0x7c40/0x7c40 [ 343.226765][ T4273] ? bis_list+0x280/0x280 [ 343.231100][ T4273] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 343.237086][ T4273] ? kcov_remote_start+0x4b0/0x7e0 [ 343.242210][ T4273] ? do_machine_check+0x380/0x750 [ 343.247243][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 343.252443][ T4273] hci_rx_work+0x3eb/0xd40 [ 343.256857][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 343.261704][ T4273] ? process_one_work+0x7b4/0x1160 [ 343.266822][ T4273] process_one_work+0x8ab/0x1160 [ 343.271776][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 343.277443][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 343.282522][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 343.288095][ T4273] ? wq_worker_running+0x97/0x190 [ 343.293233][ T4273] worker_thread+0xaf5/0x12a0 [ 343.297937][ T4273] kthread+0x29d/0x330 [ 343.302006][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 343.307032][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 343.311641][ T4273] ret_from_fork+0x1f/0x30 [ 343.316071][ T4273] [ 343.423799][ T4273] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 343.437829][ T4273] Bluetooth: hci0: failed to register connection device [ 345.349796][ T7516] netlink: 64 bytes leftover after parsing attributes in process `syz.1.607'. [ 345.525211][ T7520] libceph: secret too big 32 [ 348.374235][ T7556] loop6: detected capacity change from 0 to 1024 [ 348.504819][ T7556] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 348.524033][ T7556] EXT4-fs (loop6): invalid journal inode [ 348.530216][ T7556] EXT4-fs (loop6): can't get journal size [ 349.659017][ T7556] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #2: comm syz.6.616: blocks 48-48 from inode overlap system zone [ 349.680372][ T7556] EXT4-fs (loop6): failed to initialize system zone (-117) [ 349.687924][ T7556] EXT4-fs (loop6): mount failed [ 349.816794][ T7565] futex_wake_op: syz.0.618 tries to shift op by 144; fix this program [ 351.963606][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.975078][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.984208][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.994817][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.004202][ T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 352.013323][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.859040][ T7583] No such timeout policy "syz1" [ 353.145069][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.098928][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 356.178977][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 358.084786][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.456840][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 358.723228][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.628'. [ 358.760113][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.848367][ T7576] chnl_net:caif_netlink_parms(): no params data found [ 360.509101][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 361.447249][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.179499][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.189783][ T7576] device bridge_slave_0 entered promiscuous mode [ 362.217823][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.235800][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.281302][ T7576] device bridge_slave_1 entered promiscuous mode [ 362.502075][ T7576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.579515][ T7576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.700429][ T7576] team0: Port device team_slave_0 added [ 362.759599][ T4994] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 362.896596][ T7576] team0: Port device team_slave_1 added [ 362.968921][ T4994] usb 7-1: Using ep0 maxpacket: 8 [ 362.978186][ T4994] usb 7-1: unable to get BOS descriptor or descriptor too short [ 362.999268][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.000700][ T4994] usb 7-1: config 4 interface 0 has no altsetting 0 [ 363.006473][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.006501][ T7576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.014291][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.121683][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.158037][ T4994] usb 7-1: string descriptor 0 read error: -22 [ 363.186119][ T4994] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 363.209158][ T7576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.255077][ T4994] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 363.314858][ T4994] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 363.395293][ T4994] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.439806][ T4994] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 363.529551][ T4994] usb 7-1: media controller created [ 363.554958][ T4994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.012621][ T4994] zl10353_read_register: readreg error (reg=127, ret==0) [ 364.231636][ T4994] usb 7-1: USB disconnect, device number 2 [ 364.512994][ T7576] device hsr_slave_0 entered promiscuous mode [ 364.533775][ T7576] device hsr_slave_1 entered promiscuous mode [ 364.554617][ T7576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.573811][ T7576] Cannot create hsr debugfs directory [ 368.178459][ T7723] netlink: 'syz.6.648': attribute type 10 has an invalid length. [ 368.626409][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.661345][ T7723] device bridge_slave_1 left promiscuous mode [ 368.776280][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.012188][ T7723] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 369.161573][ T7576] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.182687][ T7576] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.204181][ T7576] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.250326][ T7576] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.528658][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.650548][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.6.652'. [ 372.355347][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.423390][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.759522][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.881601][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.899836][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.916889][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.924264][ T7276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.934151][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.950035][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.964056][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.971303][ T7276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.025434][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.869878][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.900657][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.940587][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.988878][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.012777][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 374.036401][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.056155][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.092901][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.107395][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.126599][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.146796][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.170372][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.461774][ T7789] loop6: detected capacity change from 0 to 512 [ 374.506968][ T7789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 374.590262][ T7789] EXT4-fs (loop6): 1 truncate cleaned up [ 374.643263][ T7789] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 375.656930][ T6447] EXT4-fs (loop6): unmounting filesystem. [ 376.394653][ T9] device hsr_slave_0 left promiscuous mode [ 376.407540][ T9] device hsr_slave_1 left promiscuous mode [ 376.414652][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.428938][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.440247][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.447716][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.477738][ T9] device bridge_slave_1 