last executing test programs: 12m3.924317102s ago: executing program 32 (id=32): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 10m39.966598889s ago: executing program 4 (id=121): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}]}, 0x38}}, 0x0) setns(r1, 0x24020000) r7 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, 0x0, 0x0, 0x2236824, 0x0) unshare(0x480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(r9, 0x36a9, 0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000003000)=""/4128, 0x1a, 0x1020, 0x1}, 0x28) 10m38.180695633s ago: executing program 4 (id=125): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000003680)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 10m35.124301451s ago: executing program 4 (id=128): ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x2, [], [0x2], [0x0, 0x6c], [0xfffffffffffffffc]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x8, 0x19, &(0x7f00000008c0)=""/25, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x3, 0x8, 0xc7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10000}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x82, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x5, 0x1}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x2, {}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @queue={0x0, {0x4, 0x8001}}}], 0x54) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) 10m30.35634612s ago: executing program 4 (id=134): openat$comedi(0xffffffffffffff9c, 0x0, 0x288100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x1c, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x301600, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 10m23.090548445s ago: executing program 4 (id=138): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x14d) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r4) syz_open_dev$sg(0x0, 0x0, 0x0) r6 = syz_open_dev$sg(0x0, 0x6, 0x2800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, 0x0) syz_open_dev$video(0x0, 0x7, 0x20000) 10m19.684129604s ago: executing program 4 (id=141): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc00c6419, &(0x7f0000000280)={0x0, &(0x7f0000000500)=""/218, &(0x7f0000000240)}) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x3) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) close(r6) 10m7.131857418s ago: executing program 33 (id=137): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r7, 0x89e1, 0x0) close_range(r2, r3, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 10m4.418165487s ago: executing program 34 (id=141): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc00c6419, &(0x7f0000000280)={0x0, &(0x7f0000000500)=""/218, &(0x7f0000000240)}) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x3) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) close(r6) 7m39.573458852s ago: executing program 5 (id=288): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r1 = memfd_secret(0x0) fcntl$lock(r1, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xf2}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x28002) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x43, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7a, 0x1, 0x4, 0x5, 0x7, 0x4, 0x7, 0x54c6cff3, 0x9, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x0, 0x1, 0x10004086, 0x0, 0x7ffffff8]}) write(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r8) 7m38.319035105s ago: executing program 5 (id=290): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r0, 0x407, 0x2000000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup3(r2, r1, 0x0) 7m36.894129438s ago: executing program 5 (id=292): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) close_range(r2, r3, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 7m30.067206477s ago: executing program 5 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000100001000300000800000000fc0200000000fbffffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0500000000000000180000000000000000000000000000000000000000000000ff0f0000090000000200000007000000000000000200010022000000000000004c0014007368613232342d6176783200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x184}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000300)=""/153, &(0x7f00000003c0)=0x99) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f00000006c0), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}]}, 0x30}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x1, 0x38414261, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x7ff}]}}) 7m28.792917612s ago: executing program 5 (id=294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) msgget$private(0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 7m24.492397243s ago: executing program 5 (id=296): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r0, 0x407, 0x2000000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup3(r2, r1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private0, 0x1, 0x718, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x5, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 7m8.682751667s ago: executing program 35 (id=296): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r0, 0x407, 0x2000000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup3(r2, r1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private0, 0x1, 0x718, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x5, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 5m56.119495818s ago: executing program 3 (id=410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) msgget$private(0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 5m54.03213799s ago: executing program 3 (id=411): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r0, 0x407, 0x2000000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup3(r2, r1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private0, 0x1, 0x718, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x5, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) 5m41.824232304s ago: executing program 3 (id=426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r5, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8}]}, 0x52}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) syz_io_uring_setup(0x398b, &(0x7f0000000880)={0x0, 0xa7d2, 0x100, 0x3, 0x162}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x803}, 0x40008c5) socket$inet6(0xa, 0x1000080002, 0x100000000000088) socket$inet6(0xa, 0x802, 0x88) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0xa}}, 0x20) 5m39.908651655s ago: executing program 3 (id=430): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) close_range(r2, r3, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 5m28.676264721s ago: executing program 3 (id=446): socket$inet6(0xa, 0x1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000810000000300", @ANYRES32, @ANYBLOB="ffffffff00006385062d3e252cad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) pipe2$9p(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000080)=""/123, 0x7b, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c) sendfile(r6, r7, 0x0, 0x20000023892) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa00"/201], 0x210) 5m25.28292938s ago: executing program 3 (id=448): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x80086303, &(0x7f0000000000)) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r6, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) 5m13.196660176s ago: executing program 2 (id=462): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001200)='coredump_filter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x1b1d, &(0x7f0000000040)={0x0, 0xb193, 0x40, 0x1, 0x20002f7}) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) r5 = openat2(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x9877dfde4256a9d6, 0x1c2, 0x20}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0x5, 0x3}, 0x10, 0xe8b5, r4, 0x0, &(0x7f0000000a00)=[r5], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x40080) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) getpid() writev(r0, &(0x7f0000000040), 0x0) 5m9.694247201s ago: executing program 36 (id=448): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x80086303, &(0x7f0000000000)) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r6, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) 5m9.648442214s ago: executing program 2 (id=467): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r7, 0x89e1, 0x0) close_range(r2, r3, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 5m9.289968875s ago: executing program 2 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r1, 0x1000, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xb2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, 0xffffffffffffffff}, 0x4) readv(r8, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/167, 0xa7}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d00)=""/4096, 0x1000}, {0x0}], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d660000080000001823", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000000180)={@private, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m5.713586644s ago: executing program 2 (id=472): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffb}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r4, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 5m3.72472645s ago: executing program 2 (id=474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) msgget$private(0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 5m2.237267497s ago: executing program 2 (id=477): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80086303, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r5, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) 4m46.773382721s ago: executing program 37 (id=477): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80086303, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r5, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) 2m41.437537295s ago: executing program 1 (id=657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) msgget$private(0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 2m40.022267968s ago: executing program 1 (id=661): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x11, r5) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f000020b000/0x11000)=nil, 0x11000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="000000850000f9aa3e31418564c9de53b11f3b1e83bd3394eb7bef66d482e883a72e33cedf4fd3601291782fe52526c1fef4492ba9a6bbaa613cc9aacc52939895d46c72fcf709ebddcf19ebb1d450efdf5911bfb951e9a29d62545454c9f3e429d5f9e0e1e6c4a92e45000000003b0a53f658bf13377fd80e7f2d275762548de13d1a8774ef9694298ad99da258a64cd1f710f0e8a60284d13ce9637f525bbfe31ee8a21305"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 2m32.11758181s ago: executing program 1 (id=672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x6, 0x4) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) writev(r1, &(0x7f0000000c40), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = dup(r0) sendto$packet(r5, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10f}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000040)=@get={0x1, 0x0, 0x3}) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xfffffffffffffff7, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x6, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 2m30.864547884s ago: executing program 1 (id=673): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) request_key(&(0x7f0000000480)='logon\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000500)='.\x00', 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x0, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0x0, 0x2b12, 0x100, 0x4, 0x1c00, 0x8, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x84, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xe, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x108c0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f466861727365743d757466382c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39252c757466383d302c73686f72746e61742c73686f72746e616d003d77696e6e742c73686f72746e616d653d77696e39352c597466383d302c726f6469722c6e6f6e756d7461696c3d3065642c73680472746e616d653d77696e6e742c00"/160], 0xff, 0x26c, &(0x7f00000005c0)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0000023f3201"], 0x138) socket(0x10, 0x3, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f00000003c0)="ccfb97491f540242d39e0eed4bca2e8b3583e5cee462ae3b909a55e263492bfb11a931f9abf1f29eeb94ebd5a25bd85211f102834869c8232b5cdbb58bbd42fee0d63a109d2dfc") 2m29.608655457s ago: executing program 1 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80800100008b}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000008010800000000000000000200000105000300010000000900010073797a300073797a30000000000600024088e7000005000300060000000400048000003a00000000"], 0x48}, 0x1, 0x0, 0x0, 0x80d1}, 0x400c810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="58000000000801010000000000000000000000090c000480080003400000006a050003002100000006000240080500000900010073797a310000000006000240891700140004800800024000000009080001400000000400"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x4) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$eJzs3U1sHPXZAPBnHDsEI0UR76sURSFMApWCFMx6DaYWB1jWY2dgvWvtrqtEVUUj4iArDiAoaskFokrQVq2qnnqkXLn11qpSK/XQ9lSpHHrpDYlTRaV+iQpVcjWzu47t+It8OND8fivvf3bmmfk/Mx7Ps7PenQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJL6dKUynkQjby6cSbdWn2635raZPljer9c16zy9rt+IpPiJAwfik3/0xv3/1cmHi7sTcbT36GgcKJoDcfmew4ee/L/hocH82yR0vY7vMi6JeKtI6uK55eXFV29BInvo+7/8zLP8e6W4n82aeSfyudpsluadVjo1OVl59PRMJ53JG1nnbKebzaX1dlbrttrpyfrD6fjU1ESajZ1tLTRnp2uNbDDyiUeqlcpk+uzYfFZrd1rNR5+NTv103mjkzdkyplr5VhQxTxQ74nN5N+1mtbk0vbC0vDixU6pF0PhmE/b19p+jDx366PUP/760WOyQWy0k6e+Y1fHxanV88vGpx5+oVIarler6EZUNYjUihiKKiFuy0/IFcnMP4HADhvr1PxqRRzMW4kykm9xGoh7T0Y5WzBWP/zRyTUTfoP5/+dG//mG7ftfW/0GVv+/q5CNR1v9jvUfHtqr/m+a6l7fX4o24HBfjXCzHcizGq7c9ox1uQze6hGTdo9nIohl5dKIVecxFrRyT9sekMRWTMRmVeD5Ox0x0Io2ZyKMRWXTibHSiG1m5R9WjHVnUohutaEcaJ6MeD0ca4zEVUzERaWQxFmejFQvRjNmYjlq5lAuxVG73iQ1ZHr47fvHiHz96txheDRrfbrWKJ3NF0N+2Cbqm3G9b/1dWiucLGyPU/zvA/u0m3oKjOFyflUH9BwAAAP5nJeWr78X5/0jcXw7N5I3sa7c7LQAAAOAmKv/zf7RoRoqh+yMpzv8rm0R+sOe5AQAAADdHUn7GLomI0XigN3QhluKtWIzNXgSIiEN7nSIAAABwg8r//x8rmtGIN8sRg8ulbHH+DwAAAHzRfHera+x/OLjGbmf+ruRXIxExklyZP/NQcqlWxNUu7evN12++urrE7syR5GB/IWUzOXz5niQihuvZ0WRw9cv/3NVrPy7vjwyvzr7Vtf6TdnvbBGL7BMpH8YM43os5fr5s7unPMpz0ehmdyRvZWL3VeLK8JGLx0339paVvRxS9f685dzCJC0vLi2MvvLx8vszlSjH7lUv9Cyhecx3FbXJZ6W+BuH/zNR4pP4jR73e0129l7foP9WYf2r7PZG2fb8eJXsyJ0V47OpjS6/NA0ef42JPjUasdHOpmZ7qvr6xZ+34W46trPnJda/52PNiLefDkg71mkyyq67J46dosqmu3/+62xa6zePf4m2f+9dtWkk3slMXEZ8hiZV/ExiwAbpcL5VV/rlahu8sq9OlKT1H/e3W3KFa1XkDfLo61/7zay+qzjMH8a2rdcGys7kOrB8bdVfeV6B3RT/ZiTvaeTwwf2aSuVDY5or+y9Mrv+kf0x97/yU+/fuz3Pyv7va7q9n483IvpN3Hvb7aoscU6/3BDVX2vmOO9LfvtNKpJXInY981Lr8Th1964/MjSpXMvLr64+FK1OjFZeaxSeby6vx87Uj5j2CZTAO5cO3/HzpYRgzqTPLbhrDrOr6+7966+pWAsXoiXYznOx6ny0wYR8cDm/Y6ueRvCqR3OWkfXfMPLqR3OLa/GVq+NTWKL2Ik1W+xLPy6bT27JrwMA9sSJHerwNvV/9ZX5Uzucd6+v5RvOjmPrWr6Zr9zSrQEAd4as/XEy2n0nabfz+efHp6bGa93TWdpu1Z9L2/n0bJbmzW7Wrp+uNWezdL7d6rbqgxeOp7NO2lmYn2+1u+lMq53GUCc/U37ze9r/6vdONldrdvN6Z76R1TpZWm81u7V6N53OO/V0fuGZRt45nbXLmTvzWT2fyeu1bt5qpp3WQruejaVpJ8vWBObTWbObz+TFYDOdb+dztfaViGgszGXpdNapt/P5bqu3wEFfeXOm1Z4rFzt27er/Za+3NwB8Hrz2xuWL55aXF1+9voE/7yb4dq8jALCeKg0AAAAAAAAAAAAAAJ9/q+//PzQYKMbewCcCP9vAXXHLu7hjB4pf5Ocgjds78I2nnrq4Vcwzb953enfLid1+UjbeORix/+c/6o15euvg7/T//m7Omn4QEdcx+0qyyaRPV3oD6w4T+/f+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pvAAAA//9Inly9") mount(0xfffffffffffffffd, &(0x7f0000000240)='./file2/file0\x00', &(0x7f0000000100)='iso9660\x00', 0x1bd000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x18000, &(0x7f0000001d80)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRESDEC=r2], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1, 0x889, 0x3) 2m27.882769507s ago: executing program 1 (id=677): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r0, 0x407, 0x2000000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private0, 0x1, 0x718, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x5, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x844) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) 2m12.233168292s ago: executing program 38 (id=677): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r0, 0x407, 0x2000000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private0, 0x1, 0x718, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x5, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x844) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) 31.66120762s ago: executing program 0 (id=850): socket$inet6(0xa, 0x1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000810000000300", @ANYRES32, @ANYBLOB="ffffffff00006385062d3e252cad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) pipe2$9p(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000080)=""/123, 0x7b, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c) sendfile(r5, r6, 0x0, 0x20000023892) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa00"/201], 0x210) 27.438387727s ago: executing program 0 (id=855): syz_open_dev$evdev(0x0, 0x0, 0x2002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r9, &(0x7f0000000000)='2\x00', 