last executing test programs: 29m20.834110995s ago: executing program 32 (id=18): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000640)={0x4}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xd, 0x5, 0x8, 0x4, 0x4, 0xfd, 0x4, 0x1, 0x1, 0x1, 0x100006, 0x101, 0xfffffffe, 0x7f, 0x7f, 0x40000003, 0x8c, 0xca9f, 0x0, 0xfffffff9, 0xffffffff, 0xe66, 0x13, 0x8, 0x4085, 0x8, 0xfffffff8]}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r2, 0x4}, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180)) 27m17.320354851s ago: executing program 33 (id=251): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) socket$nl_route(0x10, 0x3, 0x0) 25m30.741479687s ago: executing program 34 (id=411): unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) listen(0xffffffffffffffff, 0x100) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0x100}}], 0x20, 0x4000000}, 0x8010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001780)=@assoc_value={0x0, 0x4}, &(0x7f00000017c0)=0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001680)={'ip_vti0\x00', &(0x7f0000001480)={'sit0\x00', 0x0, 0x1, 0x80, 0x4, 0x7ff, {{0xd, 0x4, 0x2, 0x3c, 0x34, 0x66, 0x0, 0x6, 0x29, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x18, 0xb, 0x0, 0x2, [0x40b, 0x1, 0x80000001, 0x3, 0x8]}, @generic={0x89, 0x8, "304907c8130a"}]}}}}}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x20008000) 22m5.84572833s ago: executing program 35 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) io_submit(r4, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x18418, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9c8a4f967ca55468510ec76d6db61f", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESOCT], 0xfe, 0x4b5, &(0x7f0000000680)="$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") 21m18.366889062s ago: executing program 36 (id=803): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) keyctl$revoke(0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x3d8, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) write$binfmt_script(r3, &(0x7f0000000040), 0x4) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 20m21.763278936s ago: executing program 37 (id=884): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) close(r2) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) 17m47.223160622s ago: executing program 38 (id=1095): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r0, 0x1000, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m45.962439042s ago: executing program 39 (id=1406): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d228186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) 13m30.25469028s ago: executing program 40 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315", 0x26}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 10m31.139229592s ago: executing program 41 (id=1627): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315", 0x26}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 8m1.3600099s ago: executing program 4 (id=1845): socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x12]}, 0x8, 0x80000) fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 8m0.242910543s ago: executing program 4 (id=1847): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 7m55.223923052s ago: executing program 4 (id=1854): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0000081}]}) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020}, 0x2020) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[], 0x1508}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x4, &(0x7f0000000100)="81839c93", 0x9, 0xb, 0x5, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 7m44.178014524s ago: executing program 4 (id=1870): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m41.56727186s ago: executing program 4 (id=1874): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) socket$netlink(0x10, 0x3, 0xc) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x8}, 0x0) 7m37.828973236s ago: executing program 4 (id=1878): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getpriority(0x1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x52240, 0x0) 7m21.055925083s ago: executing program 42 (id=1878): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getpriority(0x1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x52240, 0x0) 5m19.083562154s ago: executing program 6 (id=2055): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 5m16.860625546s ago: executing program 6 (id=2060): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315", 0x26}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 5m10.025709236s ago: executing program 6 (id=2071): socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m8.334272932s ago: executing program 6 (id=2073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000000)) 5m7.46362429s ago: executing program 6 (id=2075): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 5m4.189832574s ago: executing program 6 (id=2082): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315", 0x26}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 4m47.301758963s ago: executing program 43 (id=2082): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315", 0x26}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 4m30.425442722s ago: executing program 8 (id=2120): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m20.620486145s ago: executing program 8 (id=2124): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/unix\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000)=0x8, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffff7, @rand_addr, 0xfffffffd}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="5c0200079078fffd"], 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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") 4m16.319003515s ago: executing program 8 (id=2127): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) eventfd(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x204100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000380)=ANY=[], 0xaf) close(r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5}) 4m15.371936328s ago: executing program 8 (id=2129): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x0, 0xa2e, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x81) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r0) socket$inet_udp(0x2, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250100010008000100030004000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 4m15.105274845s ago: executing program 8 (id=2130): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 4m13.462765552s ago: executing program 8 (id=2145): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3m56.491929919s ago: executing program 44 (id=2145): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3m14.674931908s ago: executing program 0 (id=2201): syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) 3m11.95171545s ago: executing program 0 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r3, 0x91502000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x100}}, 0x20}}, 0x24000840) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 3m10.877672978s ago: executing program 0 (id=2208): syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x300fff2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x20) 3m2.197729233s ago: executing program 0 (id=2215): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={0x0, 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cpuinfo\x00', 0x1800, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1, 0x7, 0x1009) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m54.138122111s ago: executing program 2 (id=2228): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f0000000100f4", 0x7) add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000001640)="be757b136be0357656f10d0ff26044d2a5d19fa95b7cc5c33806f61eb10f6a04fcdb35f9e184cbe3496a81af630460a9eeac05bd0992cd1fd060fe5f3492e030bedfcd99d99220b87dcf89dda8883ec3cf1e77b73f9632bfa41026325604d31a75d4ef378ab3fda434f4c78a9db9c0a10ecb2301641dca5a337000f911541262da236ae1ffffffff00e27ea584dffac25a189404257025", 0x97, 0xfffffffffffffffd) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x8, 0x11}, {@empty, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xfd, 0x202, &(0x7f0000000380)="$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") 2m51.539385467s ago: executing program 2 (id=2230): socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m51.051412931s ago: executing program 2 (id=2231): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\xba:\x80%m~\x06\\\xaa\x1aU=8\xebR%\xca\xf7\x1f\x8da5\xf9\xf37\xd8r\xc6p\xb3\xd9T{F\xa1\xb3\t\xac\xd7\x7f\x88$}/-[\x80\xd7M]:\xf0\xdc\xbf\x9f\xe7\x8c\xda/\xdc]\xd8\x90\xdb\xcd\x14\xf9\xee\xf2\xfes\x8c\t}\xae\xa6a\x14\x01\x04\x00^f\xa4\xfc\xcc\xc5\xf7\xdc)z\xac\x8b\x80\x91\xad\xc4\x8c\xeb\x83T\x96\xbd\xc3\xf5\xe9L\x89v\"\x9b\xd7\x90I\xae\x13\x8c\xc4%6\xeb\xc9\xca\",R\xdb\x8d U%\x9a[\r\xce\xffrf\x8c\x1b\xeb\xa4\x8cK\xd7\xba\xd0\x16\x88', 0x1) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m51.050205441s ago: executing program 0 (id=2232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2m48.973520171s ago: executing program 0 (id=2236): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x2, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x922, 0x12) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{0x0}], 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000100)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1, &(0x7f0000000380)=""/115, 0x73}, 0xd3}], 0x1, 0x40, &(0x7f0000000400)={r6, r7+10000000}) 2m48.801671157s ago: executing program 2 (id=2237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x801, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$FIONCLEX(r5, 0x5450) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2m44.749899476s ago: executing program 2 (id=2240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x2, 0xfffffc01, 0x6, 'syz1\x00', 0x2}, 0x1, [0x10001, 0xfffffffffffffffd, 0x3, 0x9, 0x4, 0x6, 0x0, 0x6, 0x5, 0x8, 0x6, 0x99, 0x7, 0x8000000000000000, 0x8000001000, 0x101, 0x5, 0x4, 0x8, 0x18, 0xfffffffffffffffe, 0xfffffffffffffff6, 0x5, 0x9, 0x1000000, 0x9, 0x3, 0x6, 0xfffffffbfffffbff, 0x8, 0x3, 0x7, 0x9, 0x200, 0x8, 0x1, 0x4, 0x27, 0x10000, 0xfffffffffffffffd, 0x8, 0x3, 0x800, 0x0, 0x9, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffff7f, 0x5, 0xfc, 0x2, 0x2, 0x3, 0xffffffff8b2fe5d4, 0x6, 0x7, 0x5, 0x9, 0x6, 0x9, 0x4, 0xffffffffffffff00, 0x2, 0x8, 0x4, 0xa, 0x1, 0x1, 0x40, 0x2, 0x4, 0x1, 0x10, 0x1, 0x3, 0x100000000, 0x3ff, 0x80000000, 0x2, 0x4, 0x61, 0x4c2a644c, 0x5564, 0x5, 0x7fff, 0x4531, 0x400, 0x5, 0x7fffffffffffffff, 0x13b, 0x401, 0x7, 0x8, 0x8001, 0x3, 0x100000001, 0x6, 0x6, 0xc35, 0xf31e, 0x1, 0xffffffffffffff5f, 0x8, 0x8, 0x306dc643, 0x9, 0xffffffffffffffff, 0x8000000000000001, 0x1, 0x3, 0x3, 0x1ff, 0x9, 0x8, 0x1ff, 0x2, 0x7, 0x2, 0x34, 0x1f, 0x2, 0x9, 0x5c4, 0x4, 0x789, 0x9]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000140)="b9ff0307600300", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) 2m39.943055356s ago: executing program 2 (id=2244): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) clock_getres(0x1, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000039c7a5407d3588770d810000000109021200010000000109"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m32.351174207s ago: executing program 45 (id=2236): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x2, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x922, 0x12) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{0x0}], 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000100)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1, &(0x7f0000000380)=""/115, 0x73}, 0xd3}], 0x1, 0x40, &(0x7f0000000400)={r6, r7+10000000}) 2m22.056174413s ago: executing program 46 (id=2244): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) clock_getres(0x1, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000039c7a5407d3588770d810000000109021200010000000109"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 55.12389884s ago: executing program 7 (id=2353): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) getresgid(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@init_itable_val}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4ed, &(0x7f00000002c0)="$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") socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$nl_audit(0x10, 0x3, 0x9) dup3(0xffffffffffffffff, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000000000800000000000000010500000020000000000000000000000a02"], 0x0, 0x4e}, 0x28) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) 40.370565985s ago: executing program 7 (id=2368): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/unix\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000)=0x8, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffff7, @rand_addr, 0xfffffffd}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="5c0200079078fffd"], 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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") 37.299745728s ago: executing program 3 (id=2371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x1, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 36.164697364s ago: executing program 7 (id=2376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f80)=@newtfilter={0x474, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x76f77caf, 0x6, 0x4, {0xd, 0x1, 0x1, 0x0, 0x3ff, 0x61}, {0x1, 0x2, 0x6, 0xfb4, 0x1, 0x1}, 0x3, 0x5, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2d, 0x6, 0x40ff, 0x0, 0x2, 0x1, 0xb97, 0x1ff, 0xd, 0x9, 0x3, 0x2, 0x5, 0xffffff80, 0x400, 0x4, 0x17, 0x8, 0xa, 0xcf2, 0x472, 0x2ac, 0x5, 0x1ff, 0x6, 0x1, 0x4, 0xffff658b, 0x1, 0x8, 0xcb9, 0x7, 0x0, 0x6, 0x10, 0x7, 0x4, 0x7, 0x7, 0x400, 0x7f, 0x5, 0xa4, 0x10, 0x0, 0x3, 0x6, 0x5, 0x7, 0xffffffff, 0x4, 0x5, 0x8, 0x0, 0xe23a, 0x0, 0x8, 0x7, 0x2, 0x8001, 0x6, 0x4, 0x10001, 0x1ff, 0x6, 0x3, 0x0, 0x2, 0xb6c, 0x1, 0x0, 0xfffffff8, 0x5, 0x1, 0x4ffa, 0x5000, 0xffff, 0x8, 0x8, 0xff, 0x579c, 0x1, 0x0, 0x0, 0x8, 0x4, 0x3dbe, 0x0, 0xfffffff4, 0x0, 0x6, 0x3, 0x3, 0x1ff, 0x8, 0x1, 0xd, 0xaca, 0x58, 0x7, 0x4, 0x7391, 0x2, 0x1, 0x8, 0x7, 0x3, 0x80000000, 0x7, 0x4, 0x7, 0x8, 0x6, 0x7, 0x6, 0x9, 0x3ff, 0x8, 0xace, 0x8, 0x50ca, 0x3, 0x3, 0x3, 0xffffff81, 0x6, 0x100, 0x9, 0x9, 0x2439, 0x0, 0x401, 0xe3, 0x7, 0x1, 0x9, 0x3, 0xfffffffe, 0x8, 0x0, 0x2daa, 0x8, 0x8000, 0x72767079, 0x1, 0x5, 0x7f, 0x800, 0xffff, 0x8000, 0x7, 0x65, 0x0, 0xffffffff, 0x6, 0xc27b, 0x4, 0xc3b7, 0x6, 0xfe, 0x5, 0x1, 0x8, 0x3, 0x8, 0x2, 0x8, 0x8000, 0x7, 0x6, 0x7, 0x4, 0x6, 0x5, 0xd9b3, 0x4, 0x7, 0x9, 0x40, 0x8, 0x4724, 0x3, 0xf, 0xfffffffd, 0x54, 0x3, 0x8, 0x5, 0x6, 0xfffff0b3, 0x593, 0xd1df, 0x9, 0x9, 0x400, 0x2, 0x1ff, 0x7, 0x9, 0x3, 0x4, 0x1, 0x28, 0x8, 0x964, 0x7, 0xcd8a, 0x1f, 0x8, 0x8, 0x2, 0x3ff, 0x2, 0xfffffffd, 0x3, 0x40, 0xfffffffa, 0xfffffff7, 0x8, 0x0, 0x0, 0x1, 0x8, 0x8001, 0x2, 0xf, 0x43b, 0x0, 0x10000, 0x1d6, 0x74cf0000, 0x88, 0x3, 0x1, 0x6, 0x6, 0x800, 0x9, 0x2, 0x81, 0x3, 0x7, 0x5, 0x8000, 0x2, 0x0, 0x3ff, 0xdc, 0xfd44, 0x400, 0xfffffff3, 0x61, 0x6, 0x100, 0xd, 0x3]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfbfffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) 33.181337855s ago: executing program 7 (id=2379): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 30.567787338s ago: executing program 7 (id=2382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x801, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) r5 = socket$key(0xf, 0x3, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 28.967800633s ago: executing program 7 (id=2383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) setpgid(r2, r3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 24.236848318s ago: executing program 3 (id=2386): syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x80801, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x300fff2) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x20) 21.623415001s ago: executing program 3 (id=2399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socket$key(0xf, 0x3, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 21.475568552s ago: executing program 9 (id=2391): syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x300fff2) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x20) 19.936825508s ago: executing program 3 (id=2392): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f0000000100f4", 0x7) add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000001640)="be757b136be0357656f10d0ff26044d2a5d19fa95b7cc5c33806f61eb10f6a04fcdb35f9e184cbe3496a81af630460a9eeac05bd0992cd1fd060fe5f3492e030bedfcd99d99220b87dcf89dda8883ec3cf1e77b73f9632bfa41026325604d31a75d4ef378ab3fda434f4c78a9db9c0a10ecb2301641dca5a337000f911541262da236ae1ffffffff00e27ea584dffac25a189404257025", 0x97, 0xfffffffffffffffd) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x8, 0x11}, {@empty, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xfd, 0x202, &(0x7f0000000380)="$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") 18.226829211s ago: executing program 9 (id=2394): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0xfffffffd}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) io_uring_setup(0x2c49, &(0x7f0000002240)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fsmount(r0, 0x0, 0x86) socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000500)={@remote, @random="a6e286036e89", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x80, 0xd4, "df"}}}}}}, 0x0) 17.831849342s ago: executing program 9 (id=2395): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000200)={[{@grpid}, {@resuid}, {@nodelalloc}, {@dioread_nolock}, {@quota}]}, 