left promiscuous mode [ 376.497369][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.581595][ T9] device bridge_slave_0 left promiscuous mode [ 376.610145][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.417066][ T7822] netlink: 68 bytes leftover after parsing attributes in process `syz.6.662'. [ 378.135221][ T49] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 378.144635][ T49] Bluetooth: hci0: Injecting HCI hardware error event [ 378.155811][ T4273] Bluetooth: hci0: hardware error 0x00 [ 379.012428][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 379.027719][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.130129][ T9] device veth1_macvtap left promiscuous mode [ 379.185957][ T9] device veth0_macvtap left promiscuous mode [ 379.218242][ T9] device veth1_vlan left promiscuous mode [ 379.229507][ T9] device veth0_vlan left promiscuous mode [ 380.720635][ T4994] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 380.942442][ T4994] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 380.956802][ T4994] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 380.978926][ T4994] usb 7-1: config 220 has no interface number 2 [ 380.985304][ T4994] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 381.019192][ T4994] usb 7-1: config 220 interface 0 has no altsetting 0 [ 381.026514][ T4994] usb 7-1: config 220 interface 76 has no altsetting 0 [ 381.034123][ T4994] usb 7-1: config 220 interface 1 has no altsetting 0 [ 381.053449][ T4994] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 381.068549][ T9] team0 (unregistering): Port device team_slave_1 removed [ 381.075071][ T4994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.096068][ T4994] usb 7-1: Product: syz [ 381.106392][ T4994] usb 7-1: Manufacturer: syz [ 381.112686][ T4994] usb 7-1: SerialNumber: syz [ 381.229362][ T4273] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 381.312823][ T9] team0 (unregistering): Port device team_slave_0 removed [ 381.375068][ T4994] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 381.390868][ T4994] usb 7-1: No valid video chain found. [ 381.398348][ T4994] usb 7-1: selecting invalid altsetting 0 [ 381.726095][ T4994] usb 7-1: selecting invalid altsetting 0 [ 381.781778][ T4994] usbtest: probe of 7-1:220.1 failed with error -22 [ 381.977377][ T4994] usb 7-1: USB disconnect, device number 3 [ 382.035862][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.351406][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.596509][ T9] bond0 (unregistering): Released all slaves [ 385.741591][ T7861] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 385.770823][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.669'. [ 385.826774][ T7921] loop6: detected capacity change from 0 to 2048 [ 385.834080][ T7864] bond1: (slave veth0_to_bond): Releasing active interface [ 385.854685][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 385.871345][ T7921] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 385.918379][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.993991][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.005029][ T7921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.015468][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.402974][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 388.669389][ T7965] jffs2: notice: (7965) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 389.789650][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.800880][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.873647][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.894027][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.939120][ T4273] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 389.948129][ T4273] Bluetooth: hci3: Injecting HCI hardware error event [ 389.959380][ T4273] Bluetooth: hci3: hardware error 0x00 [ 389.986448][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.049640][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.131531][ T7576] device veth0_vlan entered promiscuous mode [ 390.167393][ T7576] device veth1_vlan entered promiscuous mode [ 390.282764][ T7576] device veth0_macvtap entered promiscuous mode [ 390.327035][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.337587][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 390.380545][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.415048][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.445206][ T7576] device veth1_macvtap entered promiscuous mode [ 390.466358][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.490850][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.557995][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.598936][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.655271][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.681976][ T49] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 390.689163][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.828894][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.901560][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.933483][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.622701][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.688849][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.698719][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.728898][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.763010][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.790750][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.347052][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.693'. [ 392.459044][ T4273] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 392.720413][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.731629][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 393.424822][ T26] audit: type=1326 audit(1786063121.834:15): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.1.702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f266d59e0d9 code=0x0 [ 393.435027][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.081063][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 394.298307][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.355207][ T7576] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.373057][ T7576] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.397115][ T7576] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.417162][ T7576] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.317046][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.334571][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.959907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.055410][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.076331][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.111675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.085078][ T4273] Bluetooth: hci1: link tx timeout [ 401.091136][ T4273] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 401.102220][ T4273] Bluetooth: hci1: link tx timeout [ 401.107390][ T4273] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.234926][ T8094] fuse: Bad value for 'fd' [ 403.139167][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 404.378498][ T4273] Bluetooth: hci1: link tx timeout [ 404.383759][ T4273] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.477081][ T8149] fuse: Bad value for 'fd' [ 406.483294][ T8149] fuse: Bad value for 'fd' [ 406.512974][ T8143] device bond0 entered promiscuous mode [ 406.542040][ T8143] device bond_slave_0 entered promiscuous mode [ 406.585846][ T8143] device bond_slave_1 entered promiscuous mode [ 406.615389][ T8143] device bridge_slave_1 entered promiscuous mode [ 406.630679][ T8151] jffs2: notice: (8151) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 409.699110][ T8181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.860089][ T8183] loop7: detected capacity change from 0 to 512 [ 410.719432][ T4320] Bluetooth: Error in BCSP hdr checksum [ 410.801399][ T8183] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 410.986984][ T4320] Bluetooth: Error in BCSP hdr checksum [ 411.917424][ T4937] Bluetooth: Error in BCSP hdr checksum [ 412.259002][ T49] Bluetooth: hci5: command 0x1003 tx timeout [ 412.267422][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 412.359717][ T7576] EXT4-fs (loop7): unmounting filesystem. [ 420.126686][ T8248] overlayfs: missing 'lowerdir' [ 420.417502][ T4273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 420.431525][ T4273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 420.440323][ T4273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 420.450229][ T4273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 420.457794][ T4273] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 420.465237][ T4273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.094101][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 422.438421][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.498923][ T4273] Bluetooth: hci5: command 0x0409 tx timeout [ 422.586811][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.640556][ T8252] device bridge_slave_0 entered promiscuous mode [ 422.696482][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.729139][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.737359][ T8252] device bridge_slave_1 entered promiscuous mode [ 423.615578][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.750933][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.009292][ T8252] team0: Port device team_slave_0 added [ 424.366917][ T8252] team0: Port device team_slave_1 added [ 424.521511][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.548698][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.580126][ T4273] Bluetooth: hci5: command 0x041b tx timeout [ 424.713826][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.679945][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.6.749'. [ 425.878304][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.919163][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.619745][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.663737][ T4273] Bluetooth: hci5: command 0x040f tx timeout [ 426.863179][ T8327] futex_wake_op: syz.6.756 tries to shift op by 36; fix this program [ 426.872019][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.756'. [ 427.260990][ T26] audit: type=1326 audit(1786063154.680:16): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.7.752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe7839e0d9 code=0x0 [ 427.355681][ T8252] device hsr_slave_0 entered promiscuous mode [ 427.423481][ T8252] device hsr_slave_1 entered promiscuous mode [ 428.880640][ T4273] Bluetooth: hci5: command 0x0419 tx timeout [ 428.934468][ T8361] netlink: 592 bytes leftover after parsing attributes in process `syz.0.770'. [ 432.619989][ T8391] No such timeout policy "syz1" [ 435.615597][ T8252] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 436.447934][ T8252] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 436.774575][ T8252] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 437.455005][ T8252] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 437.513895][ T8417] loop7: detected capacity change from 0 to 1024 [ 437.663830][ T8417] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 437.690926][ T8417] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.719065][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.751438][ T7576] EXT4-fs (loop7): unmounting filesystem. [ 438.840318][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 438.870038][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 438.882837][ T8252] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.954432][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 439.007627][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 439.064262][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.071450][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.213483][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.021714][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.588096][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.649315][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.690669][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.697866][ T8137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.828939][ T8450] ip6t_srh: unknown srh match flags FF3F [ 440.837183][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.063231][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.120177][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.204892][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.313795][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.353972][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 442.240472][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.283576][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 442.353173][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.390799][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.430117][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.026545][ T8482] netlink: 28 bytes leftover after parsing attributes in process `syz.7.785'. [ 445.874797][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.908145][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.015703][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.340113][ T8507] overlayfs: failed to clone upperpath [ 447.968586][ T8512] orangefs_mount: mount request failed with -4 [ 449.525102][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.547902][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.720235][ T26] audit: type=1326 audit(1786063177.140:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 449.782418][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.811791][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.849432][ T8252] device veth0_vlan entered promiscuous mode [ 449.860269][ T26] audit: type=1326 audit(1786063177.140:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 449.893916][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.917310][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.954678][ T8252] device veth1_vlan entered promiscuous mode [ 449.994957][ T26] audit: type=1326 audit(1786063177.160:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 450.080030][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.107962][ T26] audit: type=1326 audit(1786063177.160:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 450.134951][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.171499][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.204096][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.224009][ T26] audit: type=1326 audit(1786063177.160:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 450.270859][ T8252] device veth0_macvtap entered promiscuous mode [ 450.318302][ T8252] device veth1_macvtap entered promiscuous mode [ 450.327303][ T26] audit: type=1326 audit(1786063177.160:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 450.423375][ T26] audit: type=1326 audit(1786063177.160:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 450.480351][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.544953][ T26] audit: type=1326 audit(1786063177.160:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 450.569181][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.619907][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.628869][ T26] audit: type=1326 audit(1786063177.160:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 450.685220][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.716564][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.729277][ T26] audit: type=1326 audit(1786063177.170:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.7.