0x2) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 16.532425004s ago: executing program 9 (id=870): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@data_journal}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 15.083468779s ago: executing program 0 (id=873): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043c07aaaaaaaaaa1005074f078eaf"], 0xa) 14.850150122s ago: executing program 9 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) close_range(r1, r2, 0x0) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.588716578s ago: executing program 0 (id=876): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) msgget$private(0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 14.293667685s ago: executing program 7 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xec) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x9, 0x1, "cdaaf1", 0x3, 0x7, "8e60c15df36640acbce967e3e19d05dc5dd83ba298452e1b35c4a49ec78e56646874086553f36812819d35d5b6582eb675271ae90c090d172912fb7a10a55b9dff73f2a3e5424d2d4007e168ee80ba624185929136a7a9a4e818e91d439c8290c8d81c64a31cd3371b338be158a092d3c7aa8333083dc9581f700354ee4a14b7b5ae3ff2fb1f108b03fd189a72d141cb17c8a62ee457183a331cb1f91a43d32d1e3ad225bf38823cfe8bbb251381862fca291e50b580118c6dd0337fa73815b8ab6a9883299fea154fbb99d7ed794159fb7d59ad9193e1487e53e929784790e8fae420a0748f6da4856119e5c22d5a15"}, {@none, 0x9, 0x1, "934479", 0xe, 0x5, "a63b657443c6f8ed6b53826d51eac3616c07dfe09fe6efd8e74255f0081b4fac0747f5ce2531907337994eb30bab94b5b30e8b5d6c35569060dea2bd369c06877688358f5172452535cff4d3836726fa2094965f435c64ce98e4ff210722666285fee85395f91796a4716c9c735d52b9427c1d76d281be037f6461c931086aa052204f927578b23fde572778b3e92073d17bd9c549e3f4058af41520984cf2a186ec09e4f493b82fa9b08d94a564b2d43f5545f5fdf7367244d57047cae8fd2bc72f022a4e6b57ff599cc8624fa985026a84d0b743b2451c3702e9dd3f5348470ee2acdcb3c4d667f487d8646dbaecee"}]}}}, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_open_dev$MSR(&(0x7f0000000040), 0x7, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000102030000000000000000000a000008300001802c0001"], 0x44}, 0x1, 0x0, 0x0, 0x14840}, 0x10) 12.945442844s ago: executing program 0 (id=878): socket$inet6(0xa, 0x1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000810000000300", @ANYRES32, @ANYBLOB="ffffffff00006385062d3e252cad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) pipe2$9p(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000080)=""/123, 0x7b, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c) sendfile(r5, r6, 0x0, 0x20000023892) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa00"/201], 0x210) 11.779179532s ago: executing program 8 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7ffffffc, 0xfff}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0xe6eedc45313651a9, 0x94, 0x1}, 0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={r8, 0x4, 0x7}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 11.589198423s ago: executing program 7 (id=881): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f000020b000/0x11000)=nil, 0x11000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="000000850000f9aa3e31418564c9de53b11f3b1e83bd3394eb7bef66d482e883a72e33cedf4fd3601291782fe52526c1fef4492ba9a6bbaa613cc9aacc52939895d46c72fcf709ebddcf19ebb1d450efdf5911bfb951e9a29d62545454c9f3e429d5f9e0e1e6c4a92e45000000003b0a53f658bf13377fd80e7f2d275762548de13d1a8774ef9694298ad99da258a64cd1f710f0e8a60284d13ce9637f525bbfe31ee8a21305"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) process_vm_readv(r1, &(0x7f0000000d00), 0x0, &(0x7f0000000140)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xbbb9fd7f22b740c8}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 10.675725037s ago: executing program 8 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000004e40), 0x4) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 10.336582066s ago: executing program 9 (id=883): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200}) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 9.25544197s ago: executing program 8 (id=885): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084) 9.210540602s ago: executing program 9 (id=886): openat$comedi(0xffffffffffffff9c, 0x0, 0x288100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x301600, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8.05290279s ago: executing program 8 (id=887): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200}) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$eJzs3U9sHNX9APA3a6/txCZeE35g4EdIoRXhnx2SSE1vQaAeEZfeQSGBCENRQw9E/Ak9ICohioQ4VRyouFAqpUhFAlWqop7anlr11hPqhUpVKgX10kiJqzjvrXdfPN31xJ717n4+0nffvnmz8/2ON5iZ8ezbAIytxtrjkSOLRQgffPn+4689U3x+ddnd7TX2rz0WsdcKITQ7+kW2va/igssXXz2+UVuEQ2uPqR+euNB+7WwI4WzYH86HVvh0eeWbTz587MBnb83c+u6Z51/fpt1vy/cDAABG0bk/rfzt/n/88aGFS+f2HQvT7eXp+LwV+7PxuP9gPFBOx8uN0N0vOqLTVLbeRIxGtt5Ett5klmeyJF8z206zZL2pHvkmOpZttJ8AAAAwjNJ5bSsUjaWufqOxtHTtvP+qr+aniqUXT62cPD2gQgEAAIDK/v3G2k23QgghhBBCCCGEGOFYnR/0FQgAAABg3OTzhV3n7NbO1NXeWqu//BcebWz8etgCdf/7H+r8nz842PzboFf+j9/0GwcAgOpG9Wgy7Vc6jk7zGOTzCE5kr9vs8X8j287kJussm1dwWOYbLKsz/7nuVGX1b/Z9HJSy+vP5MHeqsvrzeTp3qrL6p2uuo6qy+mdqrqOqsvp31VxHVWX17665jqrK6p+tuY6qyuqfq7mOqsrqv6nmOqoqq39PzXVUVVb/sNxWW1Z/q+Y6qiqrf6HmOqoqq//mmuuoqqz+vTXXUVVZ/bfUXMeg3BXb9HPYl413nj/n53TDco4HAAAA4+4/5v8TQgghhBhsXFodfA1C1BoTO6AGIcYv3hj0BQgAAABg4NLnAtKn3lejND7RY3yyx3izx/hUj/HpHuMAAABACL99++Tt7xXrn/O/0fnw0rxRaf6lzc5jlM9HuNn8Nzrv2Y3mH5Z5ywAAABgvxffPX3ng8Y9eXrh0bt+xjrPfK/F8N80DOhmvDXwR++m+gLmsX6Rz6GPdeRol6+XXB24q296TN7ijAAAAMMbS+XsrFI2ljvPuVmg0lpbWz8cXQ7M4eWrlxMHYT9/P8of55vTV5Y/UXDcAAADQv/Xz/dkNz//T9/guhqli6cVTKydPX+vPtZc3G53XBebXlxed1wVa2fJDJcsPx376/s7n5netLV86/sOVZ7Z65wEAAGBMnH7lzPNPr6yc+JEnnnjiSfvJoH8zAQAAW+3rr99v/vjw3O+uff5/ff679Pn//bHfinP7/TmukO4TSJ8DuO7z+k9155kvW++l7vVa2XoTMaazumc6thM65htMr1soy9fq3s5USb7ZLN9cli+fp2AyWz/l25Mtz+cnTOvNZ8vzeRgnsxxFlv+eAAAAAOWWX37hpeXTr5x5+NQLTz974tkTLx4+dPR7R48efOS7jyyv3de/3Hl3PwAAADCM1m/6HXQlAAAAAAAAAAAAAAAAAAAAML7q+DqxQe8jAAAAjLt/vRFCOCuEKIlrX4E5+DqEEGLYY+8OqEGI0Y+JHVCDEGLHxupq/k3zAAAAANvr8sVXj3e21zlbbGm+9tZa15orMW9q5x7+68LVSKtdeLT7esnuLa2GcVf3v3/5hyv/x29ubf6Z9KTv33+N7g0cq5b3vuVfLnbmv2Oyz/z5/j9ZLf+BLP99ob/8qx9l+Z+qlv/+LP/uPvNft/8vVcv/QMy/GPsH7u03f/f7Px3btB+7+sz/YLb/z4R+82f73+ozYeahmB8AxlFj0AVsk3SUkI6jZ2M/7W883Az53Q+bPf5vZNuZvOHKu7ebjoNui/10vDSX5U02W/9str2bKtaZG5a7Ssrq36r3cbuV1d+suY6qyuqfqrmOqsrqn665jqrK6p+puY6qyurvOg99buf+11BW/7BcVy6rf7bmOqoqq3+u5jqqKqt/s/8fH5Sy+vfUXEdVZfXP11xHVWX1V7ysVruy+hdqrqOqsvpvrrmOqsrq31tzHVWV1X9LzXUMyp2xLTsfTuef83Es9VtZf3qDn+WoXlsAAACAYfNP8/8JIYQQQgghhBAjH6urg74CwSBt76eZAdip/P4fb97/8eb9H2/ef/6XdA9/kfWTiR7jkz3Gmz3Gp7Lx/N/rdI/xvdl2V6M0fkuP8f/rMb6nx/htPcYXNxjf1TF+e4/X39Fj/M4e4wAAAIyHW2Pr/BAAAABG12u/+uKd39z31MWFS+f2HQtT1807fzD2p+Pf1t+O/Xze+6QZ/+b/k9j/RWx/H9u/Z+u7/wQAAAC2X/qeGH//BwAAgNGVvqfU+T8AAACMroXYOv8HAACA0XVzbJ3/AwAAwAgrZjZeHNt0XeCe2PY7rx8AsPP9f2zviu2+2N4d22/FNh0H3Bvbb9dUHwCwdX7+g58efa9Yn+//cDZ+OS5P7XXOXrtSUDS6Z/LfFdvdsf1On/Xk3wfQb/5kT595tiv//A3mBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGR2Pt8ciRxSKED758//GfTb3zl6vL7m6vsX/tsYi9Vgih2X5dGl3v/zquePniq8c72yuxLcKhUISivTw8caGdaTaEcDbsD+dDK3y6vPLNJx8+duCzt2ZufffM869v44+ga/8AAABgFP03AAD//wcJIDw=") r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e) 7.965305715s ago: executing program 9 (id=889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) msgget$private(0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 6.868785069s ago: executing program 6 (id=890): syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x32}, {0x0, 0x9}}}}, 0x9) 6.350131879s ago: executing program 6 (id=891): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) close_range(r2, r3, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 6.257260125s ago: executing program 8 (id=892): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0xffffffff, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0xb2, 0x15, 0x9, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x105, 0x0, 0x5, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0xdd27, 0x242, 0x3, 0xa, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0xffffffff, 0x8, 0x8000, 0x1, 0x3c], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xf6ec, 0x129432f6, 0xc8, 0x200000f1, 0xe, 0x2bf, 0x6c7, 0xfffffffe, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1001, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x9, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4dc, 0x381, 0x5, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x8, 0xa, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x2, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000007, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x14, 0x1000, 0x5, 0xb1, 0x2, 0xbf, 0xa004, 0x3, 0x7ff, 0x12b, 0x4, 0x8, 0xa, 0xffffffff, 0x9, 0x7, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x9, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0x1, 0xf40, 0x6, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x800) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000010401"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) bind$unix(r2, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x3000000000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) r7 = msgget$private(0x0, 0x100) msgrcv(r7, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(r7, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10002, 0x51, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) wait4(r6, 0x0, 0x8, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r0, r0, 0x3, 0x5, &(0x7f0000000100)="81839c93f2", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) 6.257059985s ago: executing program 7 (id=893): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) close_range(r1, r2, 0x0) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.933230962s ago: executing program 9 (id=894): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x11, r5) madvise(&(0x7f000020b000/0x11000)=nil, 0x11000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="000000850000f9aa3e31418564c9de53b11f3b1e83bd3394eb7bef66d482e883a72e33cedf4fd3601291782fe52526c1fef4492ba9a6bbaa613cc9aacc52939895d46c72fcf709ebddcf19ebb1d450efdf5911bfb951e9a29d62545454c9f3e429d5f9e0e1e6c4a92e45000000003b0a53f658bf13377fd80e7f2d275762548de13d1a8774ef9694298ad99da258a64cd1f710f0e8a60284d13ce9637f525bbfe31ee8a21305"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) process_vm_readv(r1, &(0x7f0000000d00), 0x0, &(0x7f0000000140)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xbbb9fd7f22b740c8}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 3.59977716s ago: executing program 0 (id=895): syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000c80)='./file1\x00', 0x100049b, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x12) sendfile(r2, r1, 0x0, 0x7fffeff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x42f2a6166aa24f20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), 0x0, 0x2}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.240673101s ago: executing program 7 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000004e40), 0x4) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 3.239370161s ago: executing program 6 (id=906): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r7, 0x89e1, 0x0) close_range(r2, r3, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 2.283080187s ago: executing program 8 (id=897): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "fafac0348886ec6ca005b2d292649e4dbd42a3446049d9952cc199677d836942efd66f9bf786ec9cb4995e7d321d39b373e0fbadb55c66bcb7119c0074afe6bc", 0x19}, 0x48, 0xfffffffffffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffb}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r5, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 1.975585355s ago: executing program 6 (id=898): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084) 1.339995212s ago: executing program 7 (id=899): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket(0x1d, 0x80000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) fdatasync(r5) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000200)={0x0, 0xfffffffffffffd12, 0x7fffffff}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0xfc, 0x2bc, &(0x7f0000000a40)="$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") socketpair(0x1e, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000980)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000008000000000010000000c0002000000000000000000100007", @ANYRES32, @ANYBLOB="6b833c21bf8c1fb43e9fedaa1ff8cb7066c77e5c9faefcbfccf673dfd531c053016617f7799d41d554d40eb0591de4713e0258432ebd987f85ca67edcda7db5739d0032487d92be83ef9b3ed80e7814acfbd1f8ce76c7b9aeb8fe18c5eadc500008000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) 1.144658523s ago: executing program 6 (id=900): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200}) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e) socket$inet(0x2, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 68.535766ms ago: executing program 7 (id=901): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x56d, &(0x7f0000000880)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000040)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x101, 0x4000106b, r6, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000300)={'#! ', '', [], 0xa, "f3"}, 0x5) copy_file_range(r8, &(0x7f00000008c0)=0x4, r7, 0x0, 0x8, 0x0) 0s ago: executing program 6 (id=902): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ptrace(0x10, 0x0) ptrace(0x11, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f000020b000/0x11000)=nil, 0x11000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="000000850000f9aa3e31418564c9de53b11f3b1e83bd3394eb7bef66d482e883a72e33cedf4fd3601291782fe52526c1fef4492ba9a6bbaa613cc9aacc52939895d46c72fcf709ebddcf19ebb1d450efdf5911bfb951e9a29d62545454c9f3e429d5f9e0e1e6c4a92e45000000003b0a53f658bf13377fd80e7f2d275762548de13d1a8774ef9694298ad99da258a64cd1f710f0e8a60284d13ce9637f525bbfe31ee8a21305"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) process_vm_readv(r1, &(0x7f0000000d00), 0x0, &(0x7f0000000140)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xbbb9fd7f22b740c8}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) kernel console output (not intermixed with test programs): man_adv: batadv0: Removing interface: batadv_slave_1 [ 486.147484][ T37] batman_adv: batadv0: Interface deactivated: vlan1 [ 486.161316][ T37] batman_adv: batadv0: Removing interface: vlan1 [ 486.182186][ T37] device bridge_slave_1 left promiscuous mode [ 486.188473][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.215468][ T37] device bridge_slave_0 left promiscuous mode [ 486.231408][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.275182][ T37] device veth1_macvtap left promiscuous mode [ 486.281411][ T37] device veth0_macvtap left promiscuous mode [ 486.287558][ T37] device veth1_vlan left promiscuous mode [ 486.300059][ T37] device veth0_vlan left promiscuous mode [ 487.213419][ T37] team0 (unregistering): Port device team_slave_1 removed [ 487.299344][ T37] team0 (unregistering): Port device team_slave_0 removed [ 487.361444][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.446462][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.880391][ T37] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 487.889272][ T37] bond0 (unregistering): Released all slaves [ 488.412137][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.424431][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.470000][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.479677][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.493720][ T6318] device veth0_vlan entered promiscuous mode [ 488.520447][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.534116][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.554367][ T6318] device veth1_vlan entered promiscuous mode [ 488.605153][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.622371][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.644893][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.656419][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.669901][ T6318] device veth0_macvtap entered promiscuous mode [ 488.704685][ T6318] device veth1_macvtap entered promiscuous mode [ 488.723882][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.741806][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.756926][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.768756][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.784817][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.799324][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.814647][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.836438][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.849323][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.865943][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 488.887600][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 