0x0, 0x54c, &(0x7f0000000280)="$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") chown(0x0, 0x0, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)={r0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2], 0x1, 0x538, &(0x7f0000003480)="$eJzs3VFr21YbwPFHaULyulBe3neUEpL2NN0ghdST7TbFlF1o8rFzWlkyklySqxIap4Q6XWk2WHIzetNtsH2I3u5DjH2hsruxuwxJduskjh3S1M7C/2facyw91nkkGz0otiQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiuRXbLljiGb+5qo7nVsKgPmB+d3m3DzQDxhWxkn8yMyPXsknXPvsw+2ry34LMZc/mZCZpZmTv8tX/Pvj/5ET39QMSGomd3b3n6+1269W4ExmTmvZNFJi6U9PKRIEq/0dEVqqRqhpPR2tRrOvKDbUTB6FadG+rQrlcUjq/FjT9WsXxdHfi/TtF215WD/MN7YRR4H/5MB+5K8bzjF9LY5LZScz95IP4yMQq1k5dqc2tdqs0LMkkqHCSoOKwoKJdLBYKxWJh+V753n3bnjwywT5EjkSM/0OL8TrjPThwehOd+i+eGPGlKaui+j5cqUgogdSPmd/Rrf9fTA8et7f+d6v8tQ+zZyWt/9ezZ9ePq//H5DK6x47syp48l3VpS1ta8mrsGY32URMtvhiJJBAjdXHSKaozRUlZlmVZbHkiK1KVSJRUxYgnWiJZk0hi0eknypVQtDgSSyChKFkUV26LkoLsT5elJEq05GVNAmmKLzWpiJMuZVO20u1eGpDj+6DCSYKKA4Ko//h4Z74PB05rv1v/AQAAAADAhWWlf31Pjv+nZF5kypKq8bQ97rQAAAAAAMAZSr/5n0uaqaQ3LxbH/wAAAAAAXDRWeo6dJSI5uZH1umdC8UcAAAAAAAAuiPT7/+tJk0t6N8Ti+B8AAAAAgIvmp+7VdycOXWP3j3SqZUnUmLZ+/1PCcMp63Vj93Np2khnO9qXsdZcOLzGuzlpXOgtJm+XJzjNXz1mdq1++vwjmu06zOexa/9YZJCC/yM0s5uZG1m5052Sj5KrG03k38B4UxHGuTMR6Nf7uxdb3kq7+z379iiWbW+1W/uk37Y00l9fJUl5vdy6geOQ6igNy+Vbms5j5/ms8lZ6I0Rk3l41r967/RPeNO/mYb2Qhi1nIZW3u4PrPJGMW8g+663Fo7bMspkXko9b8jdzKYm4t3sqaPlkU88e9B51tUezd/qfaFifIojQsi9KwLC5/NTALABiXzSFVyDpa+E+xrx1NdX8ji1nM4my6Y52c7bNHt4ft0e2PrOu/HbkHUv8aW0jH/TUZ9wfZarcK6bhvkxe8PXbcyCtaMvPyr/397ZdydWd3787W9vqz1rPWi2KxtGzfte17RZna3Jps2UnTbtnUHgBAH8PvsTM0wro75Kj6f+9/UpCXpyJ/7+9vyFJ6tkH6i4O+S831/AxhachRa67nDi9LQ47qcj03ejl5bGkE7wQAAKOzMKQOn6T+Lw057j5YywcfHffWcgAA8Gno8J2Vi3+0wtA0nhTK5YITr2gVBu4jFZpKTSvjxzp0Vxy/plUjDOLADbyk89hUdKSiZqMRhLGqBqFqBJFZTe/8rjq3fo903fFj40YNTzuRVm7gx44bq4qJXNVofu2ZaEWH6YujhnZN1bhObAJfRUEzdHVeqUjrnkBT0X5sqibp+qoRmroTrqnHgdesa1XRkRuaRhxkC+yOZfxqENbTxebHvbEBADgndnb3nq+3261Xn7Az7nUEAAAHUaUBAAAAAAAAAAAAAAAAAAAAADj/RnH+37+vM30+0hh3Z+J8pJF1Zno/tucgnzPrWHIu0jjcGd8+CcBo/BMAAP//fJVRAw==") mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x40, 0x1) 16.885261856s ago: executing program 5 (id=2396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) add_key$user(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 15.822256766s ago: executing program 5 (id=2397): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\xba:\x80%m~\x06\\\xaa\x1aU=8\xebR%\xca\xf7\x1f\x8da5\xf9\xf37\xd8r\xc6p\xb3\xd9T{F\xa1\xb3\t\xac\xd7\x7f\x88$}/-[\x80\xd7M]:\xf0\xdc\xbf\x9f\xe7\x8c\xda/\xdc]\xd8\x90\xdb\xcd\x14\xf9\xee\xf2\xfes\x8c\t}\xae\xa6a\x14\x01\x04\x00^f\xa4\xfc\xcc\xc5\xf7\xdc)z\xac\x8b\x80\x91\xad\xc4\x8c\xeb\x83T\x96\xbd\xc3\xf5\xe9L\x89v\"\x9b\xd7\x90I\xae\x13\x8c\xc4%6\xeb\xc9\xca\",R\xdb\x8d U%\x9a[\r\xce\xffrf\x8c\x1b\xeb\xa4\x8cK\xd7\xba\xd0\x16\x88', 0x1) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 14.670357498s ago: executing program 9 (id=2398): r0 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x4042, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setopts(0x4206, r2, 0x3, 0x42) shmctl$IPC_RMID(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000080), 0x1004) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, 0x0) 12.132114147s ago: executing program 47 (id=2383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) setpgid(r2, r3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.069674335s ago: executing program 1 (id=2401): pipe2$9p(0x0, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) recvfrom$unix(r0, &(0x7f00000001c0)=""/153, 0x99, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e7180809079646", 0x9c, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1, 0x0}, &(0x7f0000000380)=0x40) 12.067469994s ago: executing program 9 (id=2410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc001) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) sendmmsg$inet6(r1, &(0x7f00000207c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x8b2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x11}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000002340)}, {&(0x7f0000020a40)="ae78f81080244ad6ae0bb7c97ab7ed226afa00c806dadbcd4163159d481c48749cc852ada56b0776e03606f2532262466eb1ac946553c72e4b0fcb4c186f0de1214d0ed30acfe21333ebaf78008843b0ce6460152a18b45fa8c0481ded039f7d3e0ebcf88869ca1e758141c3", 0x6c}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000001da40)=[{0x0}, {&(0x7f00000209c0)="b11394061c09399cc2fd20971dba8a4e1b1cbf14b0ab67c1884d87c638dfc1406596", 0x22}, {&(0x7f000001d980)}], 0x3, &(0x7f000001dac0)}}, {{0x0, 0x0, &(0x7f000001e180)=[{&(0x7f000001db80)="dbe3c1297b7725300551c17e00efb4159885538ae0e7181d1b02db95ebfa5ed8f6aedd919a60e6efddb51f4561aeadef2b493eb6a544a02ad6a267211289f93f3c8f048575df741657ddbc94179879c31002ee76e5d5bb326fd6165642cb04854450c0c200f7d3afb646043744cdcbb1a6a797f0cbd5dcd01ff683", 0x7b}, {0x0}, {&(0x7f000001dd00)="99c9063a1f", 0x5}, {0x0}, {&(0x7f000001df80)="3a198923716ebbaad614045c12b1db173953f6c84525472e5eed2f4c5ab6dd8731b4420b2ba5325a716e1b878790727905a24254786abc4fe585f2f816ebecc9fcb3f8c942f4d9325aeeba9e5114f76807bbe2fc43727549e14182dd327f2e8f2465", 0x62}, {&(0x7f000001e080)="ffce378a61951db5b122118a11c8340e56569f01446d6b70eef1eb05637b9af3cd8e902bbea0fae53d40faf0a865d706c9cccf7f2aed812d70aeaa5c38242c5f425c66e6bce7c4fbf7273c0e077d175cc25d74898211bf077c0d34f9b1a72957f0c09178dd8d89116b1e2c0a880095c1c102e055cddddb162e4d83a7b18f8226acdf3badc5762b1413a50cc0be560e7cc9ed5d73aed0f660a5cbed4a5d110af315db415177eee9f50c035b533d773b5f56f6a89540095ec5e42824a5cd2084", 0xbf}], 0x6, &(0x7f0000020b00)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts={{0xb8, 0x29, 0x37, {0x2b, 0x13, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @generic={0x7, 0x4, "099c284b"}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn={0x1, 0x1, [0x0]}, @generic={0x3, 0x43, "5a6c719bf3ca782a4760f3b65326ff1ad827e620fb31f0f1fb179d9261894e24ed1f723b6372ddc7fe9a502a2e78e31723da9660b7776ee856b767d512b2ab9f6fb83e"}, @generic={0x0, 0x21, "675e55711a3e7997c7269ade783f4f9924c9587ddd05fe19a66442f9b7d770eb03"}]}}}], 0xe8}}], 0x6, 0x40091) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 12.066777324s ago: executing program 5 (id=2411): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) close(r7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000100)={0x2, 0x5, 0xfffffffb, 0x1, '\x00', 0x8e9}) fcntl$dupfd(r0, 0x0, r0) 10.93255347s ago: executing program 1 (id=2402): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = epoll_create1(0x80000) memfd_create(&(0x7f0000000900)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\'u\xa4\x00_\xaf8\xdf-J?V=\xf3\xb4\xac\x179\x9f\x04\x100\x9f\xd4\xd6\x8d\xde\xc2Z\x17H\v\xeb_ug\xb1\x90_}\x9f\xa05D\xa8\xce#h`\x1c\x98\xa8\x0e\x86\xda&i)R1\xb7\xf5\n\x87\xd9z6\xc4\x9c1\xf3E-{1V\xe4\x99[\xe1\x85\x83??e\xae\x8a\xb2\xf8\x14z\xd3T/9\x00g\xba\x13x0}\xf6\xeb\xaeT\xa9\xe18\x06\xd8GwS\xc7\x85u\xc4\xa1\x9e\xf1\xc0\x8b\xd1\x14j\x88\x99\xfe\xeb\x83\x13]\r\xb7\xbf\x9cSL\xe3i\xc3\xfe\r\xf7%\x92,\xef\xf2\xc1\xb5\xb0\x16\x17W\xbc\x14\xc3\x05\xcdnY\x9a2\xa8U\x13\x869\xc5\xb6\xa3\x00\x86\xb9\xb0\x91\x83\x8an\xc5\x9a\xaeML\x91\xa0r\v\xbd\x8d\xf4\xa6\xc7E\xf8\x8bC0s\x99jO\x9dc\xefa\x85\x9a\xb1\x90\x01-\xb0L\x82\xe9\x03\xc2\xae', 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r5, 0x2285, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x60000006}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2000}) 9.561278288s ago: executing program 1 (id=2403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socket$key(0xf, 0x3, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 7.973121825s ago: executing program 1 (id=2404): syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x300fff2) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x20) 5.557244448s ago: executing program 3 (id=2405): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) socket$kcm(0x10, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x21c) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000500)={0x7, 0x29c8, 0x105, 0x0, 0x6}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x80001) openat$ttyS3(0xffffff9c, 0x0, 0x800, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x800000000, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.557089178s ago: executing program 5 (id=2406): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0xfffffffd}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) io_uring_setup(0x2c49, &(0x7f0000002240)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fsmount(r0, 0x0, 0x86) socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000500)={@remote, @random="a6e286036e89", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x80, 0xd4, "df"}}}}}}, 0x0) 2.238076532s ago: executing program 1 (id=2407): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x101001, 0x120) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) gettid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.207656586s ago: executing program 5 (id=2408): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl(0xffffffffffffffff, 0x8b22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) pread64(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x7, @empty}}, 0x0, 0x7fc, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.102924105s ago: executing program 3 (id=2409): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0x2, 0x1, 0xa, 0x9}, {0x0, 0xd9, 0xd, 0x9}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@loopback, 0x80ff, 0x3c}, @in=@multicast1, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[], 0x0) 86.877567ms ago: executing program 1 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(r4, 0x0, 0x3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@grpid}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) 86.633967ms ago: executing program 5 (id=2413): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/unix\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000)=0x8, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffff7, @rand_addr, 0xfffffffd}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="5c0200079078fffd"], 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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") 0s ago: executing program 9 (id=2414): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc2003, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000c00)=ANY=[]) r2 = openat(0xffffffffffffff9c, 0x0, 0x1842, 0x136) sendfile(r2, r2, 0x0, 0x23) bind$inet6(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) fcntl$notify(0xffffffffffffffff, 0x402, 0x25) kernel console output (not intermixed with test programs): netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.900274][ T4392] device hsr_slave_0 left promiscuous mode [ 1225.917855][ T4392] device hsr_slave_1 left promiscuous mode [ 1225.938557][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.947211][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.958533][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.971590][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.979968][ T4392] device bridge_slave_1 left promiscuous mode [ 1225.986565][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.999450][ T4392] device bridge_slave_0 left promiscuous mode [ 1226.006337][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.056939][ T4392] device veth1_macvtap left promiscuous mode [ 1226.071875][ T4392] device veth0_macvtap left promiscuous mode [ 1226.079540][ T4392] device veth1_vlan left promiscuous mode [ 1226.085688][ T4392] device veth0_vlan left promiscuous mode [ 1227.029607][ T4392] team0 (unregistering): Port device team_slave_1 removed [ 1227.103089][ T4392] team0 (unregistering): Port device team_slave_0 removed [ 1227.169059][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.233605][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.403806][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 1227.766025][ T4392] bond0 (unregistering): Released all slaves [ 1227.945200][T13036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.245343][T13036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1228.283255][T13036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1228.307142][T13036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1228.317471][T13036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1228.480639][T13036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.505407][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1228.524852][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1228.556415][T13036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.578313][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1228.588920][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1228.608131][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.615357][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.635694][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1228.644244][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1228.656079][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1228.664816][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.671969][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.687037][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1228.702215][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1228.728963][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1228.751168][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1228.766662][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1228.776249][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1228.794105][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1228.803310][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1228.812043][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1228.822669][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1228.832271][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1228.844253][T13036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1229.153814][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1229.161356][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1229.177066][T13036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.202041][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1229.212335][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1229.252123][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1229.262382][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1229.276252][T13036] device veth0_vlan entered promiscuous mode [ 1229.287766][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1229.300504][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1229.317677][T13036] device veth1_vlan entered promiscuous mode [ 1229.370645][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1229.379979][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1229.389464][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1229.400726][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1229.412158][T13036] device veth0_macvtap entered promiscuous mode [ 1229.429719][T13036] device veth1_macvtap entered promiscuous mode [ 1229.461922][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.472704][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.483681][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.494260][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.494268][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1229.513447][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.524186][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.534433][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.545032][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.555175][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.566257][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.576314][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.587899][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.599765][T13036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.611005][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1229.632249][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1229.645808][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1229.670626][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1229.684932][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.702877][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.722127][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.744560][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.770582][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.781538][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.803459][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.819983][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.832412][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.843224][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.854662][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.867053][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.878731][T13036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.892075][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1229.901978][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1229.914417][T13036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.925689][T13036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.934991][T13036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.943865][T13036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.059494][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.073361][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.088692][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1230.130819][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.151075][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.161538][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1231.594712][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1239.160361][T13189] loop4: detected capacity change from 0 to 512 [ 1239.365827][T13189] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1240.807116][T13212] usb usb9: usbfs: process 13212 (syz.4.1665) did not claim interface 3 before use [ 1241.151055][T13213] netlink: 'syz.0.1654': attribute type 3 has an invalid length. [ 1243.903363][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.910039][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.679583][ T128] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1244.863602][ T128] usb 5-1: Using ep0 maxpacket: 16 [ 1245.908081][ T128] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.919710][ T128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1245.927842][ T128] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1245.942948][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.954282][ T128] usb 5-1: config 0 descriptor?? [ 1246.049178][T13245] random: crng reseeded on system resumption [ 1246.935998][ T128] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1248.290487][T13269] loop0: detected capacity change from 0 to 128 [ 1248.320997][T13236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.364493][T13236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.456702][T13269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1248.491108][T13269] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1249.734972][T11570] usb 5-1: USB disconnect, device number 8 [ 1249.784424][T13036] EXT4-fs (loop0): unmounting filesystem. [ 1252.433499][T13299] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1259.981207][T13337] loop8: detected capacity change from 0 to 2048 [ 1260.122259][T13337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1269.461439][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1709'. [ 1272.749979][T13410] loop0: detected capacity change from 0 to 2048 [ 1272.826223][T13410] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1274.154813][T13429] loop5: detected capacity change from 0 to 128 [ 1274.176445][ T128] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1274.403080][ T128] usb 9-1: Using ep0 maxpacket: 16 [ 1274.416593][ T128] usb 9-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1274.441049][ T128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.042452][ T128] usb 9-1: config 0 descriptor?? [ 1276.848752][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 1277.595798][ T128] usbhid 9-1:0.0: can't add hid device: -71 [ 1277.602017][ T128] usbhid: probe of 9-1:0.0 failed with error -71 [ 1278.537360][ T128] usb 9-1: USB disconnect, device number 9 [ 1278.632211][T13444] loop8: detected capacity change from 0 to 512 [ 1278.838199][T13444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1279.034467][T13444] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data [ 1285.132065][T13482] loop4: detected capacity change from 0 to 2048 [ 1285.283042][T13482] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1293.498909][T13517] loop0: detected capacity change from 0 to 512 [ 1293.653072][T13517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1293.698220][T13517] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 1296.957358][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 1299.610528][T13558] loop0: detected capacity change from 0 to 16 [ 1300.077112][T13558] erofs: (device loop0): mounted with root inode @ nid 36. [ 1300.119720][T13556] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1300.129516][ T4284] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1300.143390][T13556] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1300.154806][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1300.154820][ T26] audit: type=1800 audit(1772165543.612:129): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1739" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 1300.942963][T13050] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1301.414606][T13050] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.427779][T13050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1301.438955][T13050] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1301.454744][T13050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.470347][T13050] usb 6-1: config 0 descriptor?? [ 1303.673036][T13583] block device autoloading is deprecated and will be removed. [ 1303.756264][T13582] comedi: valid board names for 8255 driver are: [ 1303.762704][T13582] 8255 [ 1303.765252][T13050] kye 0003:0458:0153.0004: item fetching failed at offset 2/5 [ 1303.765631][T13582] comedi: valid board names for vmk80xx driver are: [ 1303.779674][T13582] vmk80xx [ 1303.782741][T13582] comedi: valid board names for usbduxsigma driver are: [ 1303.789791][T13582] usbduxsigma [ 1303.793213][T13582] comedi: valid board names for usbduxfast driver are: [ 1303.800152][T13582] usbduxfast [ 1303.803458][T13582] comedi: valid board names for usbdux driver are: [ 1303.809955][T13582] usbdux [ 1303.812938][T13582] comedi: valid board names for ni6501 driver are: [ 1303.819478][T13582] ni6501 [ 1303.822541][T13582] comedi: valid board names for dt9812 driver are: [ 1303.829165][T13582] dt9812 [ 1303.832156][T13582] comedi: valid board names for ni_labpc_cs driver are: [ 1303.839271][T13582] ni_labpc_cs [ 1303.842688][T13582] comedi: valid board names for ni_daq_700 driver are: [ 1303.850147][T13582] ni_daq_700 [ 1303.853516][T13582] comedi: valid board names for labpc_pci driver are: [ 1303.860331][T13582] labpc_pci [ 1303.863632][T13582] comedi: valid board names for adl_pci9118 driver are: [ 1303.870614][T13582] pci9118dg [ 1303.873991][T13582] pci9118hg [ 1303.877214][T13582] pci9118hr [ 1303.880411][T13582] comedi: valid board names for 8255_pci driver are: [ 1303.887145][T13582] 8255_pci [ 1303.890260][T13582] comedi: valid board names for s526 driver are: [ 1303.896668][T13582] s526 [ 1303.899441][T13582] comedi: valid board names for multiq3 driver are: [ 1303.906065][T13582] multiq3 [ 1303.909103][T13582] comedi: valid board names for pcmuio driver are: [ 1303.915644][T13582] pcmuio48 [ 1303.918769][T13582] pcmuio96 [ 1303.921880][T13582] comedi: valid board names for pcmmio driver are: [ 1303.928433][T13582] pcmmio [ 1303.931377][T13582] comedi: valid board names for pcmda12 driver are: [ 1303.938003][T13582] pcmda12 [ 1303.941029][T13582] comedi: valid board names for pcmad driver are: [ 1303.947476][T13582] pcmad12 [ 1303.950500][T13582] pcmad16 [ 1303.953594][T13582] comedi: valid board names for ni_labpc driver are: [ 1303.960306][T13582] lab-pc-1200 [ 1303.963754][T13582] lab-pc-1200ai [ 1303.967304][T13582] lab-pc+ [ 1303.970331][T13582] comedi: valid board names for atmio16 driver are: [ 1303.976946][T13582] atmio16 [ 1303.980018][T13582] atmio16d [ 1303.983207][T13582] comedi: valid board names for ni_at_ao driver are: [ 1303.989928][T13582] at-ao-6 [ 1303.993038][T13582] at-ao-10 [ 1303.996185][T13582] comedi: valid board names for ni_at_a2150 driver are: [ 1304.003181][T13582] ni_at_a2150 [ 1304.006658][T13582] comedi: valid board names for adq12b driver are: [ 1304.013241][T13582] adq12b [ 1304.016201][T13582] comedi: valid board names for mpc624 driver are: [ 1304.023298][T13582] mpc624 [ 1304.026249][T13582] comedi: valid board names for c6xdigio driver are: [ 1304.032964][T13582] c6xdigio [ 1304.036093][T13582] comedi: valid board names for aio_iiro_16 driver are: [ 1304.043159][T13582] aio_iiro_16 [ 1304.046556][T13582] comedi: valid board names for aio_aio12_8 driver are: [ 1304.053642][T13582] aio_aio12_8 [ 1304.057059][T13582] aio_ai12_8 [ 1304.060478][T13582] aio_ao12_4 [ 1304.063844][T13582] comedi: valid board names for fl512 driver are: [ 1304.070303][T13582] fl512 [ 1304.073248][T13582] comedi: valid board names for dmm32at driver are: [ 1304.079884][T13582] dmm32at [ 1304.082993][T13582] comedi: valid board names for dt282x driver are: [ 1304.089535][T13582] dt2821 [ 1304.092518][T13582] dt2821-f [ 1304.095774][T13582] dt2821-g [ 1304.098931][T13582] dt2823 [ 1304.101911][T13582] dt2824-pgh [ 1304.105289][T13582] dt2824-pgl [ 1304.108582][T13582] dt2825 [ 1304.111519][T13582] dt2827 [ 1304.114485][T13582] dt2828 [ 1304.117431][T13582] dt2829 [ 1304.120372][T13582] dt21-ez [ 1304.123520][T13582] dt23-ez [ 1304.126545][T13582] dt24-ez [ 1304.129573][T13582] dt24-ez-pgl [ 1304.133010][T13582] comedi: valid board names for dt2817 driver are: [ 1304.139520][T13582] dt2817 [ 1304.142456][T13582] comedi: valid board names for dt2815 driver are: [ 1304.148999][T13582] dt2815 [ 1304.151982][T13582] comedi: valid board names for dt2814 driver are: [ 1304.158549][T13582] dt2814 [ 1304.161509][T13582] comedi: valid board names for dt2811 driver are: [ 1304.168075][T13582] dt2811-pgh [ 1304.171364][T13582] dt2811-pgl [ 1304.174676][T13582] comedi: valid board names for dt2801 driver are: [ 1304.181179][T13582] dt2801 [ 1304.184162][T13582] comedi: valid board names for das6402 driver are: [ 1304.190762][T13582] das6402-12 [ 1304.194075][T13582] das6402-16 [ 1304.197365][T13582] comedi: valid board names for das1800 driver are: [ 1304.204003][T13582] das-1701st [ 1304.207291][T13582] das-1701st-da [ 1304.210840][T13582] das-1702st [ 1304.214154][T13582] das-1702st-da [ 1304.217700][T13582] das-1702hr [ 1304.220981][T13582] das-1702hr-da [ 1304.224561][T13582] das-1701ao [ 1304.227849][T13582] das-1702ao [ 1304.231224][T13582] das-1801st [ 1304.234539][T13582] das-1801st-da [ 1304.238100][T13582] das-1802st [ 1304.241395][T13582] das-1802st-da [ 1304.244979][T13582] das-1802hr [ 1304.248269][T13582] das-1802hr-da [ 1304.251815][T13582] das-1801hc [ 1304.255124][T13582] das-1802hc [ 1304.258437][T13582] das-1801ao [ 1304.261726][T13582] das-1802ao [ 1304.265055][T13582] comedi: valid board names for das800 driver are: [ 1304.271558][T13582] das-800 [ 1304.274609][T13582] cio-das800 [ 1304.277896][T13582] das-801 [ 1304.280919][T13582] cio-das801 [ 1304.284273][T13582] das-802 [ 1304.287304][T13582] cio-das802 [ 1304.290595][T13582] cio-das802/16 [ 1304.294204][T13582] comedi: valid board names for isa-das08 driver are: [ 1304.300999][T13582] isa-das08 [ 1304.304236][T13582] das08-pgm [ 1304.307457][T13582] das08-pgh [ 1304.310660][T13582] das08-pgl [ 1304.313889][T13582] das08-aoh [ 1304.317112][T13582] das08-aol [ 1304.320315][T13582] das08-aom [ 1304.323566][T13582] das08/jr-ao [ 1304.326979][T13582] das08jr-16-ao [ 1304.330542][T13582] pc104-das08 [ 1304.333960][T13582] das08jr/16 [ 1304.337255][T13582] comedi: valid board names for das16m1 driver are: [ 1304.343913][T13582] das16m1 [ 1304.346943][T13582] comedi: valid board names for dac02 driver are: [ 1304.353418][T13582] dac02 [ 1304.356317][T13582] comedi: valid board names for rti802 driver are: [ 1304.362917][T13582] rti802 [ 1304.365909][T13582] comedi: valid board names for rti800 driver are: [ 1304.372448][T13582] rti800 [ 1304.375441][T13582] rti815 [ 1304.378387][T13582] comedi: valid board names for pcm3724 driver are: [ 1304.385007][T13582] pcm3724 [ 1304.388055][T13582] comedi: valid board names for pcl818 driver are: [ 1304.394584][T13582] pcl818l [ 1304.397637][T13582] pcl818h [ 1304.400664][T13582] pcl818hd [ 1304.403810][T13582] pcl818hg [ 1304.406937][T13582] pcl818 [ 1304.409877][T13582] pcl718 [ 1304.412878][T13582] pcm3718 [ 1304.415917][T13582] comedi: valid board names for pcl816 driver are: [ 1304.422429][T13582] pcl816 [ 1304.425406][T13582] pcl814b [ 1304.428694][T13582] comedi: valid board names for pcl812 driver are: [ 1304.435246][T13582] pcl812 [ 1304.438208][T13582] pcl812pg [ 1304.441325][T13582] acl8112pg [ 1304.444583][T13582] acl8112dg [ 1304.447802][T13582] acl8112hg [ 1304.450998][T13582] a821pgl [ 1304.454054][T13582] a821pglnda [ 1304.457365][T13582] a821pgh [ 1304.460392][T13582] a822pgl [ 1304.463546][T13582] a822pgh [ 1304.466666][T13582] a823pgl [ 1304.469710][T13582] a823pgh [ 1304.472737][T13582] pcl813 [ 1304.475793][T13582] pcl813b [ 1304.478820][T13582] acl8113 [ 1304.481848][T13582] iso813 [ 1304.484829][T13582] acl8216 [ 1304.487856][T13582] a826pg [ 1304.490811][T13582] comedi: valid board names for pcl730 driver are: [ 1304.497376][T13582] pcl730 [ 1304.500333][T13582] iso730 [ 1304.503329][T13582] acl7130 [ 1304.506377][T13582] pcm3730 [ 1304.509412][T13582] pcl725 [ 1304.512363][T13582] p8r8dio [ 1304.515432][T13582] acl7225b [ 1304.518553][T13582] p16r16dio [ 1304.521752][T13582] pcl733 [ 1304.524732][T13582] pcl734 [ 1304.527672][T13582] opmm-1616-xt [ 1304.531132][T13582] pearl-mm-p [ 1304.534451][T13582] ir104-pbf [ 1304.537648][T13582] comedi: valid board names for pcl726 driver are: [ 1304.544179][T13582] pcl726 [ 1304.547116][T13582] pcl727 [ 1304.550051][T13582] pcl728 [ 1304.553012][T13582] acl6126 [ 1304.556033][T13582] acl6128 [ 1304.559063][T13582] comedi: valid board names for pcl724 driver are: [ 1304.565612][T13582] pcl724 [ 1304.568551][T13582] pcl722 [ 1304.571491][T13582] pcl731 [ 1304.574456][T13582] acl7122 [ 1304.577479][T13582] acl7124 [ 1304.580512][T13582] pet48dio [ 1304.583672][T13582] pcmio48 [ 1304.586696][T13582] onyx-mm-dio [ 1304.590065][T13582] comedi: valid board names for pcl711 driver are: [ 1304.596589][T13582] pcl711 [ 1304.599536][T13582] pcl711b [ 1304.602561][T13582] acl8112hg [ 1304.605793][T13582] acl8112dg [ 1304.608993][T13582] comedi: valid board names for amplc_pc263 driver are: [ 1304.615947][T13582] pc263 [ 1304.618807][T13582] comedi: valid board names for amplc_pc236 driver are: [ 1304.625796][T13582] pc36at [ 1304.628735][T13582] comedi: valid board names for amplc_dio200 driver are: [ 1304.635784][T13582] pc212e [ 1304.638718][T13582] pc214e [ 1304.641653][T13582] pc215e [ 1304.644623][T13582] pc218e [ 1304.647557][T13582] pc272e [ 1304.650490][T13582] comedi: valid board names for comedi_parport driver are: [ 1304.657699][T13582] comedi_parport [ 1304.661329][T13582] comedi: valid board names for comedi_test driver are: [ 1304.668394][T13582] comedi_test [ 1304.671779][T13582] comedi: valid board names for comedi_bond driver are: [ 1304.678761][T13582] comedi_bond [ 1304.731005][T13050] kye 0003:0458:0153.0004: parse failed [ 1304.745907][T13050] kye: probe of 0003:0458:0153.0004 failed with error -22 [ 1305.088834][T13050] usb 6-1: USB disconnect, device number 5 [ 1305.978199][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.984767][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.526779][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1749'. [ 1308.581593][T13621] vivid-007: kernel_thread() failed [ 1310.857014][T13646] binder_alloc: 13644: binder_alloc_buf, no vma [ 1326.630507][T13767] binder: BINDER_SET_CONTEXT_MGR already set [ 1326.636793][T13767] binder: 13763:13767 ioctl 4018620d 200000000040 returned -16 [ 1332.717056][T13817] loop4: detected capacity change from 0 to 2048 [ 1348.736257][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 1356.796669][T13977] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1827'. [ 1357.374066][T13980] binder_alloc: 13978: binder_alloc_buf, no vma [ 1360.538211][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1360.763325][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1360.842215][ T22] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1360.851838][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.861397][ T22] usb 4-1: Product: syz [ 1360.866824][ T22] usb 4-1: Manufacturer: syz [ 1360.871564][ T22] usb 4-1: SerialNumber: syz [ 1360.897838][ T22] usb 4-1: config 0 descriptor?? [ 1362.812581][ T22] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -71 [ 1362.870437][ T22] usb 4-1: USB disconnect, device number 2 [ 1363.383658][T14017] input: syz1 as /devices/virtual/input/input9 [ 1364.708192][T14023] overlayfs: overlapping lowerdir path [ 1366.769685][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.782164][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.776221][T14042] binder_alloc: 14040: binder_alloc_buf, no vma [ 1375.620248][T14084] loop0: detected capacity change from 0 to 1024 [ 1377.529581][T14096] loop0: detected capacity change from 0 to 2048 [ 1378.273750][T14096] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1378.343084][T14096] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.824590][T14096] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1381.444225][T14123] loop5: detected capacity change from 0 to 128 [ 1381.516924][T13036] EXT4-fs (loop0): unmounting filesystem. [ 1381.790721][T14123] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1381.897585][T14123] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.203740][T10039] EXT4-fs (loop5): unmounting filesystem. [ 1385.367326][T14152] loop5: detected capacity change from 0 to 32768 [ 1385.397110][T14152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1863 (14152) [ 1385.417300][T14152] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1385.427598][T14152] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1385.436404][T14152] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1385.444580][T14152] BTRFS info (device loop5): enabling auto defrag [ 1385.451035][T14152] BTRFS info (device loop5): max_inline at 0 [ 1385.457363][T14152] BTRFS info (device loop5): using free space tree [ 1387.534883][T10039] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1390.449754][T14189] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.489743][T14189] binder: 14188:14189 ioctl 