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7839e0d9 code=0x7ffc0000 [ 450.779215][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.809474][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.851483][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.898674][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.935793][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.945711][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.990056][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.007305][ T8550] overlayfs: failed to clone lowerpath [ 451.016309][ T8550] overlayfs: failed to clone lowerpath [ 451.055212][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.892690][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.911398][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.922002][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.932800][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.943331][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.955327][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.969091][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.980455][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.090515][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.167023][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.203856][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.852118][ T8252] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.910142][ T8252] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.980499][ T8252] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.106796][ T8252] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.659909][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.667798][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.783470][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 454.816705][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.853897][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.888015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 458.835840][ T8604] fuse: Bad value for 'fd' [ 458.842449][ T8604] fuse: Bad value for 'fd' [ 459.204231][ T4318] Process accounting resumed [ 460.377286][ T8626] syz.0.813 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 460.391260][ T8626] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 462.198443][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 462.198461][ T26] audit: type=1326 audit(1786063189.580:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 462.424248][ T26] audit: type=1326 audit(1786063189.580:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 462.525057][ T26] audit: type=1326 audit(1786063189.580:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 462.557344][ T26] audit: type=1326 audit(1786063189.580:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 462.997615][ T26] audit: type=1326 audit(1786063189.580:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 463.060617][ T26] audit: type=1326 audit(1786063189.580:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 463.178170][ T26] audit: type=1326 audit(1786063189.580:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 463.595802][ T26] audit: type=1326 audit(1786063189.580:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 464.325430][ T8650] binder_alloc: 8644: binder_alloc_buf, no vma [ 464.339326][ T8650] binder: 8644:8650 ioctl c0306201 0 returned -14 [ 465.030692][ T26] audit: type=1326 audit(1786063189.580:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 465.248656][ T26] audit: type=1326 audit(1786063189.580:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.0.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d279e0d9 code=0x7ffc0000 [ 471.229424][ T8712] device wireguard0 entered promiscuous mode [ 473.540002][ T8738] loop8: detected capacity change from 0 to 40427 [ 473.599155][ T8738] F2FS-fs (loop8): invalid crc_offset: 4177530876 [ 473.706042][ T8738] F2FS-fs (loop8): Wrong journal entry on segno 65538 [ 473.714284][ T8738] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-117) [ 474.413415][ T8752] xt_connbytes: Forcing CT accounting to be enabled [ 474.420555][ T8752] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 476.265191][ T5628] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.820068][ T5628] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.374079][ T5628] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.571733][ T8808] ip6t_srh: unknown srh match flags FF3F [ 478.619992][ T5628] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.247395][ T8854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.862'. [ 484.190505][ T8887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.420238][ T8909] loop7: detected capacity change from 0 to 8 [ 486.724863][ T8909] SQUASHFS error: Unable to read directory block [631:26] [ 488.045000][ T8926] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 488.058504][ T8926] qnx6: wrong signature (magic) in superblock #1. [ 488.065086][ T8926] qnx6: unable to read the first superblock [ 489.189355][ T5628] IPVS: stopping backup sync thread 6381 ... [ 492.086752][ T8953] loop8: detected capacity change from 0 to 64 [ 492.153490][ T8953] MINIX-fs: mounting file system with errors, running fsck is recommended [ 493.565830][ T8974] CIFS: Attempting to mount \\127.0.0.1\share [ 493.573922][ T8974] CIFS: VFS: No username specified [ 494.136162][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.885'. [ 494.265410][ T8969] team0 (unregistering): Port device team_slave_1 removed [ 494.417263][ T5628] device hsr_slave_0 left promiscuous mode [ 494.437173][ T5628] device hsr_slave_1 left promiscuous mode [ 494.484776][ T5628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.275689][ T5628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.375380][ T5628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.383048][ T5628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.541175][ T5628] device bridge_slave_1 left promiscuous mode [ 495.550426][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.566764][ T5628] device bridge_slave_0 left promiscuous mode [ 495.573373][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.678485][ T5628] device veth1_macvtap left promiscuous mode [ 495.721796][ T5628] device veth0_macvtap left promiscuous mode [ 495.769209][ T5628] device veth1_vlan left promiscuous mode [ 495.775414][ T5628] device veth0_vlan left promiscuous mode [ 500.426221][ T5628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.630501][ T5628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.207837][ T5628] bond0 (unregistering): Released all slaves [ 501.417155][ T9029] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 501.477904][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.162092][ T9053] overlayfs: missing 'lowerdir' [ 505.979548][ T9090] netlink: 56 bytes leftover after parsing attributes in process `syz.8.918'. [ 507.373378][ T9104] netlink: 236 bytes leftover after parsing attributes in process `syz.7.922'. [ 507.409481][ T9104] loop7: detected capacity change from 0 to 512 [ 507.421474][ T9104] ext4: Unknown parameter 'nouser_xattr' [ 507.943529][ T9050] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 508.091692][ T9108] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.100529][ T9108] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.109561][ T9108] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.118413][ T9108] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.204513][ T9108] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.213746][ T9108] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.225207][ T9108] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.234137][ T9108] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.448975][ T9114] loop7: detected capacity change from 0 to 64 [ 508.504608][ T9114] MINIX-fs: mounting file system with errors, running fsck is recommended [ 512.143836][ T9153] nvmet: failed to open block device (null): (-22) [ 512.143848][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 512.143859][ T26] audit: type=1800 audit(1786063239.560:91): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.933" name="attr_allow_any_host" dev="configfs" ino=51321 res=0 errno=0 [ 512.163396][ T26] audit: type=1800 audit(1786063239.560:92): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.933" name="enable" dev="configfs" ino=51322 res=0 errno=0 [ 512.232830][ T9154] nvmet_rdma: address family 255 not supported [ 512.302891][ T26] audit: type=1800 audit(1786063239.620:93): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.933" name="addr_trtype" dev="configfs" ino=51324 res=0 errno=0 [ 512.399320][ T26] audit: type=1800 audit(1786063239.620:94): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.933" name="addr_adrfam" dev="configfs" ino=51325 res=0 errno=0 [ 512.567082][ T26] audit: type=1800 audit(1786063239.620:95): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.933" name="addr_traddr" dev="configfs" ino=51326 res=0 errno=0 [ 512.843913][ T26] audit: type=1800 audit(1786063239.620:96): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.933" name="addr_trsvcid" dev="configfs" ino=51327 res=0 errno=0 [ 513.950462][ T9168] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.391492][ T9185] loop7: detected capacity change from 0 to 512 [ 514.406790][ T9185] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 514.429412][ T9185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 514.438310][ T9185] System zones: 1-12 [ 514.443871][ T9185] EXT4-fs (loop7): orphan cleanup on readonly fs [ 514.593994][ T9185] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.937: attempt to clear invalid blocks 1024 len 1 [ 514.871249][ T9185] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.937: bg 0: block 361: padding at end of block bitmap is not set [ 515.489931][ T9185] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 515.500664][ T9185] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.937: invalid indirect mapped block 1811939328 (level 0) [ 515.559256][ T9185] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.937: invalid indirect mapped block 2 (level 2) [ 515.657258][ T9185] EXT4-fs (loop7): 1 truncate cleaned up [ 515.678196][ T9185] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 515.745537][ T9185] Bluetooth: MGMT ver 1.22 [ 515.871083][ T7576] EXT4-fs (loop7): unmounting filesystem. [ 516.913582][ T9221] loop7: detected capacity change from 0 to 2048 [ 517.425307][ T9222] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.487572][ T26] audit: type=1326 audit(1786063244.900:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.7.941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe7839e0d9 code=0x0 [ 517.862229][ T9231] overlayfs: failed to clone upperpath [ 529.229043][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 532.864524][ T9355] CIFS: Attempting to mount \\127.0.0.1\share [ 532.872312][ T9355] CIFS: VFS: No username specified [ 532.890783][ T9336] fuse: Bad value for 'fd' [ 533.947575][ T9372] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 533.947575][ T9372] The task syz.8.972 (9372) triggered the difference, watch for misbehavior. [ 534.649926][ T9369] bridge0: port 3(syz_tun) entered blocking state [ 534.657430][ T9369] bridge0: port 3(syz_tun) entered disabled state [ 534.682511][ T9369] device syz_tun entered promiscuous mode [ 534.691846][ T9369] bridge0: port 3(syz_tun) entered blocking state [ 534.700698][ T9369] bridge0: port 3(syz_tun) entered forwarding state [ 539.879401][ T9419] binder: 9416:9419 ioctl c00c620f 2000000003c0 returned -22 [ 541.627406][ T9427] CIFS: Attempting to mount \\127.0.0.1\share [ 541.635646][ T9427] CIFS: VFS: No username specified [ 542.352356][ T9433] loop7: detected capacity change from 0 to 1024 [ 542.387118][ T9433] EXT4-fs (loop7): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 542.396722][ T9433] EXT4-fs (loop7): Couldn't mount because of unsupported optional features (40000) [ 544.117872][ T9459] loop7: detected capacity change from 0 to 256 [ 545.043546][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 545.063201][ T9469] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 548.811725][ T9484] atomic_op ffff8880752c6198 conn xmit_atomic 0000000000000000 [ 549.187550][ T9512] futex_wake_op: syz.6.999 tries to shift op by 144; fix this program [ 552.631752][ T9554] fuse: Unknown parameter '' [ 553.855653][ T9563] program syz.7.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.901518][ T126] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 559.093567][ T9620] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 559.117969][ T9620] cramfs: wrong magic [ 559.147095][ T126] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 559.919291][ T126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.927349][ T126] usb 8-1: Product: syz [ 560.023415][ T126] usb 8-1: Manufacturer: syz [ 560.028083][ T126] usb 8-1: SerialNumber: syz [ 560.317937][ T9629] loop8: detected capacity change from 0 to 1024 [ 560.601956][ T9629] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 560.611702][ T9629] EXT4-fs (loop8): Couldn't mount because of unsupported optional features (40000) [ 560.782643][ T126] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 561.950169][ T9641] CIFS: Attempting to mount \\127.0.0.1\share [ 561.956375][ T9641] CIFS: VFS: No username specified [ 562.295296][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.320815][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.373235][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.401291][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.581549][ T9642] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.590556][ T9642] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.599316][ T9642] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.608098][ T9642] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.626064][ T9642] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.635200][ T9642] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.644348][ T9642] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.653338][ T9642] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.671095][ C0] usblp0: nonzero write bulk status received: -71 [ 562.673151][ T126] usb 8-1: USB disconnect, device number 2 [ 562.804280][ T126] usblp0: removed [ 562.915275][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.712849][ T9700] loop8: detected capacity change from 0 to 512 [ 566.896079][ T9700] EXT4-fs (loop8): orphan cleanup on readonly fs [ 566.949361][ T9700] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 567.037917][ T9700] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 567.173288][ T9700] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.1028: attempt to clear invalid blocks 2 len 1 [ 567.210132][ T9700] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1028: invalid indirect mapped block 1819239214 (level 0) [ 567.235962][ T9700] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1028: invalid indirect mapped block 1819239214 (level 1) [ 567.352349][ T9700] EXT4-fs (loop8): 1 truncate cleaned up [ 567.359471][ T9700] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 568.902602][ T8252] EXT4-fs (loop8): unmounting filesystem. [ 569.492692][ T9736] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 572.314044][ T9786] atomic_op ffff888076ba1198 conn xmit_atomic 0000000000000000 [ 573.084294][ T9791] loop7: detected capacity change from 0 to 256 [ 573.091890][ T9791] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 573.110490][ T9791] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 576.455893][ T9839] atomic_op ffff888058429198 conn xmit_atomic 0000000000000000 [ 576.570963][ T9837] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.528387][ T9849] futex_wake_op: syz.1.1047 tries to shift op by 144; fix this program [ 588.665256][ T9914] 9pnet_fd: Insufficient options for proto=fd [ 589.045539][ T9923] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 589.177976][ T9923] block device autoloading is deprecated and will be removed. [ 590.533233][ T9924] netlink: 'syz.7.1067': attribute type 21 has an invalid length. [ 597.148859][ T4994] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 597.432567][ T4994] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 597.442047][ T4994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.450895][ T4994] usb 9-1: Product: syz [ 597.455250][ T4994] usb 9-1: Manufacturer: syz [ 597.928359][ T4994] usb 9-1: SerialNumber: syz [ 598.615929][ T4994] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 598.780437][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 599.071241][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 599.087705][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 599.102785][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 599.116783][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 599.204621][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.378932][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 601.754838][ T7] usb 9-1: USB disconnect, device number 2 [ 601.763011][ T7] usblp0: removed [ 602.082163][T10019] program syz.8.