488.897322][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.907651][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.918487][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.940081][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.952841][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.970652][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.983304][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.993968][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.004606][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.018608][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.030379][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.040163][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.053994][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.088052][ T6318] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.100957][ T6318] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.112486][ T6318] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.125246][ T6318] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.219003][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.238578][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.264592][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 489.296886][ T4603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.314477][ T4603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.328926][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.152671][ T6596] tmpfs: Unknown parameter 'fscontext' [ 491.532617][ T6590] x_tables: duplicate underflow at hook 4 [ 492.386720][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 492.386740][ T26] audit: type=1326 audit(1770927682.143:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 492.617710][ T26] audit: type=1326 audit(1770927682.143:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 492.679478][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.370'. [ 493.486448][ T26] audit: type=1326 audit(1770927682.143:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 493.508576][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.606565][ T26] audit: type=1326 audit(1770927682.143:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 493.720854][ T6610] overlayfs: missing 'lowerdir' [ 493.738754][ T26] audit: type=1326 audit(1770927682.143:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 493.762191][ T26] audit: type=1326 audit(1770927682.143:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 493.785049][ T26] audit: type=1326 audit(1770927682.143:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 493.807458][ T26] audit: type=1326 audit(1770927682.143:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 493.835646][ T26] audit: type=1326 audit(1770927682.143:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 494.009284][ T6617] loop8: detected capacity change from 0 to 16 [ 494.063203][ T6617] erofs: (device loop8): mounted with root inode @ nid 36. [ 494.088193][ T6617] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 494.103680][ T6617] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 494.122496][ T6617] erofs: (device loop8): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 494.131832][ T6617] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 494.143626][ T6617] syz.8.360: attempt to access beyond end of device [ 494.143626][ T6617] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 494.158005][ T6617] syz.8.360: attempt to access beyond end of device [ 494.158005][ T6617] loop8: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 494.184405][ T6617] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[3749] [ 494.200895][ T6618] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 494.210342][ T6618] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 495.027318][ T26] audit: type=1326 audit(1770927682.143:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7fc00000 [ 495.731230][ T4346] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 495.954439][ T4346] usb 9-1: config 0 has an invalid interface number: 4 but max is 0 [ 495.983787][ T4346] usb 9-1: config 0 has no interface number 0 [ 496.014935][ T4346] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 496.044551][ T4346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.078813][ T6632] loop6: detected capacity change from 0 to 512 [ 496.095067][ T6632] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 496.112232][ T4346] usb 9-1: Product: syz [ 496.126908][ T4346] usb 9-1: Manufacturer: syz [ 496.147254][ T4346] usb 9-1: SerialNumber: syz [ 496.158138][ T6632] EXT4-fs (loop6): 1 truncate cleaned up [ 496.163886][ T6632] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 496.207071][ T4346] usb 9-1: config 0 descriptor?? [ 496.374328][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 496.531668][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.363'. [ 496.683999][ T4528] usb 9-1: USB disconnect, device number 2 [ 497.393566][ T6645] autofs4:pid:6645:autofs_fill_super: called with bogus options [ 498.825797][ T6656] lo speed is unknown, defaulting to 1000 [ 499.322970][ T6659] trusted_key: encrypted_key: insufficient parameters specified [ 499.416323][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.426522][ T6659] bond0: (slave rose0): Enslaving as an active interface with an up link [ 499.436996][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 501.366642][ T6676] overlayfs: missing 'workdir' [ 501.994057][ T6667] loop8: detected capacity change from 0 to 2048 [ 502.030087][ T6667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.060459][ T26] kauditd_printk_skb: 206 callbacks suppressed [ 502.060476][ T26] audit: type=1800 audit(1770927693.563:290): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.378" name="file1" dev="loop8" ino=1346 res=0 errno=0 [ 503.266777][ T6701] tipc: Can't bind to reserved service type 0 [ 506.012678][ T6713] block device autoloading is deprecated and will be removed. [ 507.154586][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.161044][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.462736][ T26] audit: type=1326 audit(1770927699.973:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 508.488669][ T6734] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 508.631717][ T26] audit: type=1326 audit(1770927700.013:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 508.656897][ T26] audit: type=1326 audit(1770927700.013:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 508.798396][ T6736] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 508.906606][ T6738] loop8: detected capacity change from 0 to 512 [ 509.211308][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 509.403836][ T27] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 509.411632][ T26] audit: type=1326 audit(1770927700.013:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 509.434184][ T26] audit: type=1326 audit(1770927700.013:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 509.435884][ T6738] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 509.458115][ T26] audit: type=1326 audit(1770927700.013:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 509.467783][ T6738] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.489100][ T26] audit: type=1326 audit(1770927700.013:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 509.502569][ T27] usb 4-1: config 0 has no interface number 0 [ 509.615160][ T27] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 509.636364][ T6745] overlayfs: missing 'workdir' [ 509.652505][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.675788][ T27] usb 4-1: Product: syz [ 509.721228][ T27] usb 4-1: Manufacturer: syz [ 509.726477][ T27] usb 4-1: SerialNumber: syz [ 509.736855][ T26] audit: type=1326 audit(1770927700.013:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 509.792506][ T27] usb 4-1: config 0 descriptor?? [ 509.971068][ T6751] loop6: detected capacity change from 0 to 16 [ 510.352877][ T6751] erofs: (device loop6): mounted with root inode @ nid 36. [ 510.368623][ T6751] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 510.427338][ T6752] erofs: (device loop6): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 510.436529][ T6752] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 510.447219][ T6752] syz.6.393: attempt to access beyond end of device [ 510.447219][ T6752] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 510.460810][ T6752] syz.6.393: attempt to access beyond end of device [ 510.460810][ T6752] loop6: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 510.722901][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 510.746953][ T6751] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[3749] [ 510.758002][ T6751] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 510.766629][ T6752] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 510.776033][ T6752] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 510.962204][ T26] audit: type=1326 audit(1770927700.013:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 511.036885][ T27] usb 4-1: USB disconnect, device number 3 [ 511.110071][ T26] audit: type=1326 audit(1770927700.013:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22cc39bf79 code=0x7ffc0000 [ 511.183711][ T6762] netlink: 112 bytes leftover after parsing attributes in process `syz.8.395'. [ 512.221200][ T6771] netlink: 'syz.8.395': attribute type 1 has an invalid length. [ 512.474175][ T6772] loop3: detected capacity change from 0 to 512 [ 513.190963][ T6772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 513.241127][ T6772] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.326623][ T6772] EXT4-fs (loop3): unmounting filesystem. [ 515.527218][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.402'. [ 516.803182][ T6819] rdma_rxe: rxe_register_device failed with error -23 [ 516.811372][ T6819] rdma_rxe: failed to add veth1_to_team [ 518.411389][ T6830] overlayfs: missing 'workdir' [ 518.626089][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 525.678054][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.416'. [ 529.229858][ T6878] loop6: detected capacity change from 0 to 512 [ 529.261372][ T6878] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 529.353367][ T6878] EXT4-fs (loop6): 1 truncate cleaned up [ 529.359091][ T6878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 529.495329][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 533.440185][ T6911] lo speed is unknown, defaulting to 1000 [ 533.820629][ T6916] afs: Unknown parameter 'dy' [ 537.670966][ T6941] sp0: Synchronizing with TNC [ 537.741829][ T6942] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 537.752929][ T6942] cramfs: wrong magic [ 538.845018][ T6947] loop8: detected capacity change from 0 to 512 [ 538.883240][ T6947] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 539.012217][ T6947] EXT4-fs (loop8): 1 truncate cleaned up [ 539.017960][ T6947] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 539.117977][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 539.697947][ T6958] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 540.719477][ T6963] netlink: 'syz.7.436': attribute type 10 has an invalid length. [ 540.727632][ T6963] netlink: 40 bytes leftover after parsing attributes in process `syz.7.436'. [ 540.742615][ T6963] batman_adv: batadv0: Adding interface: vlan1 [ 540.748936][ T6963] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.774486][ T6963] batman_adv: batadv0: Interface activated: vlan1 [ 544.034826][ T6975] netlink: 'syz.2.439': attribute type 10 has an invalid length. [ 544.042643][ T6975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.439'. [ 545.418972][ T6980] loop7: detected capacity change from 0 to 512 [ 545.741750][ T6990] binder: 6987:6990 ioctl c0306201 200000000780 returned -11 [ 545.755523][ T6990] virtio-fs: tag not found [ 546.513379][ T6980] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 546.656349][ T6980] EXT4-fs (loop7): 1 truncate cleaned up [ 546.667347][ T6980] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 546.806394][ T5957] EXT4-fs (loop7): unmounting filesystem. [ 548.029640][ T7004] loop7: detected capacity change from 0 to 512 [ 548.212800][ T7004] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 550.300620][ T7004] EXT4-fs: error -4 creating inode table initialization thread [ 550.431023][ T7004] EXT4-fs (loop7): mount failed [ 552.966549][ T7042] netlink: 'syz.7.451': attribute type 10 has an invalid length. [ 552.974895][ T7042] netlink: 40 bytes leftover after parsing attributes in process `syz.7.451'. [ 554.982757][ T7069] virtio-fs: tag not found [ 555.253425][ T7067] loop6: detected capacity change from 0 to 4096 [ 555.264791][ T7067] ntfs3: Unknown parameter 'windows_names' [ 555.593586][ T6514] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 558.311960][ T7089] loop6: detected capacity change from 0 to 512 [ 564.014836][ T7119] loop8: detected capacity change from 0 to 512 [ 564.155570][ T7119] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 564.220258][ T7121] netlink: 'syz.7.463': attribute type 10 has an invalid length. [ 564.245610][ T7119] EXT4-fs (loop8): 1 truncate cleaned up [ 564.251815][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.7.463'. [ 564.271794][ T7119] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 565.817055][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 566.054352][ T7136] overlayfs: failed to clone upperpath [ 566.571270][ T4355] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 566.584787][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 566.744417][ T4355] usb 8-1: device descriptor read/64, error -32 [ 567.451225][ T4355] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 567.635213][ T4355] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.681543][ T4355] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.729416][ T4355] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.756822][ T4355] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.990292][ T4355] usb 8-1: usb_control_msg returned -32 [ 567.996907][ T4355] usbtmc 8-1:16.0: can't read capabilities [ 568.350404][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.356869][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.733904][ T7162] rdma_rxe: rxe_register_device failed with error -23 [ 568.741347][ T7162] rdma_rxe: failed to add veth1_to_team [ 569.480598][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.494000][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.502131][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.510039][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.517761][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 569.527499][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.700827][ T7163] lo speed is unknown, defaulting to 1000 [ 569.848290][ T4753] usb 8-1: USB disconnect, device number 3 [ 570.144067][ T7176] netlink: 'syz.2.472': attribute type 10 has an invalid length. [ 570.308793][ T7187] rdma_rxe: rxe_register_device failed with error -23 [ 570.315783][ T7187] rdma_rxe: failed to add veth1_to_team [ 570.862380][ T7176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.472'. [ 571.632507][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 573.154020][ T4628] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.701490][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 573.738799][ T7217] loop7: detected capacity change from 0 to 512 [ 573.762447][ T7163] chnl_net:caif_netlink_parms(): no params data found [ 573.826772][ T7217] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 573.882284][ T4628] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.941664][ T7217] EXT4-fs (loop7): 1 truncate cleaned up [ 573.947327][ T7217] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 574.093461][ T4628] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.223002][ T5957] EXT4-fs (loop7): unmounting filesystem. [ 574.386243][ T7232] binder: 7220:7232 ioctl c0306201 200000000780 returned -11 [ 574.395764][ T7232] virtio-fs: tag not found [ 574.598336][ T4628] bridge0: port 3(netdevsim0) entered disabled state [ 574.723727][ T4628] device netdevsim0 left promiscuous mode [ 574.753138][ T7236] fuse: Bad value for 'fd' [ 574.762025][ T4628] bridge0: port 3(netdevsim0) entered disabled state [ 574.863747][ T4628] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.797134][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 576.087251][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.471712][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.861313][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 578.915460][ T7163] device bridge_slave_0 entered promiscuous mode [ 579.573872][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.581017][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.623002][ T7163] device bridge_slave_1 entered promiscuous mode [ 581.250523][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.478142][ T7258] netlink: 'syz.7.482': attribute type 4 has an invalid length. [ 581.605357][ T7254] netlink: 'syz.7.482': attribute type 4 has an invalid length. [ 581.645749][ T7254] netlink: 'syz.7.482': attribute type 1 has an invalid length. [ 581.662989][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.663964][ T7254] netlink: 'syz.7.482': attribute type 2 has an invalid length. [ 581.708949][ T7258] netlink: 165 bytes leftover after parsing attributes in process `syz.7.482'. [ 581.755009][ T7163] team0: Port device team_slave_0 added [ 581.769639][ T7163] team0: Port device team_slave_1 added [ 581.834244][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.867160][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.381453][ T7163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.114699][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.138320][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.224884][ T7163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.306291][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.8.489'. [ 585.663969][ T7163] device hsr_slave_0 entered promiscuous mode [ 585.699858][ T7163] device hsr_slave_1 entered promiscuous mode [ 585.768322][ T7163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.796962][ T7163] Cannot create hsr debugfs directory [ 586.801577][ T7297] loop7: detected capacity change from 0 to 512 [ 586.846689][ T7297] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 586.921846][ T7297] EXT4-fs (loop7): 1 truncate cleaned up [ 586.928354][ T7297] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 587.133241][ T5957] EXT4-fs (loop7): unmounting filesystem. [ 588.597318][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.8.499'. [ 588.832794][ T7163] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 589.014395][ T7163] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 590.355007][ T7163] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 590.673910][ T7346] loop6: detected capacity change from 0 to 512 [ 590.689814][ T7346] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 590.792179][ T7346] EXT4-fs (loop6): 1 truncate cleaned up [ 590.797990][ T7346] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 591.412436][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.421045][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.429058][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.437548][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.445377][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 591.452785][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 591.551615][ T7163] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 591.602328][ T7332] netlink: 'syz.7.494': attribute type 10 has an invalid length. [ 591.610122][ T7332] netlink: 40 bytes leftover after parsing attributes in process `syz.7.494'. [ 592.263059][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 593.683017][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 594.969324][ T7349] lo speed is unknown, defaulting to 1000 [ 595.010332][ T4628] device hsr_slave_0 left promiscuous mode [ 595.567063][ T4628] device hsr_slave_1 left promiscuous mode [ 595.583614][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.611868][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.649248][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.697355][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.755451][ T4628] batman_adv: batadv0: Interface deactivated: vlan1 [ 595.781244][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 595.853349][ T4628] batman_adv: batadv0: Removing interface: vlan1 [ 595.898068][ T4628] device bridge_slave_1 left promiscuous mode [ 595.928510][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.012363][ T4628] device bridge_slave_0 left promiscuous mode [ 596.026077][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.186834][ T4628] device veth1_macvtap left promiscuous mode [ 596.206266][ T4628] device veth0_macvtap left promiscuous mode [ 596.236809][ T4628] device veth1_vlan left promiscuous mode [ 596.266973][ T4628] device veth0_vlan left promiscuous mode [ 597.286257][ T7398] loop7: detected capacity change from 0 to 512 [ 597.366685][ T7398] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 597.447965][ T7398] EXT4-fs (loop7): 1 truncate cleaned up [ 597.467683][ T7398] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 597.867568][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 598.119647][ T4628] team0 (unregistering): Port device team_slave_1 removed [ 598.406616][ T4628] team0 (unregistering): Port device team_slave_0 removed [ 598.650530][ T4628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.704413][ T4628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.018063][ T4628] bond0 (unregistering): Released all slaves [ 599.120557][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.503'. [ 599.236438][ T5957] EXT4-fs (loop7): unmounting filesystem. [ 599.300583][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.434167][ T7163] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.445251][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.472086][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.516991][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.712133][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.887565][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.894851][ T4622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.942220][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 600.293471][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.581982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.282301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.342722][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.349926][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.394088][ T7417] netlink: 'syz.7.506': attribute type 10 has an invalid length. [ 602.402231][ T7417] netlink: 40 bytes leftover after parsing attributes in process `syz.7.506'. [ 602.448748][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 602.506339][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 602.520371][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 602.621320][ T4286] Bluetooth: hci0: command 0x0405 tx timeout [ 603.620353][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 603.645525][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 603.847376][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 604.548515][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 604.582204][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 604.620089][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.637948][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.682105][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 604.690927][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 604.726408][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.7.515'. [ 605.079959][ T7460] loop8: detected capacity change from 0 to 512 [ 605.132603][ T7460] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 605.192360][ T7460] EXT4-fs (loop8): 1 truncate cleaned up [ 605.201666][ T7460] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 605.335441][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.361407][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.391511][ T7349] device bridge_slave_0 entered promiscuous mode [ 605.456876][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 606.104254][ T4628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.128389][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.139208][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.178694][ T7349] device bridge_slave_1 entered promiscuous mode [ 606.207131][ T7480] netlink: 'syz.6.518': attribute type 10 has an invalid length. [ 606.215269][ T7480] netlink: 40 bytes leftover after parsing attributes in process `syz.6.518'. [ 606.256778][ T7480] batman_adv: batadv0: Adding interface: vlan1 [ 606.264986][ T7480] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.292387][ T7480] batman_adv: batadv0: Interface activated: vlan1 [ 606.437875][ T4628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.478144][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.622690][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.824543][ T7492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 606.943716][ T7494] loop6: detected capacity change from 0 to 512 [ 607.577987][ T7349] team0: Port device team_slave_0 added [ 607.586762][ T7349] team0: Port device team_slave_1 added [ 607.627954][ T7494] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 607.636988][ T7494] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.910261][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 607.925092][ T4628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.000913][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.018038][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.088804][ T4628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.106814][ T7506] Bluetooth: MGMT ver 1.22 [ 608.146720][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.155485][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.326693][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.454111][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.499006][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.510396][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.588489][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.996389][ T7514] loop7: detected capacity change from 0 to 128 [ 609.159324][ T7349] device hsr_slave_0 entered promiscuous mode [ 609.246452][ T7349] device hsr_slave_1 entered promiscuous mode [ 609.271346][ T7349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.289221][ T7349] Cannot create hsr debugfs directory [ 610.465466][ T7525] overlayfs: failed to clone upperpath [ 612.815725][ T7551] netlink: 'syz.6.527': attribute type 10 has an invalid length. [ 612.824599][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.6.527'. [ 616.608919][ T7576] loop8: detected capacity change from 0 to 8 [ 616.832193][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 617.302379][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 617.376550][ T7163] device veth0_vlan entered promiscuous mode [ 617.617181][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.982835][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 619.006741][ T7163] device veth1_vlan entered promiscuous mode [ 619.131746][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 619.142488][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 619.171757][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 619.436274][ T7163] device veth0_macvtap entered promiscuous mode [ 619.486481][ T7163] device veth1_macvtap entered promiscuous mode [ 620.208115][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 620.231085][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 620.240093][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.251590][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.532'. [ 620.322283][ T7602] overlayfs: failed to clone upperpath [ 620.355028][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.417423][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.428282][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.445005][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.482642][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.503423][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.531264][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.548494][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.580508][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.599906][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 620.610312][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.621697][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.743373][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.774310][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.805024][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.856280][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.894055][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.931312][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.951533][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.985435][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.023057][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.097999][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 621.124472][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.795256][ T7624] netlink: 'syz.8.536': attribute type 10 has an invalid length. [ 621.804472][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.8.536'. [ 622.327590][ T7624] batman_adv: batadv0: Adding interface: vlan1 [ 622.361233][ T7624] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.287180][ T7624] batman_adv: batadv0: Interface activated: vlan1 [ 623.299460][ T7163] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.310888][ T7163] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.365141][ T7163] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.375268][ T7163] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.335508][ T7349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.992717][ T7349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 626.044752][ T7349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 626.188642][ T4628] device hsr_slave_0 left promiscuous mode [ 626.253739][ T4628] device hsr_slave_1 left promiscuous mode [ 626.293611][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.325215][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.367850][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.411714][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.463072][ T4628] batman_adv: batadv0: Interface deactivated: vlan1 [ 626.469754][ T4628] batman_adv: batadv0: Removing interface: vlan1 [ 626.508105][ T4628] device bridge_slave_1 left promiscuous mode [ 626.548230][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.698129][ T7662] loop8: detected capacity change from 0 to 512 [ 626.722904][ T4628] device bridge_slave_0 left promiscuous mode [ 626.763086][ T7662] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 626.884542][ T7662] EXT4-fs (loop8): 1 truncate cleaned up [ 626.890293][ T7662] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 626.937089][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.588151][ T4628] device veth1_macvtap left promiscuous mode [ 627.597996][ T4628] device veth0_macvtap left promiscuous mode [ 627.635245][ T4628] device veth1_vlan left promiscuous mode [ 627.651678][ T4628] device veth0_vlan left promiscuous mode [ 627.853866][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 627.864848][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 627.872732][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 627.880546][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 627.888128][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 627.895453][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.424494][ T4628] team0 (unregistering): Port device team_slave_1 removed [ 629.473464][ T4628] team0 (unregistering): Port device team_slave_0 removed [ 629.518444][ T4628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.564210][ T4628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.789634][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.796256][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.905529][ T4628] bond0 (unregistering): Released all slaves [ 629.947330][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 630.013010][ T7349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 630.119073][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 630.154597][ T4320] lo speed is unknown, defaulting to 1000 [ 630.154627][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.547'. [ 630.668510][ T7704] 9pnet_fd: p9_fd_create_unix (7704): problem connecting socket: éq‰Y’3aK: -111 [ 630.757237][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.8.551'. [ 631.384487][ T7703] loop8: detected capacity change from 0 to 40427 [ 631.413175][ T7703] F2FS-fs (loop8): Unrecognized mount option "4" or missing value [ 631.578709][ T6514] I/O error, dev loop8, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 631.955775][ T7711] netlink: 'syz.6.554': attribute type 10 has an invalid length. [ 631.964384][ T7711] netlink: 40 bytes leftover after parsing attributes in process `syz.6.554'. [ 632.021317][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 632.187554][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.271837][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.321745][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.394500][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.235270][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.262584][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.279876][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.287088][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.312337][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.355025][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.379670][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.386940][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.418543][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.464372][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.508097][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.553031][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.580841][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.630560][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 633.676915][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.005620][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.103443][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 634.243462][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.472079][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.482307][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.557'. [ 634.505398][ T7349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.676262][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 635.480290][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 635.529443][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.566653][ T7741] loop6: detected capacity change from 0 to 512 [ 635.577400][ T7741] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 635.677642][ T7741] EXT4-fs (loop6): 1 truncate cleaned up [ 635.683602][ T7741] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 635.730702][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.8.558'. [ 635.834310][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 636.043968][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 636.197829][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 636.895008][ T4628] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.927473][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.8.560'. [ 636.982825][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 637.031848][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.038996][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.083447][ T7669] device bridge_slave_0 entered promiscuous mode [ 637.103342][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.116530][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.136387][ T7669] device bridge_slave_1 entered promiscuous mode [ 637.269681][ T4628] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.332816][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 637.370864][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 637.397202][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.420782][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.524358][ T4628] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.565403][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.632377][ T4628] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.529336][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 638.543530][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 638.618063][ T7669] team0: Port device team_slave_0 added [ 638.753908][ T7669] team0: Port device team_slave_1 added [ 638.759834][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 638.776085][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.795845][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 638.834968][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 638.866725][ T7349] device veth0_vlan entered promiscuous mode [ 638.938665][ T7349] device veth1_vlan entered promiscuous mode [ 638.987064][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.000960][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.621357][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.675905][ T7785] netlink: 'syz.6.565': attribute type 10 has an invalid length. [ 639.685849][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.6.565'. [ 639.724782][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 639.781771][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 639.851604][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.858619][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.915199][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.249056][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 641.320764][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 641.365032][ T7349] device veth0_macvtap entered promiscuous mode [ 641.540273][ T7669] device hsr_slave_0 entered promiscuous mode [ 641.602637][ T7669] device hsr_slave_1 entered promiscuous mode [ 641.622734][ T7669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.630305][ T7669] Cannot create hsr debugfs directory [ 642.302372][ T7349] device veth1_macvtap entered promiscuous mode [ 642.542479][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 642.586809][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.659271][ T7809] sctp: [Deprecated]: syz.8.569 (pid 7809) Use of int in max_burst socket option. [ 642.659271][ T7809] Use struct sctp_assoc_value instead [ 642.675123][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.710309][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.028160][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.932920][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.081859][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.259347][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.314385][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.327200][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.339234][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.351300][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.368470][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.402303][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.412655][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.423817][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.434071][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.445376][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.456922][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.567120][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.570'. [ 644.621206][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 644.629984][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 644.928151][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 644.938597][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 644.946187][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 644.956292][ T4286] Workqueue: hci2 hci_rx_work [ 644.961032][ T4286] Call Trace: [ 644.964341][ T4286] [ 644.967296][ T4286] dump_stack_lvl+0x188/0x24e [ 644.972017][ T4286] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 644.977682][ T4286] ? show_regs_print_info+0x12/0x12 [ 644.982913][ T4286] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 644.989734][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 644.994910][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 644.999643][ T4286] ? preempt_schedule_thunk+0x16/0x18 [ 645.005075][ T4286] kobject_add_internal+0x61c/0xcc0 [ 645.010329][ T4286] kobject_add+0x160/0x230 [ 645.014788][ T4286] ? kobject_init+0x1d0/0x1d0 [ 645.019533][ T4286] ? klist_children_get+0x50/0x50 [ 645.024597][ T4286] ? get_device_parent+0x121/0x3f0 [ 645.029761][ T4286] device_add+0x483/0xfb0 [ 645.034148][ T4286] ? kmem_cache_free+0xf7/0x290 [ 645.039059][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 645.044053][ T4286] le_conn_complete_evt+0x105f/0x1670 [ 645.049478][ T4286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 645.055780][ T4286] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 645.061471][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 645.066707][ T4286] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 645.072375][ T4286] hci_le_enh_conn_complete_evt+0x185/0x460 [ 645.078326][ T4286] ? hci_remote_host_features_evt+0x270/0x270 [ 645.084457][ T4286] hci_event_packet+0x7b6/0x1280 [ 645.089436][ T4286] ? bis_list+0x280/0x280 [ 645.093808][ T4286] ? kcov_remote_start+0x27/0x7e0 [ 645.098868][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 645.104100][ T4286] hci_rx_work+0x3eb/0xd40 [ 645.108566][ T4286] ? process_one_work+0x7b0/0x1160 [ 645.113714][ T4286] process_one_work+0x8a2/0x1160 [ 645.118706][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 645.124383][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 645.129441][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 645.135015][ T4286] ? kthread_data+0x4b/0xc0 [ 645.139598][ T4286] worker_thread+0xaa2/0x1270 [ 645.144346][ T4286] ? __kthread_parkme+0x162/0x1c0 [ 645.149421][ T4286] kthread+0x29d/0x330 [ 645.153518][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 645.158587][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 645.163221][ T4286] ret_from_fork+0x1f/0x30 [ 645.167704][ T4286] [ 645.446355][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 645.455435][ T4286] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 645.469415][ T4286] Bluetooth: hci2: failed to register connection device [ 645.487013][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 645.518560][ T7829] ceph: No mds server is up or the cluster is laggy [ 645.532232][ T7349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.533142][ T6440] libceph: connect (1)[c::]:6789 error -101 [ 645.555111][ T6440] libceph: mon0 (1)[c::]:6789 connect error [ 645.567318][ T7349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.591237][ T7349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.600041][ T7349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.190313][ T4466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.209092][ T4466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.628617][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.089545][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.7.575'. [ 648.405116][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.438170][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.486201][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 648.640975][ T7669] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 648.674318][ T7669] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 648.826624][ T7669] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 648.864081][ T7669] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 649.518722][ T4628] device hsr_slave_0 left promiscuous mode [ 649.551853][ T4628] device hsr_slave_1 left promiscuous mode [ 649.661926][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.669892][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.726980][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.150263][ T7878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 650.270565][ T7880] loop1: detected capacity change from 0 to 512 [ 650.887145][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.931464][ T7880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 650.941541][ T7880] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.321954][ T7875] loop8: detected capacity change from 0 to 512 [ 652.408902][ T4628] device bridge_slave_1 left promiscuous mode [ 652.512056][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.528492][ T7875] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 652.547766][ T7349] EXT4-fs (loop1): unmounting filesystem. [ 652.619825][ T7875] EXT4-fs (loop8): 1 truncate cleaned up [ 652.633481][ T7875] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 652.838344][ T4628] device bridge_slave_0 left promiscuous mode [ 652.847320][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.810541][ T7907] loop1: detected capacity change from 0 to 4096 [ 653.817840][ T7907] ntfs3: Unknown parameter 'windows_names' [ 654.617046][ T6514] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 654.652505][ T4628] device veth1_macvtap left promiscuous mode [ 654.660534][ T4628] device veth0_macvtap left promiscuous mode [ 654.673794][ T4628] device veth1_vlan left promiscuous mode [ 654.680803][ T4628] device veth0_vlan left promiscuous mode [ 654.742600][ T7911] loop6: detected capacity change from 0 to 512 [ 654.763054][ T7911] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 655.421657][ T4628] team0 (unregistering): Port device team_slave_1 removed [ 655.465631][ T4628] team0 (unregistering): Port device team_slave_0 removed [ 655.510947][ T4628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.553511][ T4628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.629978][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 657.455867][ T4628] bond0 (unregistering): Released all slaves [ 658.824176][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.7.580'. [ 659.112665][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 659.439961][ T7934] loop1: detected capacity change from 0 to 40427 [ 659.477208][ T7934] F2FS-fs (loop1): invalid crc value [ 659.644591][ T7934] F2FS-fs (loop1): Found nat_bits in checkpoint [ 659.789657][ T7934] F2FS-fs (loop1): Start checkpoint disabled! [ 660.071513][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.123557][ T7934] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 660.414047][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.7.586'. [ 660.478328][ T7948] openvswitch: netlink: EtherType 0 is less than min 600 [ 660.964360][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 660.997887][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.100216][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.136038][ T7669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 661.168290][ T7669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.273101][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 661.303253][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.347616][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.354843][ T4787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.391382][ T7955] loop8: detected capacity change from 0 to 128 [ 661.423968][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 661.450706][ T7955] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 661.471928][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.489187][ T5407] kworker/u4:24: attempt to access beyond end of device [ 661.489187][ T5407] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 661.507498][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.514697][ T4787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.575097][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 661.621899][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 661.796652][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 661.816895][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 661.844104][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.414276][ T7965] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 662.431621][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 662.431634][ T26] audit: type=1800 audit(1770927853.943:343): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.592" name="file1" dev="loop8" ino=94 res=0 errno=0 [ 662.469338][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.508785][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.538952][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.581670][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.610871][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.652571][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.669422][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.707653][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 664.941474][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.7.594'. [ 666.848479][ T7986] loop1: detected capacity change from 0 to 1024 [ 666.939199][ T7986] EXT4-fs: Ignoring removed orlov option [ 666.974954][ T7986] EXT4-fs: Ignoring removed bh option [ 667.332111][ T7986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 668.331355][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.595'. [ 668.862169][ T7349] EXT4-fs (loop1): unmounting filesystem. [ 668.896586][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.7.600'. [ 669.381270][ T4286] Bluetooth: hci4: command 0x0405 tx timeout [ 669.981690][ T8025] xt_cgroup: path and classid specified [ 671.184364][ T8017] loop8: detected capacity change from 0 to 512 [ 671.258555][ T8017] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 671.558696][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 673.333017][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.408330][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.562243][ T8047] loop6: detected capacity change from 0 to 512 [ 673.572871][ T8047] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 674.559168][ T8017] EXT4-fs: failed to create workqueue [ 674.572002][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 674.584018][ T8017] EXT4-fs (loop8): mount failed [ 674.838405][ T8047] EXT4-fs: error -4 creating inode table initialization thread [ 674.856451][ T8047] EXT4-fs (loop6): mount failed [ 675.094499][ T4286] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 677.716409][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.608'. [ 677.836220][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.8.611'. [ 679.149238][ T8086] "syz.1.612" (8086) uses obsolete ecb(arc4) skcipher [ 679.468578][ T8090] loop1: detected capacity change from 0 to 1024 [ 679.476434][ T8090] EXT4-fs: inline encryption not supported [ 681.012683][ T8090] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 681.278516][ T7349] EXT4-fs (loop1): unmounting filesystem. [ 681.403471][ T8102] loop6: detected capacity change from 0 to 512 [ 681.414564][ T8102] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 683.429370][ T8106] loop8: detected capacity change from 0 to 512 [ 683.572923][ T8102] EXT4-fs (loop6): 1 truncate cleaned up [ 683.578759][ T8106] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 683.750790][ T8109] loop1: detected capacity change from 0 to 512 [ 685.229190][ T8102] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 685.243908][ T8109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 685.332534][ T8109] EXT4-fs (loop1): 1 truncate cleaned up [ 685.338344][ T8109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 685.496975][ T8106] EXT4-fs (loop8): 1 truncate cleaned up [ 685.553978][ T8106] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 685.604007][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 685.754986][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 687.697692][ T8120] device wlan0 entered promiscuous mode [ 688.007815][ T7349] EXT4-fs (loop1): unmounting filesystem. [ 688.449749][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 691.223525][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.229986][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.142818][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.153546][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.167122][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.177386][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.185764][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 692.194231][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 693.796536][ T8177] loop6: detected capacity change from 0 to 256 [ 693.806481][ T8177] FAT-fs (loop6): Unrecognized mount option "01777777777777777777777" or missing value [ 694.421456][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 695.651795][ T8174] can: request_module (can-proto-4) failed. [ 696.136449][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 696.207271][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.395189][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.501237][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 697.373587][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.387392][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.433106][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.480486][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.511167][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.551231][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.586846][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.598557][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.749679][ T8197] loop8: detected capacity change from 0 to 512 [ 697.765092][ T8197] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 698.581237][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 699.264613][ T8197] EXT4-fs (loop8): 1 truncate cleaned up [ 699.270410][ T8197] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 699.322802][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.402802][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.412735][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.425942][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.483386][ T8179] syz.1.631 (8179) used greatest stack depth: 17784 bytes left [ 699.848871][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 699.972748][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.635'. [ 700.701254][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 701.898139][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 702.989675][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.009087][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.048827][ T8166] device bridge_slave_0 entered promiscuous mode [ 703.102856][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.111716][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.120562][ T8166] device bridge_slave_1 entered promiscuous mode [ 704.147918][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.810099][ T8245] 9pnet_fd: Insufficient options for proto=fd [ 705.411632][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.463344][ T8166] team0: Port device team_slave_0 added [ 705.497279][ T8166] team0: Port device team_slave_1 added [ 705.526808][ T8240] netlink: 'syz.8.644': attribute type 10 has an invalid length. [ 705.536019][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.8.644'. [ 705.957459][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.966841][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.008185][ T8252] loop8: detected capacity change from 0 to 512 [ 706.046680][ T8252] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 706.106843][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.118733][ T8252] EXT4-fs (loop8): 1 truncate cleaned up [ 706.136319][ T8252] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 707.136477][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.148128][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.174904][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.289214][ T4622] device hsr_slave_0 left promiscuous mode [ 707.296118][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 707.349141][ T4622] device hsr_slave_1 left promiscuous mode [ 707.378330][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.419188][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.448133][ T4622] device bridge_slave_1 left promiscuous mode [ 707.472413][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.489478][ T4622] device bridge_slave_0 left promiscuous mode [ 707.505961][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.623054][ T8269] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 707.639531][ T8269] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 707.989440][ T8271] loop8: detected capacity change from 0 to 40427 [ 708.028115][ T8271] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 708.036313][ T8271] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 708.052410][ T8271] F2FS-fs (loop8): invalid crc value [ 708.158882][ T8271] F2FS-fs (loop8): Found nat_bits in checkpoint [ 708.234849][ T8271] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 708.242836][ T8271] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 708.418202][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 708.452657][ T8269] Can't find ip_set type has [ 710.552614][ T4622] team0 (unregistering): Port device team_slave_1 removed [ 711.050107][ T4622] team0 (unregistering): Port device team_slave_0 removed [ 711.221203][ T4286] Bluetooth: hci4: command 0x0405 tx timeout [ 711.314945][ T4622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.136213][ T8301] loop8: detected capacity change from 0 to 128 [ 712.152046][ T8301] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 712.275455][ T8298] loop6: detected capacity change from 0 to 512 [ 712.308276][ T8301] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 712.322459][ T8301] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.402690][ T8298] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 712.440437][ T4622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.474779][ T8298] EXT4-fs (loop6): 1 truncate cleaned up [ 712.539484][ T8298] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 712.677158][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 713.110553][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.8.655'. [ 713.730822][ T4622] bond0 (unregistering): Released all slaves [ 714.476475][ T8166] device hsr_slave_0 entered promiscuous mode [ 715.365803][ T8166] device hsr_slave_1 entered promiscuous mode [ 715.367521][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 715.393620][ T8166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.437919][ T8166] Cannot create hsr debugfs directory [ 716.758514][ T8320] loop6: detected capacity change from 0 to 512 [ 716.913726][ T8320] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 716.943151][ T8320] EXT4-fs (loop6): 1 truncate cleaned up [ 717.787138][ T8320] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 718.048626][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 718.099561][ T8342] lo speed is unknown, defaulting to 1000 [ 719.175014][ T8342] lo speed is unknown, defaulting to 1000 [ 719.191680][ T8342] lo speed is unknown, defaulting to 1000 [ 719.238324][ T8342] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 720.024653][ T8342] lo speed is unknown, defaulting to 1000 [ 720.125829][ T8342] lo speed is unknown, defaulting to 1000 [ 720.152528][ T8342] lo speed is unknown, defaulting to 1000 [ 720.159259][ T8342] lo speed is unknown, defaulting to 1000 [ 720.218461][ T8342] lo speed is unknown, defaulting to 1000 [ 720.418847][ T8366] loop8: detected capacity change from 0 to 1024 [ 720.473115][ T8366] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 720.620434][ T8373] overlayfs: failed to clone upperpath [ 721.098491][ T8166] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 721.138562][ T8166] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 722.486116][ T8166] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 722.509671][ T8166] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 722.795331][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 724.723403][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.815952][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 724.874038][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 724.909203][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.936090][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.472652][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 725.506410][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.910845][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.918118][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.802741][ T8428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.676'. [ 726.812159][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.676'. [ 727.693483][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 727.702088][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 727.710780][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 727.731231][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.738331][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.746766][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 727.755784][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 727.765263][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 727.777272][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 727.794808][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 727.805837][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 727.815055][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 727.878354][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 727.921625][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 727.956249][ T8166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.000084][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 728.231737][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 728.240295][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 729.208260][ T8441] loop8: detected capacity change from 0 to 512 [ 732.904664][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.671'. [ 734.029256][ T8480] netlink: 'syz.6.687': attribute type 10 has an invalid length. [ 734.037428][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.6.687'. [ 734.304999][ T6488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 734.473192][ T6488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 734.486186][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.251027][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.689'. [ 737.188225][ T8499] siw: device registration error -23 [ 737.686887][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.692'. [ 738.490098][ T8519] loop6: detected capacity change from 0 to 164 [ 738.673537][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.6.693'. [ 741.406891][ T8543] kAFS: unable to lookup cell '/,' [ 743.269182][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 743.292750][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 743.368266][ T8166] device veth0_vlan entered promiscuous mode [ 743.432255][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 743.442015][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 743.481287][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 743.551731][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 743.940068][ T8553] netlink: 'syz.8.700': attribute type 10 has an invalid length. [ 743.949350][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.8.700'. [ 744.030449][ T8166] device veth1_vlan entered promiscuous mode [ 744.188295][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 744.208396][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 744.291970][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 744.300792][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 744.334072][ T8166] device veth0_macvtap entered promiscuous mode [ 744.353225][ T8166] device veth1_macvtap entered promiscuous mode [ 744.362345][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 744.370932][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 744.388189][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.429877][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.448689][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.501174][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.511626][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.522337][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.532575][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.543384][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.554863][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.565737][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.582179][ T8558] loop6: detected capacity change from 0 to 512 [ 744.589532][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.621717][ T8558] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 744.651174][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.731940][ T8558] EXT4-fs (loop6): 1 truncate cleaned up [ 744.737758][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.750259][ T8558] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 744.786428][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.802679][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.815554][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.843118][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.897765][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.930772][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 745.061951][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 745.070837][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 745.212114][ T5921] EXT4-fs (loop6): unmounting filesystem. [ 745.312978][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 745.344310][ T8166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.376522][ T8166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.390876][ T8565] loop8: detected capacity change from 0 to 512 [ 745.421282][ T8166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.430039][ T8166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.493086][ T8565] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 745.573527][ T8565] EXT4-fs (loop8): 1 truncate cleaned up [ 745.579202][ T8565] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 746.450268][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.703'. [ 746.653402][ T8577] loop6: detected capacity change from 0 to 64 [ 746.685959][ T8577] hfs: get root inode failed [ 746.869845][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 748.023914][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.034954][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.381486][ T8591] Illegal XDP return value 953225200 on prog (id 39) dev N/A, expect packet loss! [ 749.284302][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.292242][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.300058][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 749.307497][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.696394][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.7.706'. [ 751.080290][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 751.095306][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 751.103887][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 751.113027][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 751.208553][ T4286] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 751.705398][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 751.861822][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 751.872628][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 752.174269][ T4441] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.673598][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.680447][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.766982][ T8586] lo speed is unknown, defaulting to 1000 [ 752.775435][ T8620] netlink: 'syz.6.710': attribute type 10 has an invalid length. [ 752.783752][ T8620] netlink: 40 bytes leftover after parsing attributes in process `syz.6.710'. [ 754.013768][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 754.051135][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 754.175764][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.712'. [ 754.426833][ T4441] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.465729][ T8612] lo speed is unknown, defaulting to 1000 [ 756.678712][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 756.687061][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 756.936745][ T4441] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.134828][ T4441] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.401556][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.719'. [ 759.053168][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 759.059299][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 759.198298][ T8586] chnl_net:caif_netlink_parms(): no params data found [ 759.976970][ T8612] chnl_net:caif_netlink_parms(): no params data found [ 760.068211][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.091332][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.109781][ T8586] device bridge_slave_0 entered promiscuous mode [ 760.179292][ T8688] netlink: 'syz.7.722': attribute type 10 has an invalid length. [ 760.187397][ T8688] netlink: 40 bytes leftover after parsing attributes in process `syz.7.722'. [ 761.015271][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.031747][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.065426][ T8586] device bridge_slave_1 entered promiscuous mode [ 761.161112][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 761.662930][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.724'. [ 761.725224][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.765846][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.898461][ T8586] team0: Port device team_slave_0 added [ 761.913440][ T8586] team0: Port device team_slave_1 added [ 761.919450][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.931313][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.961141][ T8612] device bridge_slave_0 entered promiscuous mode [ 762.116751][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.130811][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.150725][ T8612] device bridge_slave_1 entered promiscuous mode [ 762.733880][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.726'. [ 764.264447][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.516386][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.645682][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.326823][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.531245][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.651391][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.772127][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.804065][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.881377][ T4751] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 765.923697][ T8586] device hsr_slave_0 entered promiscuous mode [ 765.938255][ T8586] device hsr_slave_1 entered promiscuous mode [ 765.947180][ T8586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.965299][ T8586] Cannot create hsr debugfs directory [ 766.008600][ T8612] team0: Port device team_slave_0 added [ 766.057033][ T8612] team0: Port device team_slave_1 added [ 766.606418][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.618338][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.116980][ T8753] lo speed is unknown, defaulting to 1000 [ 767.275420][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.299082][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.496176][ T8612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.568130][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.576386][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.603864][ T8612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.654298][ T4751] usb 9-1: unable to get BOS descriptor or descriptor too short [ 768.774141][ T4751] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 768.791137][ T4751] usb 9-1: can't read configurations, error -71 [ 768.826328][ T8612] device hsr_slave_0 entered promiscuous mode [ 768.848947][ T8612] device hsr_slave_1 entered promiscuous mode [ 768.866099][ T8612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.896061][ T8612] Cannot create hsr debugfs directory [ 768.940374][ T4441] device hsr_slave_0 left promiscuous mode [ 768.964575][ T4441] device hsr_slave_1 left promiscuous mode [ 768.990833][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.024382][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.046333][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.159520][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.384955][ T4441] device bridge_slave_1 left promiscuous mode [ 769.580572][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.611283][ T4441] device bridge_slave_0 left promiscuous mode [ 769.617532][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.727737][ T4441] device veth1_macvtap left promiscuous mode [ 769.736072][ T4441] device veth0_macvtap left promiscuous mode [ 769.746867][ T4441] device veth1_vlan left promiscuous mode [ 770.547686][ T4441] device veth0_vlan left promiscuous mode [ 772.224834][ T4441] team0 (unregistering): Port device team_slave_1 removed [ 772.276461][ T4441] team0 (unregistering): Port device team_slave_0 removed [ 772.326932][ T4441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.382196][ T4441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.721608][ T4441] bond0 (unregistering): Released all slaves [ 772.816875][ T8769] netlink: 'syz.8.734': attribute type 10 has an invalid length. [ 772.829251][ T8769] netlink: 40 bytes leftover after parsing attributes in process `syz.8.734'. [ 772.910389][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.736'. [ 773.167626][ T8793] loop8: detected capacity change from 0 to 4096 [ 773.197526][ T8793] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 774.232968][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 775.859840][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.737'. [ 778.038531][ T8844] lo speed is unknown, defaulting to 1000 [ 779.866960][ T8612] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.641523][ T8612] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.761469][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.751'. [ 781.929431][ T8612] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.240568][ T8612] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.170775][ T8883] netlink: 'syz.8.747': attribute type 10 has an invalid length. [ 783.178828][ T8883] netlink: 40 bytes leftover after parsing attributes in process `syz.8.747'. [ 783.211436][ T8586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 783.308753][ T8586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 783.375544][ T8586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 783.543555][ T8612] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 783.578465][ T8586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 783.652148][ T8612] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 783.689439][ T8612] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 783.809887][ T8612] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 786.378666][ T4441] device hsr_slave_0 left promiscuous mode [ 786.402835][ T8933] kAFS: unable to lookup cell '/,' [ 787.303572][ T4441] device hsr_slave_1 left promiscuous mode [ 787.324464][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.340396][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.373038][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.380545][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.389836][ T4441] device bridge_slave_1 left promiscuous mode [ 787.404001][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.428037][ T4441] device bridge_slave_0 left promiscuous mode [ 787.434685][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.494280][ T4441] device veth1_macvtap left promiscuous mode [ 787.510596][ T4441] device veth0_macvtap left promiscuous mode [ 787.523235][ T4441] device veth1_vlan left promiscuous mode [ 787.531705][ T4441] device veth0_vlan left promiscuous mode [ 789.200987][ T4441] team0 (unregistering): Port device team_slave_1 removed [ 789.276604][ T4441] team0 (unregistering): Port device team_slave_0 removed [ 789.326197][ T4441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.368675][ T4441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.727473][ T4441] bond0 (unregistering): Released all slaves [ 789.927830][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.036772][ T8954] netlink: 'syz.7.770': attribute type 10 has an invalid length. [ 790.044586][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.7.770'. [ 790.058433][ T8586] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.101355][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 790.109739][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 790.160872][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.196761][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 790.207532][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 790.232713][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.239843][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.262307][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 790.278525][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 790.311822][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.318980][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.368630][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.393992][ T8961] loop8: detected capacity change from 0 to 256 [ 790.413685][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 790.422842][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 790.443333][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 790.455012][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 790.602705][ T8947] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 791.285654][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 791.465985][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.7.772'. [ 791.519539][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 791.530943][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 792.074097][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 792.083110][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 792.092483][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 792.103546][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.110652][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.119031][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 792.127828][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 792.192225][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.199388][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.213631][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 792.223408][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 792.232427][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 792.247075][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 792.256642][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 792.270278][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 792.317573][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 792.334412][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 792.347905][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 792.360276][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 792.378835][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 792.413451][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 792.578897][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 792.587570][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 792.618069][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 792.651817][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 792.750479][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 792.769056][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 792.844532][ T8586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 793.108691][ T8996] overlayfs: failed to clone upperpath [ 793.600551][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 793.611755][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 793.660310][ T8612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.759158][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 793.768330][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 793.812748][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.877368][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 793.902202][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 793.983731][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 794.002295][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 794.030137][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 794.052367][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 794.062493][ T8586] device veth0_vlan entered promiscuous mode [ 794.097571][ T8586] device veth1_vlan entered promiscuous mode [ 794.174706][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 794.194194][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 794.207329][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 794.232168][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 794.273089][ T8586] device veth0_macvtap entered promiscuous mode [ 794.289528][ T8586] device veth1_macvtap entered promiscuous mode [ 794.337505][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.368903][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.389325][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.444610][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.471441][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.501704][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.161378][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.189029][ T9037] kAFS: unable to lookup cell '/,' [ 796.289027][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 796.353516][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 796.460535][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 796.531370][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 796.603981][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.691165][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.701470][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.717598][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.731070][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.749215][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.761414][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.784359][ T8586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.797817][ T8586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.816550][ T8586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.858328][ T8586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.935671][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 796.944571][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 797.162828][ T9042] loop8: detected capacity change from 0 to 2048 [ 797.235786][ T9042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 797.645229][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 797.654527][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 797.709943][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 797.722125][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 797.748442][ T8612] device veth0_vlan entered promiscuous mode [ 797.758778][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.880440][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.898687][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 797.908001][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 797.919693][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 798.001840][ T8612] device veth1_vlan entered promiscuous mode [ 798.020374][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.042361][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.072242][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 798.099918][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 798.175679][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 798.270438][ T9047] loop8: detected capacity change from 0 to 512 [ 798.304877][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 798.348648][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 798.410667][ T8612] device veth0_macvtap entered promiscuous mode [ 798.429412][ T9047] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 798.474326][ T8612] device veth1_macvtap entered promiscuous mode [ 798.591305][ T9047] EXT4-fs (loop8): 1 truncate cleaned up [ 798.626994][ T9047] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 798.683008][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.793850][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.855805][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.961133][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.005787][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.017252][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.027266][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.037890][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.049753][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.168047][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 799.537653][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 799.920107][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 799.930796][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 799.982496][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 800.017109][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.6.774'. [ 800.066975][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.271692][ T9064] loop8: detected capacity change from 0 to 40427 [ 800.279859][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.289787][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.304018][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.330246][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.344636][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.355478][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.367654][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.383111][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.392794][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 800.424634][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 800.448895][ T9064] F2FS-fs (loop8): Found nat_bits in checkpoint [ 800.487337][ T9064] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 800.509169][ T8612] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.547117][ T8612] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.565936][ T9072] overlayfs: failed to clone upperpath [ 800.597307][ T8612] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.795140][ T8612] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.091659][ T9078] CIFS mount error: No usable UNC path provided in device string! [ 801.091659][ T9078] [ 801.101758][ T9078] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 801.323837][ T6318] syz-executor: attempt to access beyond end of device [ 801.323837][ T6318] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 801.580761][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.631131][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.746013][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 802.766208][ T9092] lo speed is unknown, defaulting to 1000 [ 802.841299][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.890342][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.178420][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 803.623060][ T9100] loop8: detected capacity change from 0 to 2048 [ 803.639670][ T9100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 805.525281][ T9109] lo speed is unknown, defaulting to 1000 [ 809.018567][ T9122] loop9: detected capacity change from 0 to 512 [ 809.114471][ T9122] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 809.212781][ T9132] overlayfs: failed to clone upperpath [ 809.340418][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.8.788'. [ 810.172195][ T9122] EXT4-fs (loop9): 1 truncate cleaned up [ 810.178027][ T9122] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 810.422375][ T8612] EXT4-fs (loop9): unmounting filesystem. [ 810.433515][ T9139] loop8: detected capacity change from 0 to 512 [ 810.448561][ T9139] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 810.525290][ T9139] EXT4-fs (loop8): 1 truncate cleaned up [ 810.530991][ T9139] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 810.640314][ T9145] overlayfs: failed to clone upperpath [ 810.754452][ T6318] EXT4-fs (loop8): unmounting filesystem. [ 811.178583][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.8.793'. [ 814.329347][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.335838][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.461151][ T4319] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 814.596843][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.9.797'. [ 816.088609][ T9184] lo speed is unknown, defaulting to 1000 [ 816.143311][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.151975][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.124160][ T9188] loop9: detected capacity change from 0 to 1024 [ 818.929451][ T9207] loop9: detected capacity change from 0 to 2048 [ 818.982954][ T9207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 819.455930][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 819.493762][ T4319] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 819.519679][ T4319] usb 1-1: can't read configurations, error -71 [ 819.605128][ T9209] overlayfs: failed to clone upperpath [ 820.553688][ T9218] overlayfs: failed to clone upperpath [ 820.618050][ T9220] loop9: detected capacity change from 0 to 512 [ 821.950761][ T9220] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 821.963440][ T9214] netlink: 'syz.0.802': attribute type 10 has an invalid length. [ 821.981732][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.802'. [ 822.235081][ T9214] batman_adv: batadv0: Adding interface: vlan1 [ 822.265524][ T9220] EXT4-fs (loop9): 1 truncate cleaned up [ 822.277252][ T9214] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.344234][ T9220] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 822.969553][ T9214] batman_adv: batadv0: Interface activated: vlan1 [ 822.985746][ T9232] lo speed is unknown, defaulting to 1000 [ 823.199678][ T8612] EXT4-fs (loop9): unmounting filesystem. [ 823.448128][ T9240] loop0: detected capacity change from 0 to 4096 [ 823.818521][ T9240] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 823.853591][ T9241] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 824.183363][ T9246] loop9: detected capacity change from 0 to 512 [ 824.216591][ T9246] FAT-fs (loop9): IO charset utfѾ¹Éh$Û‚‰œ#wî•w9Á‹C= Yæ’³t ¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found [ 825.816807][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.800'. [ 827.654545][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.9.821'. [ 828.452276][ T9278] netlink: 'syz.8.819': attribute type 10 has an invalid length. [ 828.460235][ T9278] netlink: 40 bytes leftover after parsing attributes in process `syz.8.819'. [ 828.703182][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 829.662908][ T9305] loop9: detected capacity change from 0 to 4096 [ 830.138375][ T9296] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 830.161791][ T9307] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 834.664217][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 835.664135][ T9348] netlink: 'syz.8.834': attribute type 4 has an invalid length. [ 835.965713][ T9344] netlink: 'syz.8.834': attribute type 1 has an invalid length. [ 835.998572][ T9344] netlink: 'syz.8.834': attribute type 2 has an invalid length. [ 836.025913][ T9351] netlink: 165 bytes leftover after parsing attributes in process `syz.8.834'. [ 836.631051][ T4277] Bluetooth: hci3: command 0x201b tx timeout [ 836.647081][ T9350] netlink: 'syz.8.834': attribute type 4 has an invalid length. [ 840.878677][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.840'. [ 840.901227][ T22] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 841.222853][ T22] usb 10-1: Using ep0 maxpacket: 16 [ 841.279898][ T22] usb 10-1: config 0 has an invalid interface number: 68 but max is 0 [ 841.362094][ T22] usb 10-1: config 0 has no interface number 0 [ 841.413359][ T22] usb 10-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.518541][ T22] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 841.619248][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.627858][ T22] usb 10-1: Product: syz [ 841.632716][ T22] usb 10-1: Manufacturer: syz [ 841.637441][ T22] usb 10-1: SerialNumber: syz [ 841.645124][ T22] usb 10-1: config 0 descriptor?? [ 841.659088][ T22] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 841.881499][ T4603] usb 10-1: Failed to submit usb control message: -71 [ 841.889126][ T4753] usb 10-1: USB disconnect, device number 2 [ 841.909327][ T4603] usb 10-1: unable to send the bmi data to the device: -71 [ 841.927326][ T4603] usb 10-1: unable to get target info from device [ 841.934058][ T4603] usb 10-1: could not get target info (-71) [ 841.940597][ T4603] usb 10-1: could not probe fw (-71) [ 842.898916][ T9435] 9pnet_fd: p9_fd_create_unix (9435): problem connecting socket: éq‰Y’3aK: -111 [ 843.584988][ T9431] 9pnet_fd: Insufficient options for proto=fd [ 843.664201][ T9427] loop0: detected capacity change from 0 to 4096 [ 843.680098][ T9427] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 843.730090][ T9427] ntfs: (device loop0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 843.775507][ T9442] loop9: detected capacity change from 0 to 512 [ 843.795658][ T9442] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 843.811371][ T9427] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. [ 843.887363][ T9442] EXT4-fs (loop9): 1 truncate cleaned up [ 843.893185][ T9442] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 844.168628][ T9455] x_tables: duplicate underflow at hook 4 [ 846.304962][ T8612] EXT4-fs (loop9): unmounting filesystem. [ 848.144327][ T48] Bluetooth: hci2: Malformed Event: 0x13 [ 849.184618][ T9485] 9pnet_fd: Insufficient options for proto=fd [ 850.197298][ T48] Bluetooth: hci5: command 0x0405 tx timeout [ 850.234785][ T4277] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 850.335298][ T9494] 9pnet_fd: p9_fd_create_unix (9494): problem connecting socket: éq‰Y’3aK: -111 [ 851.746705][ T9500] overlayfs: failed to resolve './file2': -2 [ 855.610706][ T9523] Bluetooth: MGMT ver 1.22 [ 857.095150][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.9.866'. [ 859.060263][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.6.879'. [ 859.201893][ T9555] loop9: detected capacity change from 0 to 512 [ 860.222972][ T9555] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 860.435607][ T9555] EXT4-fs error (device loop9): ext4_init_orphan_info:621: comm syz.9.870: orphan file block 0: bad magic [ 860.535052][ T9555] EXT4-fs (loop9): mount failed [ 860.648688][ T9565] 9pnet_fd: Insufficient options for proto=fd [ 862.584445][ T9572] overlayfs: failed to resolve './file2': -2 [ 862.984828][ T9581] netlink: 40 bytes leftover after parsing attributes in process `syz.7.877'. [ 862.994443][ T9581] netlink: 40 bytes leftover after parsing attributes in process `syz.7.877'. [ 863.001419][ T4277] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 866.483360][ T9606] loop9: detected capacity change from 0 to 512 [ 867.391422][ T9606] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 867.490549][ T9606] EXT4-fs (loop9): 1 truncate cleaned up [ 867.496602][ T9606] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 867.606949][ T8612] EXT4-fs (loop9): unmounting filesystem. [ 867.661146][ T9615] 9pnet_fd: Insufficient options for proto=fd [ 867.906645][ T9621] loop8: detected capacity change from 0 to 4096 [ 868.592250][ T9622] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 868.773084][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.7.881'. [ 871.974145][ T9641] overlayfs: failed to clone upperpath [ 872.041900][ T9644] overlayfs: failed to resolve './file2': -2 [ 872.339494][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.892'. [ 873.301557][ T9654] overlayfs: failed to clone upperpath [ 873.809939][ T9661] netlink: 'syz.8.897': attribute type 10 has an invalid length. [ 873.818432][ T9661] netlink: 40 bytes leftover after parsing attributes in process `syz.8.897'. [ 875.443490][ T9667] can: request_module (can-proto-4) failed. [ 875.543023][ T4277] ------------[ cut here ]------------ [ 875.549141][ T4277] WARNING: CPU: 1 PID: 4277 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 875.562402][ T4277] Modules linked in: [ 875.566351][ T4277] CPU: 1 PID: 4277 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 875.574053][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 875.584179][ T4277] Workqueue: hci5 hci_conn_timeout [ 875.589338][ T4277] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 875.592365][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.595136][ T4277] Code: 1f 8e e8 04 5a 9f f8 48 8b 35 d5 c6 eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 46 20 f8 e8 11 6e 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 875.621046][ T4277] RSP: 0018:ffffc90003f57c08 EFLAGS: 00010293 [ 875.621865][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.627158][ T4277] RAX: ffffffff8934059f RBX: ffff8880554a8330 RCX: ffff88807cfd3b80 [ 875.641502][ T4277] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 875.649499][ T4277] RBP: 00000000ffffffff R08: ffff8880554a8013 R09: 1ffff1100aa95002 [ 875.657552][ T4277] R10: dffffc0000000000 R11: ffffed100aa95003 R12: dffffc0000000000 [ 875.665606][ T4277] R13: dffffc0000000000 R14: ffff8880554a8000 R15: ffff8880554a8010 [ 875.673662][ T4277] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 875.682665][ T4277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.689279][ T4277] CR2: 00007f0a2ffe6ad8 CR3: 000000002a28f000 CR4: 00000000003506e0 [ 875.697344][ T4277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 875.705381][ T4277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 875.713436][ T4277] Call Trace: [ 875.716772][ T4277] [ 875.719743][ T4277] ? process_one_work+0x7b0/0x1160 [ 875.724957][ T4277] process_one_work+0x8a2/0x1160 [ 875.729966][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 875.735683][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 875.740748][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 875.746392][ T4277] ? kthread_data+0x4b/0xc0 [ 875.750950][ T4277] worker_thread+0xaa2/0x1270 [ 875.755741][ T4277] kthread+0x29d/0x330 [ 875.759841][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 875.764959][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 875.769603][ T4277] ret_from_fork+0x1f/0x30 [ 875.774141][ T4277] [ 875.777203][ T4277] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 875.784521][ T4277] CPU: 1 PID: 4277 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 875.792099][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 875.802182][ T4277] Workqueue: hci5 hci_conn_timeout [ 875.807336][ T4277] Call Trace: [ 875.810637][ T4277] [ 875.813589][ T4277] dump_stack_lvl+0x188/0x24e [ 875.818298][ T4277] ? memcpy+0x3c/0x60 [ 875.822307][ T4277] ? show_regs_print_info+0x12/0x12 [ 875.827533][ T4277] ? load_image+0x400/0x400 [ 875.832066][ T4277] panic+0x2e5/0x730 [ 875.836003][ T4277] ? bpf_jit_dump+0xd0/0xd0 [ 875.840529][ T4277] ? ret_from_fork+0x1f/0x30 [ 875.845170][ T4277] __warn+0x2f8/0x4f0 [ 875.849175][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 875.854230][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 875.859281][ T4277] report_bug+0x2ba/0x4f0 [ 875.863659][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 875.868705][ T4277] handle_bug+0x3a/0x70 [ 875.872879][ T4277] exc_invalid_op+0x16/0x40 [ 875.877414][ T4277] asm_exc_invalid_op+0x16/0x20 [ 875.882288][ T4277] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 875.887951][ T4277] Code: 1f 8e e8 04 5a 9f f8 48 8b 35 d5 c6 eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 46 20 f8 e8 11 6e 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 875.907628][ T4277] RSP: 0018:ffffc90003f57c08 EFLAGS: 00010293 [ 875.913718][ T4277] RAX: ffffffff8934059f RBX: ffff8880554a8330 RCX: ffff88807cfd3b80 [ 875.921720][ T4277] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 875.929704][ T4277] RBP: 00000000ffffffff R08: ffff8880554a8013 R09: 1ffff1100aa95002 [ 875.937707][ T4277] R10: dffffc0000000000 R11: ffffed100aa95003 R12: dffffc0000000000 [ 875.945693][ T4277] R13: dffffc0000000000 R14: ffff8880554a8000 R15: ffff8880554a8010 [ 875.953691][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 875.958743][ T4277] ? hci_conn_timeout+0x24f/0x450 [ 875.963783][ T4277] ? process_one_work+0x7b0/0x1160 [ 875.968912][ T4277] process_one_work+0x8a2/0x1160 [ 875.973881][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 875.979533][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 875.984589][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 875.990144][ T4277] ? kthread_data+0x4b/0xc0 [ 875.994668][ T4277] worker_thread+0xaa2/0x1270 [ 875.999381][ T4277] kthread+0x29d/0x330 [ 876.003459][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 876.008500][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 876.013117][ T4277] ret_from_fork+0x1f/0x30 [ 876.017567][ T4277] [ 876.021169][ T4277] Kernel Offset: disabled [ 876.025596][ T4277] Rebooting in 86400 seconds..