4018620d 200000000040 returned -16 [ 1390.624894][T14210] loop5: detected capacity change from 0 to 128 [ 1390.805652][T14215] syz.5.1873: attempt to access beyond end of device [ 1390.805652][T14215] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1394.728571][T14234] loop8: detected capacity change from 0 to 128 [ 1394.738320][T14234] EXT4-fs: Ignoring removed nobh option [ 1394.917162][T14234] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1394.927648][T14234] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.553528][ T7972] EXT4-fs (loop8): unmounting filesystem. [ 1396.751860][T14249] Bluetooth: MGMT ver 1.22 [ 1400.439315][T14270] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1884'. [ 1402.545976][T14281] loop8: detected capacity change from 0 to 512 [ 1402.558879][T14281] EXT4-fs: Ignoring removed oldalloc option [ 1402.628050][T14285] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1403.498363][T14281] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1887: bad orphan inode 11862016 [ 1403.511338][T14281] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1403.618323][T14281] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.707623][T14281] binder: 14280:14281 ioctl ae01 28 returned -22 [ 1403.816642][ T7972] EXT4-fs (loop8): unmounting filesystem. [ 1403.952842][T11153] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1404.512781][T14303] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1889'. [ 1405.215439][T11153] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1405.487304][T11153] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.498493][T11153] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1405.508481][T11153] usb 4-1: config 220 has no interface number 1 [ 1405.516296][T11153] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1405.523465][T11153] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1405.565384][T11153] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1405.587495][T11153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.607800][T11153] usb 4-1: Product: syz [ 1405.612047][T11153] usb 4-1: Manufacturer: syz [ 1405.629568][T11153] usb 4-1: SerialNumber: syz [ 1405.714322][T14311] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1892'. [ 1405.899082][T11153] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1405.905600][T11153] usb 4-1: No valid video chain found. [ 1405.921990][T11153] usb 4-1: USB disconnect, device number 3 [ 1408.556237][T14345] loop8: detected capacity change from 0 to 512 [ 1408.563610][T14345] EXT4-fs: Ignoring removed nobh option [ 1408.590432][T14345] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1408.617156][T14345] EXT4-fs error (device loop8): __ext4_iget:5095: inode #11: block 1: comm syz.8.1897: invalid block [ 1408.629040][T14345] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1897: couldn't read orphan inode 11 (err -117) [ 1408.642793][T14345] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1408.887938][ T7972] EXT4-fs (loop8): unmounting filesystem. [ 1414.193025][T14366] loop5: detected capacity change from 0 to 2048 [ 1414.286772][T14366] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1414.383239][T14366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1414.609552][T14376] loop8: detected capacity change from 0 to 512 [ 1414.630861][T14376] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1415.374243][T12643] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1416.029213][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1416.048232][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1416.057805][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1416.075634][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1416.127164][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1416.134640][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1418.701231][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 1418.957643][T14388] chnl_net:caif_netlink_parms(): no params data found [ 1420.762880][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 1420.769290][T14388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.963195][T14388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.301967][T14388] device bridge_slave_0 entered promiscuous mode [ 1421.335810][T14388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.350446][T14388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.410571][T14388] device bridge_slave_1 entered promiscuous mode [ 1421.606887][T14388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.680492][T14388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.888110][T14388] team0: Port device team_slave_0 added [ 1422.845599][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 1422.897634][T14388] team0: Port device team_slave_1 added [ 1423.045108][T14388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.052136][T14388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.243730][T14388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.306477][T14388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.349088][T14388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.285294][T14388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.923769][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 1425.250468][T14388] device hsr_slave_0 entered promiscuous mode [ 1425.393588][T14388] device hsr_slave_1 entered promiscuous mode [ 1425.557181][T14388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1425.694496][T14388] Cannot create hsr debugfs directory [ 1428.213996][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.220565][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.279491][T14496] netlink: 'syz.8.1924': attribute type 3 has an invalid length. [ 1436.014797][T14388] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1436.034559][T14388] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1436.044965][T14388] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1436.071004][T14388] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1436.153177][T13048] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1436.379376][T13048] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1436.421785][T13048] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.571665][T13048] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1436.685099][T13048] usb 6-1: config 220 has no interface number 1 [ 1436.723183][T13048] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1436.730043][T13048] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1436.787359][T13048] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1436.832943][T13048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.922975][T13048] usb 6-1: Product: syz [ 1436.927235][T13048] usb 6-1: Manufacturer: syz [ 1436.931891][T13048] usb 6-1: SerialNumber: syz [ 1436.944427][T14388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.976115][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1436.995076][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1438.260052][T14527] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1932'. [ 1438.652357][T14388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.666830][T13048] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1438.689007][T13048] usb 6-1: No valid video chain found. [ 1438.716348][T13048] usb 6-1: USB disconnect, device number 6 [ 1438.743886][T14534] loop3: detected capacity change from 0 to 256 [ 1438.753069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1438.771205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1438.823510][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.830777][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.879751][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1438.920162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1438.974387][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1438.985375][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.992775][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.001621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1439.010833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1439.042999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1439.573004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1439.805969][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1439.815919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1439.826367][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1439.835236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1439.844523][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1439.860713][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1439.903549][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1440.479665][T14388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1443.179464][T14576] binder: BINDER_SET_CONTEXT_MGR already set [ 1443.185615][T14576] binder: 14574:14576 ioctl 4018620d 200000000040 returned -16 [ 1443.461236][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1443.483734][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1443.518141][T14388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.817278][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1449.890743][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1450.411145][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1450.434662][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1450.556261][T14388] device veth0_vlan entered promiscuous mode [ 1450.615162][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1450.653308][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1450.678053][T14388] device veth1_vlan entered promiscuous mode [ 1452.360085][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1452.487975][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1452.631324][T14628] binder: BINDER_SET_CONTEXT_MGR already set [ 1452.663130][T14628] binder: 14623:14628 ioctl 4018620d 200000000040 returned -16 [ 1452.749266][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1452.777452][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1452.878884][T14388] device veth0_macvtap entered promiscuous mode [ 1452.946713][T14388] device veth1_macvtap entered promiscuous mode [ 1453.049538][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.080611][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.111280][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.292799][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.052914][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.112857][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.183917][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.364814][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.425143][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.101609][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.154685][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.381964][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.488824][T14653] loop0: detected capacity change from 0 to 512 [ 1455.499321][T14653] EXT4-fs: Ignoring removed nobh option [ 1455.524208][T14653] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1456.217703][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.242462][T14653] EXT4-fs error (device loop0): __ext4_iget:5095: inode #11: block 1: comm syz.0.1955: invalid block [ 1456.251023][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.264870][T14653] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1955: couldn't read orphan inode 11 (err -117) [ 1456.290418][T14653] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1456.295438][T14388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.382073][T14639] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1456.470421][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1456.569332][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1456.581000][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1456.595926][T13036] EXT4-fs (loop0): unmounting filesystem. [ 1456.604033][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1456.652044][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.706233][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.751896][T14659] loop3: detected capacity change from 0 to 512 [ 1456.766711][T14659] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1456.862217][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.905312][T14659] EXT4-fs error (device loop3): __ext4_fill_super:5423: inode #2: comm syz.3.1956: inode has both inline data and extents flags [ 1456.937630][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.944087][T14659] EXT4-fs (loop3): Remounting filesystem read-only [ 1456.968616][T14659] EXT4-fs (loop3): get root inode failed [ 1456.975351][T14659] EXT4-fs (loop3): mount failed [ 1457.060556][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.164506][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.291513][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.441683][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.566754][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.602758][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.631392][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.712959][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.904805][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.392371][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.416642][T14388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.437899][T10566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1458.461283][T10566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1458.491841][T14388] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.511103][T14388] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.536940][T14388] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.556081][T14388] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.816829][T11203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.834339][T11203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.896492][T13679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1460.081562][T11203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.110507][T11203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.119901][T13679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1472.966102][T14760] loop8: detected capacity change from 0 to 128 [ 1474.724977][T14771] loop3: detected capacity change from 0 to 32768 [ 1474.752026][T14771] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 1477.181185][T14785] binder: 14784:14785 ioctl c0306201 0 returned -14 [ 1477.744467][T14786] binder: 14784:14786 ioctl c0306201 200000000680 returned -14 [ 1478.861109][T14452] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 1480.007132][T14795] binder_alloc: 14794: binder_alloc_buf, no vma [ 1483.646257][T14839] No such timeout policy "syz1" [ 1483.662087][T14839] autofs4:pid:14839:autofs_fill_super: called with bogus options [ 1487.298977][T14865] binder: BINDER_SET_CONTEXT_MGR already set [ 1487.306835][T14865] binder: 14863:14865 ioctl 4018620d 200000000040 returned -16 [ 1490.554308][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.560724][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.086964][T14927] binder_alloc: 14924: binder_alloc_buf, no vma [ 1495.778775][T14944] binder_alloc: 14942: binder_alloc_buf, no vma [ 1498.855855][T14962] loop8: detected capacity change from 0 to 2048 [ 1499.473129][T14962] NILFS (loop8): invalid segment: Magic number mismatch [ 1499.481080][T14962] NILFS (loop8): trying rollback from an earlier position [ 1499.582369][T14962] NILFS (loop8): recovery complete [ 1501.207448][T14963] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1501.969215][T14976] loop0: detected capacity change from 0 to 128 [ 1503.814177][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2020'. [ 1504.235664][T14982] syz.0.2022: attempt to access beyond end of device [ 1504.235664][T14982] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1506.228036][T14992] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2023'. [ 1506.299464][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2023'. [ 1516.346571][T15057] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1516.355739][T15057] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1516.380910][T15057] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1516.389475][T15057] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1516.400216][T15057] overlayfs: d_ino too big (13, ino=9223372036854775900, xinobits=3) [ 1516.408963][T15057] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1516.418121][T15057] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1516.427274][T15057] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1516.441751][T15057] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1516.450596][T15057] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1516.459109][T15057] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 1516.468808][T15057] overlayfs: d_ino too big (syz8, ino=4611686018427388150, xinobits=3) [ 1529.426514][T15132] loop5: detected capacity change from 0 to 512 [ 1529.560407][T15132] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2054: inode has both inline data and extents flags [ 1529.715092][T15132] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2054: couldn't read orphan inode 15 (err -117) [ 1529.778909][T15132] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1530.126160][T15141] overlayfs: missing 'lowerdir' [ 1530.950403][T10039] EXT4-fs (loop5): unmounting filesystem. [ 1532.366114][T15156] loop6: detected capacity change from 0 to 512 [ 1532.376675][T15156] EXT4-fs: Ignoring removed nobh option [ 1532.477917][T15156] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1533.057611][T15156] EXT4-fs error (device loop6): __ext4_iget:5095: inode #11: block 1: comm syz.6.2052: invalid block [ 1533.069394][T15156] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2052: couldn't read orphan inode 11 (err -117) [ 1533.082114][T15156] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1533.425069][T14388] EXT4-fs (loop6): unmounting filesystem. [ 1533.537847][T15165] usb usb9: usbfs: process 15165 (syz.0.2046) did not claim interface 3 before use [ 1534.442861][ T9104] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1536.626758][ T9104] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1536.652725][ T9104] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.660839][ T9104] usb 6-1: Product: syz [ 1536.685375][ T9104] usb 6-1: Manufacturer: syz [ 1536.710213][ T9104] usb 6-1: SerialNumber: syz [ 1538.335497][ T9104] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1538.447005][ T9104] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1538.511390][ T9104] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1538.549014][ T9104] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1538.782336][ T9104] lan78xx: probe of 6-1:1.0 failed with error -71 [ 1540.295963][ T9104] usb 6-1: USB disconnect, device number 7 [ 1541.553610][T15232] loop5: detected capacity change from 0 to 512 [ 1541.560908][T15232] EXT4-fs: Ignoring removed nobh option [ 1541.725975][T15232] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1541.855526][T15232] EXT4-fs error (device loop5): __ext4_iget:5095: inode #11: block 1: comm syz.5.2066: invalid block [ 1541.868226][T15232] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2066: couldn't read orphan inode 11 (err -117) [ 1541.882391][T15232] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1542.477019][T10039] EXT4-fs (loop5): unmounting filesystem. [ 1542.696364][T15243] binder_alloc: 15241: binder_alloc_buf, no vma [ 1545.594622][T15262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1549.209009][ T52] block nbd5: Attempted send on invalid socket [ 1549.215695][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1549.228917][T15283] efs: cannot read volume header [ 1551.101491][T15296] binder_alloc: 15294: binder_alloc_buf, no vma [ 1552.178219][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.200252][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.026969][T15311] netlink: 'syz.3.2086': attribute type 2 has an invalid length. [ 1556.449234][T15304] syz.5.2087 (15304): drop_caches: 2 [ 1556.747081][T15325] loop5: detected capacity change from 0 to 1024 [ 1557.797458][ T9551] hfsplus: b-tree write err: -5, ino 4 [ 1562.260346][T15350] delete_channel: no stack [ 1568.627013][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1568.645510][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1568.654845][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1568.662808][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1568.672200][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1568.679557][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1568.696617][ T4271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1568.710264][ T4271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1568.719259][ T4271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1568.727861][ T4271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1568.735612][ T4271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1568.742888][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1570.924601][ T4271] Bluetooth: hci3: command 0x0409 tx timeout [ 1570.998915][T15396] chnl_net:caif_netlink_parms(): no params data found [ 1571.185884][T15414] loop0: detected capacity change from 0 to 1024 [ 1571.197184][T15412] loop8: detected capacity change from 0 to 8192 [ 1571.309934][T15412] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1571.372697][T15417] loop3: detected capacity change from 0 to 128 [ 1571.417831][T15412] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 1571.481098][T15412] REISERFS (device loop8): using ordered data mode [ 1571.487784][T15412] reiserfs: using flush barriers [ 1571.574241][T15412] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1572.229307][T11203] hfsplus: b-tree write err: -5, ino 4 [ 1572.272376][T15412] REISERFS (device loop8): checking transaction log (loop8) [ 1572.514120][T15412] REISERFS (device loop8): Using r5 hash to sort names [ 1572.593897][T15412] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 1573.360904][ T4271] Bluetooth: hci3: command 0x041b tx timeout [ 1573.646576][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.141107][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.193289][T15396] device bridge_slave_0 entered promiscuous mode [ 1574.249088][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.256349][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.297788][T15396] device bridge_slave_1 entered promiscuous mode [ 1574.466668][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.610561][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.640057][T15396] team0: Port device team_slave_0 added [ 1574.656947][T15396] team0: Port device team_slave_1 added [ 1574.700134][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.707167][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.889825][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.994759][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.018370][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.116788][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.211712][T15443] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2114'. [ 1575.553621][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 1577.607446][T15396] device hsr_slave_0 entered promiscuous mode [ 1577.733519][T15396] device hsr_slave_1 entered promiscuous mode [ 1577.753622][T15396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1577.761281][T15396] Cannot create hsr debugfs directory [ 1577.791893][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 1581.225029][T15472] input: syz1 as /devices/virtual/input/input10 [ 1582.605598][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2119'. [ 1584.424348][T15396] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1584.446559][T15396] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1584.486933][T15396] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1584.524252][T15396] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1584.723064][T15396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.779592][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1584.799616][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1584.810716][T15396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.837176][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1584.847248][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1584.857411][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.864644][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.928121][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1584.958008][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1584.967684][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1584.976406][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.983652][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.992681][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1585.029348][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1585.054462][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1585.064977][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1585.092623][T15396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1585.103324][T15396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1585.115710][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1585.124533][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1585.135198][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1585.145018][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1585.157138][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1585.166598][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1585.177044][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1585.257986][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1585.570115][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1585.581172][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1585.601786][T15396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1585.643794][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1585.659044][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1585.702616][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1585.712696][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1585.728268][T15396] device veth0_vlan entered promiscuous mode [ 1585.737093][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1585.745836][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1585.762139][T15396] device veth1_vlan entered promiscuous mode [ 1585.792414][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1585.801594][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1585.817118][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1585.826858][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1585.838920][T15396] device veth0_macvtap entered promiscuous mode [ 1585.850759][T15396] device veth1_macvtap entered promiscuous mode [ 1585.858504][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1585.868694][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1585.898903][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.918040][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.937311][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.951981][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.962200][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.973035][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.983315][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.994122][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.009011][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.024007][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.033986][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.053261][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.064438][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.078142][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.089227][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.099931][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.112169][T15396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1586.127262][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1586.139854][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1586.166173][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.177048][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.188296][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.210526][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.235712][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.246474][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.263317][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.273958][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.284093][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.294628][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.304700][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.317352][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.327542][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.338193][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.348356][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.358924][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.370772][T15396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1586.382220][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1586.392078][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1586.403955][T15396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.414144][T15396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.423877][T15396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.437092][T15396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.567596][ T8731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.590464][ T8731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.605166][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1586.647411][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.672738][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.691076][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1586.831740][T15528] loop0: detected capacity change from 0 to 128 [ 1590.017441][T15539] loop2: detected capacity change from 0 to 512 [ 1590.217755][T15539] EXT4-fs: Ignoring removed nobh option [ 1591.473989][T15539] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1591.538936][T15539] EXT4-fs error (device loop2): __ext4_iget:5095: inode #11: block 1: comm syz.2.2101: invalid block [ 1591.552186][T15539] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2101: couldn't read orphan inode 11 (err -117) [ 1591.567658][T15539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1591.903310][T15396] EXT4-fs (loop2): unmounting filesystem. [ 1592.149919][T15554] loop8: detected capacity change from 0 to 8 [ 1595.324919][T15552] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1595.377776][T15558] loop2: detected capacity change from 0 to 128 [ 1595.694630][T15559] syz.2.2122: attempt to access beyond end of device [ 1595.694630][T15559] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1595.762283][T15554] SQUASHFS error: Failed to allocate zlib workspace [ 1595.881352][T15554] squashfs image failed sanity check [ 1597.989260][T15580] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2130'. [ 1599.759297][T15593] overlayfs: overlapping lowerdir path [ 1601.844376][T15605] usb usb9: usbfs: process 15605 (syz.0.2125) did not claim interface 3 before use [ 1602.700885][T15606] binder_alloc: 15603: binder_alloc_buf, no vma [ 1605.169072][T15625] netlink: 'syz.3.2139': attribute type 2 has an invalid length. [ 1605.180210][T15625] netlink: 'syz.3.2139': attribute type 1 has an invalid length. [ 1607.080286][T15632] loop2: detected capacity change from 0 to 512 [ 1609.612275][T15632] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1609.656742][T15632] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1611.646173][T15632] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.2142: Failed to acquire dquot type 1 [ 1611.693160][T15632] EXT4-fs (loop2): 1 truncate cleaned up [ 1611.713026][T15632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1611.722082][T15632] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1611.896487][T15658] loop5: detected capacity change from 0 to 1024 [ 1612.778127][T15396] EXT4-fs (loop2): unmounting filesystem. [ 1613.146623][T15664] binder_alloc: 15660: binder_alloc_buf, no vma [ 1613.578857][T15665] loop2: detected capacity change from 0 to 128 [ 1614.179967][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2145'. [ 1615.548624][T15673] syz.2.2149: attempt to access beyond end of device [ 1615.548624][T15673] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1617.692032][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.698481][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1619.568943][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1619.580823][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1619.599452][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1619.614930][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1619.632572][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1619.639921][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1621.886888][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 1622.349083][T15702] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2156'. [ 1623.031017][T14981] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.116061][T15695] chnl_net:caif_netlink_parms(): no params data found [ 1623.546512][T14981] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.098206][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 1624.177732][T14981] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.240940][T15695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.248369][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.256647][T15695] device bridge_slave_0 entered promiscuous mode [ 1624.265563][T15695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.273398][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.282016][T15695] device bridge_slave_1 entered promiscuous mode [ 1624.379675][T14981] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.420792][T15695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.469194][T15695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.532758][T15695] team0: Port device team_slave_0 added [ 1624.554090][T15695] team0: Port device team_slave_1 added [ 1624.579412][T15695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.596422][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.636432][T15695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.682231][T15695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.707618][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.734001][T15695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1624.849817][T15695] device hsr_slave_0 entered promiscuous mode [ 1624.857588][T15695] device hsr_slave_1 entered promiscuous mode [ 1624.864445][T15695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1624.873453][T15695] Cannot create hsr debugfs directory [ 1624.880181][T14981] tipc: Left network mode [ 1625.979115][T14981] bond1: (slave gretap1): Releasing active interface [ 1626.107599][T15695] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1626.120375][T15695] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1626.130930][T15695] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1626.164218][T15695] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1626.321104][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 1626.488612][T15695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.506100][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1626.521088][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1626.536438][T15695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.567776][T14981] device hsr_slave_0 left promiscuous mode [ 1626.574480][T14981] device hsr_slave_1 left promiscuous mode [ 1626.581886][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.591429][T14981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.600547][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.608030][T14981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.616515][T14981] device bridge_slave_1 left promiscuous mode [ 1626.623234][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.632018][T14981] device bridge_slave_0 left promiscuous mode [ 1626.638441][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.670447][T14981] device veth1_macvtap left promiscuous mode [ 1626.677396][T14981] device veth1_vlan left promiscuous mode [ 1626.683241][T14981] device veth0_vlan left promiscuous mode [ 1626.788399][T14981] bond1 (unregistering): Released all slaves [ 1627.649321][T14981] team0 (unregistering): Port device team_slave_1 removed [ 1627.728943][T14981] team0 (unregistering): Port device team_slave_0 removed [ 1627.808483][T14981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1627.890268][T14981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1628.530489][T14981] bond0 (unregistering): Released all slaves [ 1628.554989][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 1628.775126][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1628.801575][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1628.811132][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.818298][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.837762][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1628.859027][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1628.874352][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.881572][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.904625][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1628.925174][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1628.944131][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1629.046253][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1629.056340][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1629.082387][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1629.095479][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1629.107819][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1629.132318][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1629.141258][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1629.168062][T15695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1629.192979][T15695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1629.206959][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1629.217860][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1629.694150][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1629.703243][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1629.724202][T15695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.270934][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1630.291525][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1630.333611][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1630.344753][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1630.354095][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1630.363086][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1630.378262][T15695] device veth0_vlan entered promiscuous mode [ 1630.394675][T15695] device veth1_vlan entered promiscuous mode [ 1630.451840][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1630.462546][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1630.479342][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1630.498403][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1630.511644][T15695] device veth0_macvtap entered promiscuous mode [ 1630.525586][T15695] device veth1_macvtap entered promiscuous mode [ 1630.544444][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.556447][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.567352][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.578193][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.596418][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.607219][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.618467][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.629855][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.641741][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.661199][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.673773][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.685918][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.696538][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.709360][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.719885][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.730774][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.743655][T15695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.753098][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1630.765247][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1630.774956][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1630.785211][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1630.799242][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.811035][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.823158][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.833999][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.844145][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.856559][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.867305][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.893620][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.910182][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.932298][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.948094][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.967937][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.980437][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.991730][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1631.003210][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1631.014577][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1631.027092][T15695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1631.042566][T15695] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.054029][T15695] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.075307][T15695] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.084471][T15695] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.113622][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1631.125180][T14981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1631.258069][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.265962][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.283372][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1631.308910][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.317955][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.326807][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1634.553520][T15789] loop3: detected capacity change from 0 to 2048 [ 1634.603588][T15789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1634.645047][T15789] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1635.601493][T12464] EXT4-fs (loop3): unmounting filesystem. [ 1638.794522][T15832] tmpfs: Unknown parameter 'fscontext' [ 1639.031075][ T26] audit: type=1326 audit(1772166131.899:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1639.589841][ T26] audit: type=1326 audit(1772166131.909:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1639.733456][ T26] audit: type=1326 audit(1772166131.909:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1639.810672][ T26] audit: type=1326 audit(1772166131.909:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1639.911272][ T26] audit: type=1326 audit(1772166131.909:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1640.009694][ T26] audit: type=1326 audit(1772166131.909:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1640.095685][ T26] audit: type=1326 audit(1772166131.909:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1640.180834][ T26] audit: type=1326 audit(1772166131.909:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1640.315322][ T26] audit: type=1326 audit(1772166131.909:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1640.413352][ T26] audit: type=1326 audit(1772166131.909:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.3.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f499c799 code=0x7fc00000 [ 1640.920101][T15853] loop9: detected capacity change from 0 to 128 [ 1641.426449][T15855] syz.9.2171: attempt to access beyond end of device [ 1641.426449][T15855] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1644.975939][T15891] loop3: detected capacity change from 0 to 128 [ 1647.677710][T15608] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1648.011530][T15608] usb 6-1: Using ep0 maxpacket: 16 [ 1648.024717][T15608] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1648.041148][T15608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.084381][T15608] usb 6-1: Product: syz [ 1648.369859][T15608] usb 6-1: Manufacturer: syz [ 1648.374967][T15608] usb 6-1: SerialNumber: syz [ 1648.382375][T15608] usb 6-1: config 0 descriptor?? [ 1648.615213][T15608] usb 6-1: can't set config #0, error -71 [ 1648.642973][T15900] binder_alloc: 15898: binder_alloc_buf, no vma [ 1648.666313][T15608] usb 6-1: USB disconnect, device number 8 [ 1648.673578][T15816] udevd[15816]: setting owner of /dev/bus/usb/006/008 to uid=0, gid=0 failed: No such file or directory [ 1652.383815][T15937] binder: BINDER_SET_CONTEXT_MGR already set [ 1652.390170][T15937] binder: 15928:15937 ioctl 4018620d 200000000040 returned -16 [ 1653.013850][T15952] loop2: detected capacity change from 0 to 128 [ 1658.041268][ T7829] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.387720][ T7829] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.649807][ T7829] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.929055][ T7829] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.944467][T15993] syz.3.2196 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1662.040054][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 1662.040072][ T26] audit: type=1800 audit(1772166153.479:196): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2196" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1669.431998][T16038] input: syz1 as /devices/virtual/input/input11 [ 1671.827537][T16068] loop2: detected capacity change from 0 to 1024 [ 1673.344223][T16078] loop2: detected capacity change from 0 to 16 [ 1673.689632][T16078] erofs: (device loop2): mounted with root inode @ nid 36. [ 1673.711740][T16078] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1673.855800][ T4271] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1673.871840][T16078] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1673.980329][ T26] audit: type=1800 audit(1772166164.578:197): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2219" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 1677.107754][ T7829] device hsr_slave_0 left promiscuous mode [ 1677.118048][ T7829] device hsr_slave_1 left promiscuous mode [ 1677.183647][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1677.229741][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.282408][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1677.364395][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1678.489047][ T7829] device bridge_slave_1 left promiscuous mode [ 1678.629201][T16107] loop2: detected capacity change from 0 to 16 [ 1680.284788][T16107] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature c0, please upgrade kernel version [ 1680.657533][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.706778][T15920] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1680.765579][ T7829] device bridge_slave_0 left promiscuous mode [ 1680.806236][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.192905][ T7829] device veth1_macvtap left promiscuous mode [ 1681.210121][ T7829] device veth0_macvtap left promiscuous mode [ 1681.229186][ T7829] device veth1_vlan left promiscuous mode [ 1681.236003][ T7829] device veth0_vlan left promiscuous mode [ 1683.345424][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1683.351868][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1683.829574][T16130] loop5: detected capacity change from 0 to 128 [ 1688.974902][T16146] loop5: detected capacity change from 0 to 1024 [ 1689.091579][T16146] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1689.100486][T16146] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1689.852489][T16149] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1690.044080][T10039] EXT4-fs (loop5): unmounting filesystem. [ 1696.750666][ T7829] team0 (unregistering): Port device team_slave_1 removed [ 1701.684666][ T7829] team0 (unregistering): Port device team_slave_0 removed [ 1701.881951][T13048] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1702.015558][ T7829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.086869][T13048] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1702.127762][T13048] usb 3-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d [ 1702.136888][T13048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.182136][T13048] usb 3-1: config 0 descriptor?? [ 1702.239068][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 1702.375083][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1702.386923][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1702.397718][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1702.462416][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1702.470439][ T7829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.479302][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1702.487114][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1705.005032][ T4271] Bluetooth: hci4: command 0x0409 tx timeout [ 1707.193765][ T4271] Bluetooth: hci4: command 0x041b tx timeout [ 1710.336484][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 1710.505301][ T7829] bond0 (unregistering): Released all slaves [ 1710.524368][T16232] binder_alloc: 16231: binder_alloc_buf, no vma [ 1711.716576][T11570] usb 3-1: USB disconnect, device number 2 [ 1711.736271][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1711.769616][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1711.800129][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1711.833518][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1711.841323][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1711.848645][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1712.374039][T16248] input: syz1 as /devices/virtual/input/input12 [ 1712.493940][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 1714.335714][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 1715.800887][T16266] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1716.358314][T16205] chnl_net:caif_netlink_parms(): no params data found [ 1716.513497][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 1717.772215][T16205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.793766][T16205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.833610][T16205] device bridge_slave_0 entered promiscuous mode [ 1717.880390][T16205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.920103][T16205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.986506][T16205] device bridge_slave_1 entered promiscuous mode [ 1718.054241][T16239] chnl_net:caif_netlink_parms(): no params data found [ 1718.312107][T16205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.385355][T16205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.753503][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 1719.420674][T16239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.427955][T16239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.447621][T16307] binder_alloc: 16306: binder_alloc_buf, no vma [ 1719.472011][T16239] device bridge_slave_0 entered promiscuous mode [ 1719.505219][T16205] team0: Port device team_slave_0 added [ 1719.524172][T16239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.556115][T16239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.596943][T16239] device bridge_slave_1 entered promiscuous mode [ 1719.815344][T16205] team0: Port device team_slave_1 added [ 1720.088090][ T7829] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.181042][T16239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.198813][T16205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.205831][T16205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.250093][T16205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1720.277311][T16239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.373179][ T7829] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.473942][T16205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1720.487033][T16205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.552238][T16325] loop5: detected capacity change from 0 to 512 [ 1720.572329][T16325] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1720.602859][T16205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.625899][T16325] EXT4-fs error (device loop5): __ext4_fill_super:5423: inode #2: comm syz.5.2272: inode has both inline data and extents flags [ 1720.662317][T16325] EXT4-fs (loop5): Remounting filesystem read-only [ 1720.669554][T16325] EXT4-fs (loop5): get root inode failed [ 1720.675402][T16325] EXT4-fs (loop5): mount failed [ 1720.818501][T16239] team0: Port device team_slave_0 added [ 1720.893655][T16239] team0: Port device team_slave_1 added [ 1720.956412][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 1721.039547][T16332] Bluetooth: MGMT ver 1.22 [ 1721.348657][ T7829] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.983970][T16205] device hsr_slave_0 entered promiscuous mode [ 1722.108347][T16205] device hsr_slave_1 entered promiscuous mode [ 1722.210753][T16205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1722.350605][T16205] Cannot create hsr debugfs directory [ 1722.411308][T16239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.451019][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.703555][T16239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.821173][ T7829] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.868569][T16239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.890583][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.933344][T16239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.339217][T16348] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1723.349254][T16348] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1723.367207][T16348] ovl_remap_lower_ino: 23 callbacks suppressed [ 1723.367227][T16348] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1723.383940][T16348] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1723.399390][T16348] overlayfs: d_ino too big (247, ino=9223372036854777177, xinobits=3) [ 1723.408450][T16348] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1723.420454][T16348] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1723.430239][T16348] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1723.445660][T16348] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1723.457036][T16348] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1723.467861][T16348] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 1723.484804][T16348] overlayfs: d_ino too big (syz8, ino=4611686018427388150, xinobits=3) [ 1724.631631][T16352] input: syz1 as /devices/virtual/input/input13 [ 1724.936336][T16239] device hsr_slave_0 entered promiscuous mode [ 1724.986477][T16239] device hsr_slave_1 entered promiscuous mode [ 1725.039642][T16239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1725.069081][T16239] Cannot create hsr debugfs directory [ 1726.164933][T16369] binder_alloc: 16368: binder_alloc_buf, no vma [ 1728.858335][ T7829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.234988][ T7829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.311421][T16394] No such timeout policy "syz1" [ 1729.322056][T16394] autofs4:pid:16394:autofs_fill_super: called with bogus options [ 1730.526512][ T7829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.715522][ T7829] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.128193][T16205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1732.154041][T16205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1732.192675][T16205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1732.249151][T16205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1732.577385][T16205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.647206][T16205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.670207][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1732.678526][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1732.764935][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1732.787284][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1732.795981][T14850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.803207][T14850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.830059][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1732.850406][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1732.871778][T14850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.878986][T14850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.008122][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1733.017163][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1733.026552][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1733.036891][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1733.052496][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1733.077917][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1733.095331][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1733.105362][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1733.280327][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1733.289535][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1733.302622][T16205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1733.315657][T16205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1733.342748][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1733.351664][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1733.596482][T16239] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1733.720591][T16239] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1733.732404][T16239] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1733.871542][T16239] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1734.027386][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1734.035068][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1734.062842][T16205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.292759][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1734.314556][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1734.471031][T16205] device veth0_vlan entered promiscuous mode [ 1734.487691][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1734.507237][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1734.529050][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1734.537098][T14850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1734.566140][T16239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1734.608477][T16205] device veth1_vlan entered promiscuous mode [ 1734.641161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1734.657336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1734.673036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1734.689123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1734.868193][T16239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1734.894284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1734.918048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1734.934434][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.941614][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1734.961607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1734.981663][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1734.999010][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1735.047079][T16205] device veth0_macvtap entered promiscuous mode [ 1735.198021][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1735.217763][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1735.227210][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1735.236393][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.243613][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.252061][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1735.282945][T16205] device veth1_macvtap entered promiscuous mode [ 1735.305696][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1735.352279][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1735.369736][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1735.383961][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1735.399669][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1735.421966][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1735.445738][T16239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1735.456558][T16239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1735.488805][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.500994][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.511631][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.523268][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.534205][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.544934][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.555125][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.567648][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.578982][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.589806][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.600728][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.611981][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.627822][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.649774][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.659690][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.683043][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.703854][T16205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.715798][ T7829] device hsr_slave_0 left promiscuous mode [ 1735.723602][ T7829] device hsr_slave_1 left promiscuous mode [ 1735.738395][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.746300][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.754336][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1735.762771][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.772466][ T7829] device bridge_slave_1 left promiscuous mode [ 1735.779894][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.791827][ T7829] device bridge_slave_0 left promiscuous mode [ 1735.798135][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.812922][ T7829] device hsr_slave_0 left promiscuous mode [ 1735.819503][ T7829] device hsr_slave_1 left promiscuous mode [ 1735.826790][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.835313][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.844734][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1735.852220][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.860957][ T7829] device bridge_slave_1 left promiscuous mode [ 1735.867624][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.889238][ T7829] device bridge_slave_0 left promiscuous mode [ 1735.897701][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.042949][ T7829] device veth1_macvtap left promiscuous mode [ 1736.060298][ T7829] device veth0_macvtap left promiscuous mode [ 1736.073221][ T7829] device veth1_vlan left promiscuous mode [ 1736.084573][ T7829] device veth0_vlan left promiscuous mode [ 1736.100767][ T7829] device veth1_macvtap left promiscuous mode [ 1736.106934][ T7829] device veth0_macvtap left promiscuous mode [ 1736.124641][ T7829] device veth1_vlan left promiscuous mode [ 1736.131360][ T7829] device veth0_vlan left promiscuous mode [ 1737.195904][ T7829] team0 (unregistering): Port device team_slave_1 removed [ 1737.260883][ T7829] team0 (unregistering): Port device team_slave_0 removed [ 1737.329197][ T7829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.395463][ T7829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.931109][ T7829] bond0 (unregistering): Released all slaves [ 1738.797900][ T7829] team0 (unregistering): Port device team_slave_1 removed [ 1738.867035][ T7829] team0 (unregistering): Port device team_slave_0 removed [ 1738.931544][ T7829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.000683][ T7829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.508342][ T7829] bond0 (unregistering): Released all slaves [ 1739.650722][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1739.660675][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1739.671398][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1739.693027][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1739.702044][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1739.710744][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1739.720663][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1739.742048][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.753897][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.764800][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.775352][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.785368][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.796815][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.807281][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.818369][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.831705][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.842904][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.854783][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1739.865587][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.882622][T16205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.891379][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1739.925330][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1739.946372][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1739.994097][T16205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.010030][T16205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.018902][T16205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.039145][T16205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.201141][ T5003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.223089][ T5003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.246211][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1740.329099][ T9551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.362116][ T9551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.367720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1740.392437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1740.409262][T16239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.427183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1742.301919][T16494] delete_channel: no stack [ 1743.411769][T16532] input: syz1 as /devices/virtual/input/input14 [ 1743.419402][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1744.192044][T16535] binder_alloc: 16534: binder_alloc_buf, no vma [ 1746.449221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1746.562773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1746.639941][T16552] loop1: detected capacity change from 0 to 512 [ 1746.678047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1746.687068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1746.706524][T16552] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1746.733808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1746.751369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1746.812438][T16239] device veth0_vlan entered promiscuous mode [ 1746.818864][T16552] EXT4-fs error (device loop1): __ext4_fill_super:5423: inode #2: comm syz.1.2298: inode has both inline data and extents flags [ 1746.855164][T16239] device veth1_vlan entered promiscuous mode [ 1746.876621][T16552] EXT4-fs (loop1): Remounting filesystem read-only [ 1746.884754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1746.924056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1746.933568][T16552] EXT4-fs (loop1): get root inode failed [ 1746.947856][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1746.957018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1746.959323][T16552] EXT4-fs (loop1): mount failed [ 1746.972221][T16239] device veth0_macvtap entered promiscuous mode [ 1746.991079][T16239] device veth1_macvtap entered promiscuous mode [ 1747.093648][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.116157][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.126079][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.169296][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.179295][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.211971][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.221882][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.240070][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.250432][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.261270][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.271478][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.283065][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.293833][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.304592][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.317010][T16239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1747.327012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1747.361219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1747.382304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1747.413510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1747.546998][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1747.558107][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.568046][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1747.579018][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.589030][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1747.604899][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.650273][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1747.949584][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.992172][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1748.040170][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1748.078312][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1748.127254][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1748.146659][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1748.168957][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1748.190717][T16239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1748.213043][T16239] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.226322][T16239] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.248578][T16239] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.266700][T16239] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.314979][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1748.377554][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1749.083643][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1749.102598][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1749.536838][T11203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1749.574597][T11203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1749.826032][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1750.331270][T13679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.339912][T13679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.349785][T13679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1751.219427][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 1754.446859][T16621] loop7: detected capacity change from 0 to 16384 [ 1755.294920][T16625] loop7: detected capacity change from 16384 to 16383 [ 1772.141141][T16738] loop1: detected capacity change from 0 to 2048 [ 1772.723628][T16738] NILFS (loop1): invalid segment: Magic number mismatch [ 1772.730855][T16738] NILFS (loop1): trying rollback from an earlier position [ 1772.754983][T16738] NILFS (loop1): recovery complete [ 1774.243968][T16738] NILFS (loop1): error -4 creating segctord thread [ 1783.947390][T16785] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1785.695589][T16804] loop9: detected capacity change from 0 to 512 [ 1785.742892][T16804] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2346: inode has both inline data and extents flags [ 1785.874812][T16804] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2346: couldn't read orphan inode 15 (err -117) [ 1787.482024][T16804] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1790.751738][T16817] overlayfs: missing 'lowerdir' [ 1790.815820][T16816] syz.7.2340 (16816): drop_caches: 2 [ 1790.828417][T15695] EXT4-fs (loop9): unmounting filesystem. [ 1793.297425][T16850] ALSA: mixer_oss: invalid OSS volume '' [ 1799.931317][T16873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1804.387563][T16894] loop9: detected capacity change from 0 to 128 [ 1806.955846][T16904] binder: BINDER_SET_CONTEXT_MGR already set [ 1806.961995][T16904] binder: 16902:16904 ioctl 4018620d 200000000040 returned -16 [ 1807.952977][T16915] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2358'. [ 1808.828016][T16917] loop7: detected capacity change from 0 to 512 [ 1808.855871][T16917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1810.058429][T16917] EXT4-fs error (device loop7): __ext4_fill_super:5423: inode #2: comm syz.7.2353: inode has both inline data and extents flags [ 1810.072316][T16917] EXT4-fs (loop7): Remounting filesystem read-only [ 1810.081080][T16917] EXT4-fs (loop7): get root inode failed [ 1810.652512][ T26] audit: type=1800 audit(1772166548.550:198): pid=16933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2375" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1810.677742][T16917] EXT4-fs (loop7): mount failed [ 1811.259953][T16939] netlink: 'syz.1.2366': attribute type 2 has an invalid length. [ 1811.269141][T16939] netlink: 'syz.1.2366': attribute type 1 has an invalid length. [ 1812.613852][T16951] loop7: detected capacity change from 0 to 8 [ 1814.890307][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1814.896779][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1815.067124][T16949] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1818.148999][T16973] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2376'. [ 1818.296733][T16974] usb usb9: usbfs: process 16974 (syz.5.2374) did not claim interface 3 before use [ 1824.477295][T17012] loop9: detected capacity change from 0 to 512 [ 1824.934805][T17012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1826.064845][T17012] EXT4-fs error (device loop9): __ext4_fill_super:5423: inode #2: comm syz.9.2381: inode has both inline data and extents flags [ 1826.086584][T17012] EXT4-fs (loop9): Remounting filesystem read-only [ 1826.681139][T17012] EXT4-fs (loop9): get root inode failed [ 1826.753662][T17012] EXT4-fs (loop9): mount failed [ 1827.892036][T17029] netlink: 'syz.9.2385': attribute type 2 has an invalid length. [ 1827.901775][T17029] netlink: 'syz.9.2385': attribute type 1 has an invalid length. [ 1831.070623][T17046] loop5: detected capacity change from 0 to 128 [ 1835.507600][T17068] loop9: detected capacity change from 0 to 512 [ 1836.709270][T17068] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1836.761281][T17068] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1836.850524][T17068] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.2395: Failed to acquire dquot type 1 [ 1836.939136][T17068] EXT4-fs (loop9): 1 truncate cleaned up [ 1837.007969][T17068] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1837.045113][T17068] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1837.811016][T15695] EXT4-fs (loop9): unmounting filesystem. [ 1845.140573][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1845.152140][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1845.161759][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1845.171483][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1845.179365][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1845.186752][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1845.209222][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1845.216568][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1845.223796][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1845.231568][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1845.239033][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1845.246383][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1845.821040][T17127] Bluetooth: MGMT ver 1.22 [ 1845.837604][T17127] loop3: detected capacity change from 0 to 16 [ 1845.852548][T17127] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature c0, please upgrade kernel version [ 1846.699156][T16594] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1847.479900][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 1849.377814][ T4491] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.390211][T17135] syz.3.2405 (17135): drop_caches: 2 [ 1849.755511][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 1852.170380][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1852.410650][ T4491] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.485115][T17121] chnl_net:caif_netlink_parms(): no params data found [ 1852.622831][T17175] loop1: detected capacity change from 0 to 128 [ 1853.600493][T17176] ================================================================== [ 1853.608646][T17176] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 1853.616043][T17176] Read of size 8 at addr ffff8881466e0218 by task syz.5.2413/17176 [ 1853.623968][T17176] [ 1853.626366][T17176] CPU: 1 PID: 17176 Comm: syz.5.2413 Not tainted syzkaller #0 [ 1853.633866][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1853.643975][T17176] Call Trace: [ 1853.647293][T17176] [ 1853.650257][T17176] dump_stack_lvl+0x188/0x24e [ 1853.655071][T17176] ? read_lock_is_recursive+0x10/0x10 [ 1853.660539][T17176] ? show_regs_print_info+0x12/0x12 [ 1853.665798][T17176] ? load_image+0x400/0x400 [ 1853.670374][T17176] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1853.675925][T17176] ? __virt_addr_valid+0x188/0x540 [ 1853.681141][T17176] ? __virt_addr_valid+0x465/0x540 [ 1853.686307][T17176] ? dvb_device_open+0xc6/0x370 [ 1853.691205][T17176] print_report+0xa8/0x210 [ 1853.695662][T17176] kasan_report+0x10b/0x140 [ 1853.700321][T17176] ? dvb_device_open+0xc6/0x370 [ 1853.705223][T17176] dvb_device_open+0xc6/0x370 [ 1853.709945][T17176] ? do_raw_spin_unlock+0x11d/0x230 [ 1853.715183][T17176] chrdev_open+0x5c5/0x6a0 [ 1853.719712][T17176] ? cd_forget+0x160/0x160 [ 1853.724173][T17176] ? fsnotify_perm+0x39b/0x550 [ 1853.729090][T17176] ? cd_forget+0x160/0x160 [ 1853.733553][T17176] do_dentry_open+0x7e9/0x10d0 [ 1853.738450][T17176] path_openat+0x2635/0x2ee0 [ 1853.743137][T17176] ? verify_lock_unused+0x140/0x140 [ 1853.748431][T17176] ? __sched_text_start+0x8/0x8 [ 1853.753403][T17176] ? do_filp_open+0x430/0x430 [ 1853.758118][T17176] ? preempt_schedule_irq+0xe6/0x160 [ 1853.763456][T17176] do_filp_open+0x1f1/0x430 [ 1853.768013][T17176] ? vfs_tmpfile+0x480/0x480 [ 1853.772658][T17176] ? _raw_spin_unlock+0x24/0x40 [ 1853.777554][T17176] ? alloc_fd+0x58f/0x630 [ 1853.782002][T17176] do_sys_openat2+0x150/0x4b0 [ 1853.786724][T17176] ? do_sys_open+0xe0/0xe0 [ 1853.791220][T17176] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1853.797277][T17176] ? lock_chain_count+0x20/0x20 [ 1853.802175][T17176] __x64_sys_openat+0x135/0x160 [ 1853.807084][T17176] do_syscall_64+0x4c/0xa0 [ 1853.811543][T17176] ? clear_bhb_loop+0x60/0xb0 [ 1853.816421][T17176] ? clear_bhb_loop+0x60/0xb0 [ 1853.821143][T17176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.827085][T17176] RIP: 0033:0x7ff5b1b5cfce [ 1853.831549][T17176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1853.851213][T17176] RSP: 002b:00007ff5b2aeab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1853.859667][T17176] RAX: ffffffffffffffda RBX: 00007ff5b2aeb6c0 RCX: 00007ff5b1b5cfce [ 1853.867692][T17176] RDX: 0000000000000002 RSI: 00007ff5b2aeac00 RDI: ffffffffffffff9c [ 1853.869784][T13050] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1853.876046][T17176] RBP: 00007ff5b2aeac00 R08: 0000000000000000 R09: 0000000000000000 [ 1853.876063][T17176] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1853.876077][T17176] R13: 00007ff5b1e16128 R14: 00007ff5b1e16090 R15: 00007ffde20f5ad8 [ 1853.876104][T17176] [ 1853.876111][T17176] [ 1853.876115][T17176] Allocated by task 17127: [ 1853.876126][T17176] kasan_set_track+0x4b/0x70 [ 1853.922023][T17176] __kasan_kmalloc+0x8e/0xa0 [ 1853.926663][T17176] erofs_init_fs_context+0xc9/0x330 [ 1853.931976][T17176] alloc_fs_context+0x5fd/0x780 [ 1853.936912][T17176] do_new_mount+0x10e/0xa40 [ 1853.941583][T17176] __se_sys_mount+0x2e3/0x3d0 [ 1853.946297][T17176] do_syscall_64+0x4c/0xa0 [ 1853.950754][T17176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1853.956690][T17176] [ 1853.959047][T17176] Freed by task 17127: [ 1853.963140][T17176] kasan_set_track+0x4b/0x70 [ 1853.967772][T17176] kasan_save_free_info+0x2d/0x50 [ 1853.972825][T17176] ____kasan_slab_free+0x126/0x1e0 [ 1853.977978][T17176] slab_free_freelist_hook+0x131/0x1a0 [ 1853.983495][T17176] __kmem_cache_free+0xb6/0x1f0 [ 1853.988398][T17176] erofs_kill_sb+0x109/0x1e0 [ 1853.993035][T17176] deactivate_locked_super+0x93/0xf0 [ 1853.998355][T17176] get_tree_bdev+0x40f/0x610 [ 1854.002989][T17176] vfs_get_tree+0x88/0x270 [ 1854.007470][T17176] do_new_mount+0x24a/0xa40 [ 1854.012020][T17176] __se_sys_mount+0x2e3/0x3d0 [ 1854.016738][T17176] do_syscall_64+0x4c/0xa0 [ 1854.021206][T17176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1854.027147][T17176] [ 1854.029505][T17176] The buggy address belongs to the object at ffff8881466e0200 [ 1854.029505][T17176] which belongs to the cache kmalloc-256 of size 256 [ 1854.043678][T17176] The buggy address is located 24 bytes inside of [ 1854.043678][T17176] 256-byte region [ffff8881466e0200, ffff8881466e0300) [ 1854.056906][T17176] [ 1854.059268][T17176] The buggy address belongs to the physical page: [ 1854.065705][T17176] page:ffffea000519b800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1466e0 [ 1854.075998][T17176] head:ffffea000519b800 order:1 compound_mapcount:0 compound_pincount:0 [ 1854.084362][T17176] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 1854.092560][T17176] raw: 057ff00000010200 ffffea0000a19500 dead000000000004 ffff888017441b40 [ 1854.101194][T17176] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1854.109819][T17176] page dumped because: kasan: bad access detected [ 1854.116365][T17176] page_owner tracks the page as allocated [ 1854.122129][T17176] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17356572986, free_ts 0 [ 1854.141885][T17176] post_alloc_hook+0x173/0x1a0 [ 1854.146782][T17176] get_page_from_freelist+0x1a1e/0x1ab0 [ 1854.152436][T17176] __alloc_pages+0x1ec/0x4f0 [ 1854.157095][T17176] alloc_page_interleave+0x24/0x1e0 [ 1854.162338][T17176] alloc_slab_page+0x5d/0x160 [ 1854.167061][T17176] new_slab+0x87/0x2c0 [ 1854.171168][T17176] ___slab_alloc+0xbc6/0x1240 [ 1854.175879][T17176] __kmem_cache_alloc_node+0x1a0/0x260 [ 1854.181369][T17176] kmalloc_trace+0x26/0xe0 [ 1854.185931][T17176] bus_add_driver+0xda/0x5a0 [ 1854.190624][T17176] driver_register+0x32d/0x430 [ 1854.195462][T17176] usb_register_driver+0x202/0x3d0 [ 1854.200710][T17176] do_one_initcall+0x26a/0x840 [ 1854.205602][T17176] do_initcall_level+0x137/0x1e4 [ 1854.210711][T17176] do_initcalls+0x4b/0x8a [ 1854.215183][T17176] kernel_init_freeable+0x415/0x5be [ 1854.220527][T17176] page_owner free stack trace missing [ 1854.225923][T17176] [ 1854.228282][T17176] Memory state around the buggy address: [ 1854.233947][T17176] ffff8881466e0100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1854.242045][T17176] ffff8881466e0180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc [ 1854.250142][T17176] >ffff8881466e0200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1854.258238][T17176] ^ [ 1854.263112][T17176] ffff8881466e0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1854.271210][T17176] ffff8881466e0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1854.279307][T17176] ================================================================== fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1854.312494][T17177] loop5: detected capacity change from 0 to 8 [ 1854.318941][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1854.333290][T17176] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1854.340556][T17176] CPU: 1 PID: 17176 Comm: syz.5.2413 Not tainted syzkaller #0 [ 1854.348057][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1854.358151][T17176] Call Trace: [ 1854.361461][T17176] [ 1854.364421][T17176] dump_stack_lvl+0x188/0x24e [ 1854.369141][T17176] ? memcpy+0x3c/0x60 [ 1854.373159][T17176] ? show_regs_print_info+0x12/0x12 [ 1854.378409][T17176] ? load_image+0x400/0x400 [ 1854.382979][T17176] panic+0x2e5/0x730 [ 1854.386914][T17176] ? bpf_jit_dump+0xd0/0xd0 [ 1854.391451][T17176] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1854.397479][T17176] ? _raw_spin_unlock+0x40/0x40 [ 1854.402367][T17176] check_panic_on_warn+0x80/0xa0 [ 1854.407449][T17176] ? dvb_device_open+0xc6/0x370 [ 1854.412339][T17176] end_report+0x66/0x110 [ 1854.416690][T17176] kasan_report+0x118/0x140 [ 1854.421257][T17176] ? dvb_device_open+0xc6/0x370 [ 1854.426152][T17176] dvb_device_open+0xc6/0x370 [ 1854.430872][T17176] ? do_raw_spin_unlock+0x11d/0x230 [ 1854.436110][T17176] chrdev_open+0x5c5/0x6a0 [ 1854.440566][T17176] ? cd_forget+0x160/0x160 [ 1854.445024][T17176] ? fsnotify_perm+0x39b/0x550 [ 1854.449827][T17176] ? cd_forget+0x160/0x160 [ 1854.454289][T17176] do_dentry_open+0x7e9/0x10d0 [ 1854.459099][T17176] path_openat+0x2635/0x2ee0 [ 1854.463741][T17176] ? verify_lock_unused+0x140/0x140 [ 1854.468994][T17176] ? __sched_text_start+0x8/0x8 [ 1854.473941][T17176] ? do_filp_open+0x430/0x430 [ 1854.478654][T17176] ? preempt_schedule_irq+0xe6/0x160 [ 1854.483998][T17176] do_filp_open+0x1f1/0x430 [ 1854.488525][T17176] ? vfs_tmpfile+0x480/0x480 [ 1854.493154][T17176] ? _raw_spin_unlock+0x24/0x40 [ 1854.498035][T17176] ? alloc_fd+0x58f/0x630 [ 1854.502408][T17176] do_sys_openat2+0x150/0x4b0 [ 1854.507132][T17176] ? do_sys_open+0xe0/0xe0 [ 1854.511596][T17176] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1854.517605][T17176] ? lock_chain_count+0x20/0x20 [ 1854.522491][T17176] __x64_sys_openat+0x135/0x160 [ 1854.527380][T17176] do_syscall_64+0x4c/0xa0 [ 1854.531839][T17176] ? clear_bhb_loop+0x60/0xb0 [ 1854.536556][T17176] ? clear_bhb_loop+0x60/0xb0 [ 1854.541287][T17176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1854.547246][T17176] RIP: 0033:0x7ff5b1b5cfce [ 1854.551725][T17176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1854.571386][T17176] RSP: 002b:00007ff5b2aeab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1854.579844][T17176] RAX: ffffffffffffffda RBX: 00007ff5b2aeb6c0 RCX: 00007ff5b1b5cfce [ 1854.587852][T17176] RDX: 0000000000000002 RSI: 00007ff5b2aeac00 RDI: ffffffffffffff9c [ 1854.595857][T17176] RBP: 00007ff5b2aeac00 R08: 0000000000000000 R09: 0000000000000000 [ 1854.603874][T17176] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1854.611890][T17176] R13: 00007ff5b1e16128 R14: 00007ff5b1e16090 R15: 00007ffde20f5ad8 [ 1854.619992][T17176] [ 1854.623627][T17176] Kernel Offset: disabled [ 1854.627956][T17176] Rebooting in 86400 seconds..