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.067914][ T9990] chnl_net:caif_netlink_parms(): no params data found [ 603.459931][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 603.527267][ T9990] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.561336][ T9990] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.586387][ T9990] device bridge_slave_0 entered promiscuous mode [ 603.728852][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.786109][ T9990] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.832566][ T9990] device bridge_slave_1 entered promiscuous mode [ 604.153345][ T9990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.173578][T10040] loop7: detected capacity change from 0 to 1024 [ 604.237911][T10040] hfsplus: unable to parse mount options [ 605.572713][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 605.657843][ T9990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.760535][ T9990] team0: Port device team_slave_0 added [ 606.822334][ T9990] team0: Port device team_slave_1 added [ 606.845132][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.852377][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.889154][ T9990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.566286][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.620712][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 608.552599][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.579336][ T9990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.759750][ T4273] Bluetooth: hci4: command 0x0405 tx timeout [ 610.608289][ T9990] device hsr_slave_0 entered promiscuous mode [ 610.649502][ T9990] device hsr_slave_1 entered promiscuous mode [ 610.738614][ T4273] Bluetooth: hci1: unexpected subevent 0x06 length: 18 > 10 [ 611.218218][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.292599][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.360548][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.429083][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.436629][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.491877][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.504470][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.532123][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.557057][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.569285][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.576757][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.585522][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.594005][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.602187][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.610476][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.618280][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.636765][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.653306][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.666388][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.683646][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.693227][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.707118][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.867500][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.875589][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.883479][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.891011][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.900159][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.907602][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 611.915098][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.395130][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.415285][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.423498][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.432686][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.446816][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.454944][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.497594][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.519279][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.537419][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.547694][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.570997][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.578424][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.597053][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.623189][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.635360][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 612.644780][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.305583][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.313667][ T4273] Bluetooth: hci1: command 0x2021 tx timeout [ 613.327983][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.336089][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.347081][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.355289][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.371642][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.384224][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.394360][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.402409][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.410306][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.417735][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.429555][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.437120][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.444657][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.453035][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.460688][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.468106][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.476326][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.483870][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.494151][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.501645][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.509585][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.516998][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.524437][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.534416][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.542062][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.549903][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.557734][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.565212][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.572913][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.580565][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.587991][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.595833][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.603558][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.611538][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.619055][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.626574][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.634336][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.642005][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.650730][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.658537][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.666575][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.674411][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.682056][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.689882][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.697303][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.704800][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.712679][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.720157][ T8566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 613.730454][ T8566] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 613.804805][ T9990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.816383][ T9990] Cannot create hsr debugfs directory [ 614.164891][T10101] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 614.247750][T10097] fido_id[10097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 614.442296][T10104] loop7: detected capacity change from 0 to 512 [ 614.500397][T10104] EXT4-fs (loop7): orphan cleanup on readonly fs [ 614.516159][T10104] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 614.567070][T10104] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 614.881590][T10104] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.1109: attempt to clear invalid blocks 2 len 1 [ 615.441128][T10104] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1109: invalid indirect mapped block 1819239214 (level 0) [ 615.524338][T10104] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1109: invalid indirect mapped block 1819239214 (level 1) [ 615.570097][T10104] EXT4-fs (loop7): 1 truncate cleaned up [ 615.577933][T10104] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 616.685127][ T7576] EXT4-fs (loop7): unmounting filesystem. [ 617.018502][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.976397][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.254533][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.098215][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.596936][ T9990] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 621.965910][ T9990] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 622.002239][ T9990] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 622.060679][ T9990] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 622.427151][ T9990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.505994][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.527243][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.619118][ T9990] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.693618][ T9990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.720973][ T9990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.878079][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.893968][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.917158][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.924344][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.958690][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.005712][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.025603][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.032782][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.054578][T10191] vxcan0: tx address claim with dest, not broadcast [ 623.099928][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.132943][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.160465][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.180194][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.378104][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.150134][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.159861][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 624.168616][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.178487][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 624.187892][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 624.253672][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.342760][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.353086][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.369832][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.793827][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.807289][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.687018][T10219] block device autoloading is deprecated and will be removed. [ 625.747947][ T9] bond0: (slave wlan1): Releasing backup interface [ 625.796855][ T9990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.463293][T10233] 9pnet_virtio: no channels available for device syz [ 627.906150][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1128'. [ 628.169546][ T9] device hsr_slave_0 left promiscuous mode [ 628.209513][ T9] device hsr_slave_1 left promiscuous mode [ 628.232347][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.251164][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.269850][ T9] device bridge_slave_1 left promiscuous mode [ 628.299072][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.330422][ T9] device bridge_slave_0 left promiscuous mode [ 628.356657][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.470024][ T9] bond1 (unregistering): (slave veth3): Releasing active interface [ 628.498501][ T9] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 628.530029][ T9] bond1 (unregistering): Released all slaves [ 628.726939][T10243] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 628.749566][T10243] VFS: Can't find a romfs filesystem on dev nullb0. [ 628.749566][T10243] [ 629.742851][ T4273] Bluetooth: hci2: unexpected cc 0x2006 length: 4 > 1 [ 630.021019][T10248] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 630.248886][T10248] usb 8-1: Using ep0 maxpacket: 16 [ 630.257299][T10248] usb 8-1: unable to get BOS descriptor or descriptor too short [ 630.283186][T10248] usb 8-1: config 4 has an invalid interface number: 116 but max is 0 [ 630.306224][T10248] usb 8-1: config 4 has no interface number 0 [ 630.326535][T10248] usb 8-1: config 4 interface 116 has no altsetting 0 [ 630.351722][T10248] usb 8-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=f5.2e [ 630.376289][T10248] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.404646][T10248] usb 8-1: Product: syz [ 630.414502][T10248] usb 8-1: Manufacturer: syz [ 630.423236][T10248] usb 8-1: SerialNumber: syz [ 630.676700][T10248] gspca_main: sonixb-2.14.0 probing 0c45:608c [ 630.699274][T10248] sonixb 8-1:4.116: Error reading register 00: -71 [ 630.764867][T10248] usb 8-1: USB disconnect, device number 3 [ 630.855885][ T9] team0 (unregistering): Port device team_slave_1 removed [ 630.946517][ T9] team0 (unregistering): Port device team_slave_0 removed [ 631.041778][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.126088][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.306847][ T9] bond0 (unregistering): Released all slaves [ 636.872097][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 636.878481][T10312] loop7: detected capacity change from 0 to 512 [ 636.909031][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 636.917762][T10312] EXT4-fs (loop7): Test dummy encryption mode enabled [ 636.977282][T10312] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 637.002516][T10318] [ 637.004897][T10318] ====================================================== [ 637.007523][ T9990] device veth0_vlan entered promiscuous mode [ 637.011904][T10318] WARNING: possible circular locking dependency detected [ 637.011927][T10318] syzkaller #0 Not tainted [ 637.011935][T10318] ------------------------------------------------------ [ 637.011941][T10318] syz.0.1151/10318 is trying to acquire lock: [ 637.011951][T10318] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 637.053915][T10318] [ 637.053915][T10318] but task is already holding lock: [ 637.061268][T10318] ffff888054f18b70 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 637.071826][T10318] [ 637.071826][T10318] which lock already depends on the new lock. [ 637.071826][T10318] [ 637.082239][T10318] [ 637.082239][T10318] the existing dependency chain (in reverse order) is: [ 637.091254][T10318] [ 637.091254][T10318] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 637.100149][T10318] down_write+0x36/0x60 [ 637.104902][T10318] configfs_depend_item_unlocked+0x14f/0x430 [ 637.111424][T10318] usbg_make_tpg+0x1f3/0x580 [ 637.116531][T10318] target_fabric_make_tpg+0xa0/0x6d0 [ 637.122415][T10318] configfs_mkdir+0x511/0x9e0 [ 637.127615][T10318] vfs_mkdir+0x386/0x570 [ 637.132450][T10318] do_mkdirat+0x1d8/0x440 [ 637.137316][T10318] __x64_sys_mkdir+0x6a/0x80 [ 637.142454][T10318] do_syscall_64+0x4c/0xa0 [ 637.147513][T10318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.154027][T10318] [ 637.154027][T10318] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 637.161682][T10318] __mutex_lock+0x12d/0xae0 [ 637.166714][T10318] tcm_set_name+0x26/0x90 [ 637.171566][T10318] function_make+0x195/0x350 [ 637.176792][T10318] configfs_mkdir+0x511/0x9e0 [ 637.181997][T10318] vfs_mkdir+0x386/0x570 [ 637.186759][T10318] do_mkdirat+0x1d8/0x440 [ 637.191601][T10318] __x64_sys_mkdir+0x6a/0x80 [ 637.196703][T10318] do_syscall_64+0x4c/0xa0 [ 637.201670][T10318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.208112][T10318] [ 637.208112][T10318] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 637.216380][T10318] __lock_acquire+0x2d18/0x7c40 [ 637.221816][T10318] lock_acquire+0x1bb/0x4a0 [ 637.226889][T10318] __mutex_lock+0x12d/0xae0 [ 637.231911][T10318] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 637.238585][T10318] configfs_symlink+0x5a4/0x13c0 [ 637.244032][T10318] vfs_symlink+0x245/0x3d0 [ 637.248965][T10318] do_symlinkat+0x1b6/0x400 [ 637.253981][T10318] __x64_sys_symlinkat+0x95/0xa0 [ 637.259439][T10318] do_syscall_64+0x4c/0xa0 [ 637.264556][T10318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.270965][T10318] [ 637.270965][T10318] other info that might help us debug this: [ 637.270965][T10318] [ 637.281453][T10318] Chain exists of: [ 637.281453][T10318] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 637.281453][T10318] [ 637.296227][T10318] Possible unsafe locking scenario: [ 637.296227][T10318] [ 637.303669][T10318] CPU0 CPU1 [ 637.309025][T10318] ---- ---- [ 637.314379][T10318] lock(&sb->s_type->i_mutex_key#23); [ 637.319834][T10318] lock(&opts->dep_lock); [ 637.326803][T10318] lock(&sb->s_type->i_mutex_key#23); [ 637.334783][T10318] lock(gadget_subsys.su_mutex); [ 637.339811][T10318] [ 637.339811][T10318] *** DEADLOCK *** [ 637.339811][T10318] [ 637.348051][T10318] 2 locks held by syz.0.1151/10318: [ 637.353256][T10318] #0: ffff88801856c460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 637.362529][T10318] #1: ffff888054f18b70 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 637.373409][T10318] [ 637.373409][T10318] stack backtrace: [ 637.379288][T10318] CPU: 0 PID: 10318 Comm: syz.0.1151 Not tainted syzkaller #0 [ 637.386755][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.396886][T10318] Call Trace: [ 637.400162][T10318] [ 637.403087][T10318] dump_stack_lvl+0x188/0x24e [ 637.407774][T10318] ? load_image+0x410/0x410 [ 637.412317][T10318] ? show_regs_print_info+0x12/0x12 [ 637.417729][T10318] ? print_circular_bug+0x12b/0x1a0 [ 637.422928][T10318] check_noncircular+0x296/0x330 [ 637.427862][T10318] ? add_chain_block+0x9b0/0x9b0 [ 637.432792][T10318] ? lockdep_lock+0xf1/0x1f0 [ 637.437378][T10318] ? _find_first_zero_bit+0xd2/0x100 [ 637.442777][T10318] __lock_acquire+0x2d18/0x7c40 [ 637.447714][T10318] ? __kernel_text_address+0x9/0x30 [ 637.452968][T10318] ? stack_trace_save+0xf0/0xf0 [ 637.457864][T10318] ? verify_lock_unused+0x140/0x140 [ 637.463081][T10318] ? mark_lock+0x94/0x320 [ 637.467433][T10318] ? __lock_acquire+0x1465/0x7c40 [ 637.472473][T10318] lock_acquire+0x1bb/0x4a0 [ 637.476977][T10318] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 637.483305][T10318] ? __might_sleep+0xd0/0xd0 [ 637.488003][T10318] ? read_lock_is_recursive+0x10/0x10 [ 637.493374][T10318] ? mark_lock+0x94/0x320 [ 637.497696][T10318] __mutex_lock+0x12d/0xae0 [ 637.502196][T10318] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 637.508521][T10318] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 637.514850][T10318] ? mutex_lock_nested+0x10/0x10 [ 637.519789][T10318] ? rwsem_write_trylock+0x135/0x1c0 [ 637.525091][T10318] ? clear_nonspinnable+0x60/0x60 [ 637.530112][T10318] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 637.536483][T10318] ? inode_permission+0xef/0x480 [ 637.541426][T10318] ? bpf_lsm_inode_permission+0x5/0x10 [ 637.547016][T10318] ? security_inode_permission+0xac/0xf0 [ 637.552699][T10318] configfs_symlink+0x5a4/0x13c0 [ 637.557634][T10318] ? end_current_label_crit_section+0x14b/0x170 [ 637.563958][T10318] ? common_perm+0x15d/0x1b0 [ 637.568815][T10318] ? from_kgid+0x14f/0x6a0 [ 637.573308][T10318] ? make_kgid+0x650/0x650 [ 637.577721][T10318] ? apparmor_path_symlink+0x1ac/0x230 [ 637.583175][T10318] ? lookup_one_qstr_excl+0x11c/0x240 [ 637.588544][T10318] ? detach_groups+0x370/0x370 [ 637.593317][T10318] ? inode_permission+0xef/0x480 [ 637.598252][T10318] ? bpf_lsm_inode_symlink+0x5/0x10 [ 637.603481][T10318] ? security_inode_symlink+0xb2/0x100 [ 637.609039][T10318] vfs_symlink+0x245/0x3d0 [ 637.613544][T10318] do_symlinkat+0x1b6/0x400 [ 637.618072][T10318] ? vfs_symlink+0x3d0/0x3d0 [ 637.622658][T10318] __x64_sys_symlinkat+0x95/0xa0 [ 637.627765][T10318] do_syscall_64+0x4c/0xa0 [ 637.632183][T10318] ? clear_bhb_loop+0x60/0xb0 [ 637.636856][T10318] ? clear_bhb_loop+0x60/0xb0 [ 637.641535][T10318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.647434][T10318] RIP: 0033:0x7f39d279e0d9 [ 637.651879][T10318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.671572][T10318] RSP: 002b:00007f39d35d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 637.680243][T10318] RAX: ffffffffffffffda RBX: 00007f39d2a25fa0 RCX: 00007f39d279e0d9 [ 637.688500][T10318] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 637.696563][T10318] RBP: 00007f39d2835024 R08: 0000000000000000 R09: 0000000000000000 [ 637.704530][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.712495][T10318] R13: 00007f39d2a26038 R14: 00007f39d2a25fa0 R15: 00007ffe482d3778 [ 637.720477][T10318] [ 637.775057][T10312] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 637.799177][T10312] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 637.823111][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 637.863306][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.888999][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.969105][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 638.065066][T10328] EXT4-fs error (device loop7): htree_dirblock_to_tree:1083: inode #2: comm syz.7.1150: Directory hole found for htree leaf block 0 [ 638.499578][ T9990] device veth1_vlan entered promiscuous mode [ 638.510722][ T7576] EXT4-fs (loop7): unmounting filesystem. [ 638.634539][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 638.653098][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.694918][ T9990] device veth0_macvtap entered promiscuous mode [ 638.730863][ T9990] device veth1_macvtap entered promiscuous mode [ 638.813873][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.844868][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.892506][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.927163][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.957351][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.994421][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.028237][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.060513][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.091126][ T9990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.113716][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 639.132634][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 639.147526][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.157034][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.168550][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.182229][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.192780][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.208833][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.230906][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.276028][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.296402][T10318] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 639.299111][ T9990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.305303][T10318] udc usbip-vudc.0: failed to start g1: -19 [ 639.321575][ T9990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.332880][ T9990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.344929][T10318] UDC core: g1: couldn't find an available UDC or it's busy [ 639.352573][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 639.383612][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 639.432316][ T9990] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.466183][ T9990] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.488630][ T9990] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.505566][ T9990] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.594082][ T9990] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 639.618094][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.620352][ T9990] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 639.629447][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.642954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.667014][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.676235][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.684833][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready