last executing test programs: 27m37.349672722s ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b707000000000000637c5f00000000000700201ec90000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbe) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 27m32.598492265s ago: executing program 1 (id=13): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) acct(&(0x7f0000000140)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@dontfrag={{0x10}}], 0x10}, 0x40080) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="860000202300"}) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_procfs(0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="1909208750b401956bfe", 0xa}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0x722, 0x1, 0x7, 0x9, 0x2b, 0x0, {0xffff945a, 0x1}, 0x9, 0xf1}}) 27m15.568718228s ago: executing program 32 (id=13): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) acct(&(0x7f0000000140)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@dontfrag={{0x10}}], 0x10}, 0x40080) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="860000202300"}) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_procfs(0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="1909208750b401956bfe", 0xa}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0x722, 0x1, 0x7, 0x9, 0x2b, 0x0, {0xffff945a, 0x1}, 0x9, 0xf1}}) 5m57.32051319s ago: executing program 4 (id=1745): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$eJzsmb+LE0EUx78zu9mLhz+wsbCx8MATvc3uRuWaK06wFIQ7UcvgrcfpJpFkhSQg6B9gaSHY2lhaWFhZ+BfYaqGCYGFKO2FkfuyPbDYhGskVeR/I7Hdn3rw370Hewi4Iglhavn399eXZ1c3diwCOYg0rZv6Hpa/ixKj95xePLjzfuvbyzadXH1rHH78r+mNyj5g9vgPg/baFGMw2EUd2r2VuE42b4Dhv9C0wuFr+Fgp9E4JVEx/3wXDH6PYRI6LQvduO9u4dRKEnB18OgRzq+fjyUMOnDHsAqup0QrDcerc/eNCIorBTFBWRxBlb+lsxrX7qfNscW0iqJwQHcLtg54Gn9fPB4RtdB8OO0ZtYgeu6WUly+Z+2M//WLPmn4hiA+fL/B/FaiZMbiwoKrsuxsASXU1T+ix9WnJF/aCeZOTVMemDe5vuh514udmewgemEY0sfV6Po+hzRnZJCpSLrT7Kzn8v1Jxt22j9qcfNhrdsfbBw0G/vhftgKgvoV75LnXQ5qqhHpcUr/q6r+tJrzX5lg6zAHvUYcd/weEHf89D7QY67j7rxt/1R7uOp/HOtntQ9mnlnpg7IAMz+urlKtW+WWTybmRBAEQRAEQRAEQRAEQRAEUc4ZMOgvYYKZF6JlBDfUG8o/AQAA//8eamKw") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe3}}, './file2\x00'}) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket(0x8, 0x3, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xfffc, 0x4e23, 0x5, 0x0, 0x20, 0x80}, {0x9, 0x3, 0x8, 0x1, 0x9, 0xc8, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x99, 0x4}}, 0xe8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x70002012}) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5m51.457667103s ago: executing program 4 (id=1756): syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000095f3ed3492351a0000e7ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) dup2(0xffffffffffffffff, r1) ioctl$UDMABUF_CREATE(r4, 0x40187542, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xab}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 5m49.318741544s ago: executing program 4 (id=1758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 5m48.830387025s ago: executing program 4 (id=1761): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x9, 0xa0f40) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg(r1, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r6, 0xc6c3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5m43.794487661s ago: executing program 4 (id=1767): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chown(&(0x7f000000b0c0)='./file0\x00', 0x0, 0x0) timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) sendmmsg$inet6(r6, &(0x7f0000000900), 0x0, 0x11) r7 = syz_open_procfs(r0, 0x0) fchdir(r7) syz_read_part_table(0x601, &(0x7f0000000000)="$eJzs1M9rXFUUAODz5veIIaEWBBEMBLoa24W4CDi0odTSTRpKLS7cCYJQN4WAXciEtkuR4kZEiJsKIQbyD+hGwiQQsskqZBmCILhJECFEuDLvTSaJZCFkMCrft3j3vnPvfec+zuUG/2mlqHdSyprROYpUY7zovFI0tUgppcGC5x8+flj0xiPeW5xYipiZunc/4qW5D3rB11+O+OX7wbcGaqfzptHDFOs39xfHNiY2V8u9UNZ7VCJiLiI+2XlR+ctWy9EY4o/zv7Dc/vSnyM9Nu5kfuG8iJr8rxjoPXn3n/VKWHZ/C7Mbw83dH84Mb9dg6TrQ3P3K1cj0i1vqBVm/Sz0W/+1WxmemTHyoVTfmsJM1h75ph6dX/6bNHtS+L22r328s7208Opq8szF5rXdpe6TzPiuK9EZFfX1l+zZXOrjMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA5LLe7o7V+f+v2Z7tvffTmrev1U1N6b70pjeI1i2ZEyrtzw8n/dP3zZtTbH28dpJTSjUjp7t78yNXqajXuzvfztrI89cDXD/Kmdv4dcJHy+j97dPuLx+3fl4pQ48nB9JWF2WutS9srnaMC/1ZrdC7PRkT55OrKBewYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPi3u/XunfGZqXv3IyKrNCKiNPai2x/7NSJSinjtx7cXHq5NTR6v+qN2p14/TOs39xfHNiY2V8sxUy9GfihFpGxyJCqVIrCcP6v/9H/x9/wZAAD//4qTcdA=") 5m42.712071082s ago: executing program 4 (id=1769): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5m26.359633489s ago: executing program 33 (id=1769): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 4m20.158657398s ago: executing program 3 (id=1873): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000003ffffffffffffe8000000040000430000195cdfc19558098f7e29ccf8e7c90ce594b929c90c438aa7402798751413e7df1eb03f4b4aeb8811dfdfc53836055bbadc4575ec5559fc41dbcd", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000bc0)={0x7d, "9984a69e26edfdb7000300000000000000ff03ba91f6a27a0603c6de995ae34b81fb4dec3d44ad144088e68b88dbaea386f1283b716c35f680777326309719e45e5b36835640fdd1dd6c7876adcaa1a9beb8d03de6dfcfdaecb9d67597e890bc9dd646e82aa45e00"}) preadv(r1, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x51, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5c08cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891f648bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) connect$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r5, 0x88, 0x1, &(0x7f0000000080), 0x4) 4m18.662038668s ago: executing program 3 (id=1875): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x2, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00'], 0x30}}, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r7, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x28}}], 0x1, 0x10000000, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4m5.62194896s ago: executing program 3 (id=1887): unshare(0x2c020400) 4m5.355050485s ago: executing program 3 (id=1890): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x1, 0x0}, 0x8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r0}, 0x4) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) close(r3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, r1, 0x1d, 0x2000, 0x0, @value=r2}, 0x20) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000002", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x7) 4m3.334301004s ago: executing program 3 (id=1892): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB], 0x3, 0x6ae, &(0x7f0000000e40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x7, 0x0, 0x7, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000ff5000/0x9000)=nil, 0x9000) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) fsopen(&(0x7f0000000100)='binder\x00', 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r5, &(0x7f00000045c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x80) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r9, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) 4m1.689322975s ago: executing program 3 (id=1894): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00002b4000/0x1000)=nil], 0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="8be784923875240482ec7379b8172e5c1e53055c40fc337edb9ea527ebb1782e4079cdd07a0d037f22fc7eb32972f5944d2deddf9ffc0262e5f0c368373a54021ec9505baa10c2ecee1dc09c9a6d2315ecf72d3f4294516ea15c49ac577d6782bef82a2dcecf65b38b578d7b88e3cfda12222fe6f77c665e754cb1a7c26c89169871970af6e23b5ec68d9d52229f2972b7a9f158da6f8e19e5a415c60105b57a7447c2bcb02d2b1489635cd5ddf6fb81f6500540136422c34d835abe1eba9406825d32439ea56e1ae5b02410e217c58668a1b71cdc0d43a467e0479c70b7eb3eee70ba51321b", 0xe6}, {&(0x7f0000000500)}, {&(0x7f0000000580)="60fd781d29b19a8acab4d4b69965378c60180ece3eb1a0cbeee9cd7eb41577e8b641ec5f8e72c2132dad84798c0c600a47cf3a55b89e6f0b2b3ab407ca6a76216b705d36345801b8147783e68cea26c1021e4d06e8c0abf147d3cd0f59", 0x5d}, {&(0x7f0000000700)="1a034996b5eeb3c07ed3e9cc4d78bb1b594298991e16e6e4abd96f370a452e6874ed3310bf97a6e482568b85b170bbc85c5fad48af4aad94b14ea5f48fbd87c88b76d72ab15cc1ec8182f79e17e4008f6f53e9a49a", 0x55}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="24f2fa00000000000100cc497d640200e70f99892dfb4490c292d4f7227a7b10388049", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x68, 0x4004015}}], 0x2, 0x20040800) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r4, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r5 = userfaultfd(0x801) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x6, 0x3, 0x200}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) r9 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) 3m43.065355067s ago: executing program 34 (id=1894): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00002b4000/0x1000)=nil], 0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="8be784923875240482ec7379b8172e5c1e53055c40fc337edb9ea527ebb1782e4079cdd07a0d037f22fc7eb32972f5944d2deddf9ffc0262e5f0c368373a54021ec9505baa10c2ecee1dc09c9a6d2315ecf72d3f4294516ea15c49ac577d6782bef82a2dcecf65b38b578d7b88e3cfda12222fe6f77c665e754cb1a7c26c89169871970af6e23b5ec68d9d52229f2972b7a9f158da6f8e19e5a415c60105b57a7447c2bcb02d2b1489635cd5ddf6fb81f6500540136422c34d835abe1eba9406825d32439ea56e1ae5b02410e217c58668a1b71cdc0d43a467e0479c70b7eb3eee70ba51321b", 0xe6}, {&(0x7f0000000500)}, {&(0x7f0000000580)="60fd781d29b19a8acab4d4b69965378c60180ece3eb1a0cbeee9cd7eb41577e8b641ec5f8e72c2132dad84798c0c600a47cf3a55b89e6f0b2b3ab407ca6a76216b705d36345801b8147783e68cea26c1021e4d06e8c0abf147d3cd0f59", 0x5d}, {&(0x7f0000000700)="1a034996b5eeb3c07ed3e9cc4d78bb1b594298991e16e6e4abd96f370a452e6874ed3310bf97a6e482568b85b170bbc85c5fad48af4aad94b14ea5f48fbd87c88b76d72ab15cc1ec8182f79e17e4008f6f53e9a49a", 0x55}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="24f2fa00000000000100cc497d640200e70f99892dfb4490c292d4f7227a7b10388049", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x68, 0x4004015}}], 0x2, 0x20040800) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r4, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r5 = userfaultfd(0x801) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x6, 0x3, 0x200}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) r9 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) 1m15.418087975s ago: executing program 6 (id=2080): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x40, &(0x7f00000003c0)={[{@errors_remount}]}, 0x1, 0x58a, &(0x7f0000001380)="$eJzs3U9oHPUeAPDvzGZf/+W99MF78J70UFSoULpJ+kerp/QqFgo9CF40bLahZJMN2USbEDC9F7EHUeml3vTgUfHgQbx49OpF8SwUGxSaHnRl9k+SJpu4iU22Zj8fmN35zW9mv7+Z2e/s/oYZJoCedTJ7SSP+HxFXkoiBdXV90aw82ZhvZXmx+HB5sZhErXb15ySSiHiwvFhszZ80349FxFJE/C8ivs5HnE43x63OL0yMlsulmWZ5cHZyerA6v3Dm+uToeGm8NHXuhRcvXDx/Yfjs8PrFHtbWl/I7W9dbP9x+59a3L9+9/cmnJ5aK740mMRL9zbr16/E4NbZJPkY2TD+/F8G6KOl2A9iVXDPPs1T6bwxErpn17dQG9rVpwB6rHYqo7VLfbhcEnhDJrvMf+Htr/Q/I+r+tYT//f9y71OiAZHFXmkOjpq9xbiIO1/smR39JHumZZP3N4/vZUA6kpZsRMdTXt/n7nzS/f7s39DgayJ766lJjR23e/+nq8SfaHH/6W+dO/6LW8W9l0/FvLX5ui+PflQ5j/Pbajx9uGf9mxFNt4yer8ZM28dOIeKPD+Hde/eLiVnW1jyJORfv4Lcn254cHr10vl4Yar21jfHnqxEvbrf/RLeI3ztkerv/MtNv+0x2u/+fffPb00jbxn3tm+/3fbvsfiYh3O4z/7wcfv7JV3b2byf1aLesCvJ0VO97/2bS7HcZ/fuTk9x3OCgAAAAAAAAAA7EBav5YtSQur42laKDTu4f1PHE3Llers6WuVuamxxjVvxyOftq60GmiUk6w83Lwet1U+2yyPHInIyudyzYC5I/X6QrFSHuvyugMAAAAAAAAAAAAAAAAAAMCT4tiG+/9/zdXv/9/4uGrgoNr6kd/AQbeW//mutgPYf4/+/iddawew//z/h55Vk//Qu+Q/9C75D71L/kPvkv/Qu+Q/9C75DwAAAAAAAAAAAAAAAAAAAAAAAAAAe+LK5cvZUHu4vFjMymN983MTlTfPjJWqE4XJuWKhWJmZLoxXKuPlUqFYmfyzz0sqlemhmJq7MThbqs4OVucXXp+szE21nila8oBhAAAAAAAAAAAAAAAAAAAA2Ky/PiRpISLS+niaFgoR/4yI45FPrl0vl4Yi4l8R8V0ufygrD3e70QAAAAAAAAAAAAAAAAAAAHDAVOcXJkbL5dJMj4z07WTmiFh6vM3IPnHHS+Wb++pJ2YZGemGkywcmAAAAAAAAAAAAAAAAAADoQWs3/Xa6xO972yAAAAAAAAAAAAAAAAAAAADoSelPSURkw6mBZ/s31v4jWcnV3yPirTtX378xOjs7M5xNv786ffaD5vSz3Wg/0KlWnrbyGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhTnV+YGC2XSzN7ONLtdQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjT8CAAD//7+01Qg=") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x66, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xf, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000240)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r6, &(0x7f0000000200), 0x0, 0x4004884, 0x0, 0x0) pwritev2(r5, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m12.343518014s ago: executing program 6 (id=2083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e657720646566617500002074727573746564aaaf7bb320303030303030303030303030303030303337323400e96d72917316b228108c56176cf9bf2cd0137293489cbd47963334da4d7268403a5c7c49b0e315ac98cb6e962ded0637c5be0f0b65160bf5d78fcfb63827a87f8acbe3dae71133e40d9eb3ce56a63648c255866523fc157388ba2c16b495126268d7afdb0eb74620769e1601"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000084) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xffffffff, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x1ff, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r8, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r7, &(0x7f00000004c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r11, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x64, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 1m9.526083289s ago: executing program 6 (id=2085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x2000a210}) epoll_wait(r4, &(0x7f0000001e40)=[{}], 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) 1m6.959823839s ago: executing program 6 (id=2086): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r0, 0x3af001) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) pread64(r2, &(0x7f0000000180), 0x0, 0x7fff) r6 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x81, 0x2, 0x6, 0x1}]}) sched_setscheduler(r6, 0x2, &(0x7f00000002c0)=0x6) syz_open_procfs(r6, &(0x7f00000000c0)='uid_map\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0x104, 0x0) 1m3.024047956s ago: executing program 6 (id=2093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0x4c5, 0x0, 0x2, 0x4, 0x80000001, 0xf, 0x0, 0xbe, 0xe39, 0x0, 0x532, 0x3, 0xb, 0xa, 0x26, {0x2001, 0x3}, 0x0, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = mq_open(&(0x7f0000000400)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x96, &(0x7f0000000440)={0x7, 0x76c, 0x54, 0x3}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f00000004c0)=""/196, 0xfffffffffffffefd, 0xffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, r10, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) sched_setaffinity(0x0, 0x0, 0x0) getpid() 57.363158166s ago: executing program 6 (id=2100): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc000700000028"], 0x38}}, 0x48c0) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) io_uring_setup(0x66, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000300)={0xf, 0x1, 'client1\x00', 0x80000004, "48474196d75985e1", "b3dd5b714cee2c979551b28f37a4819119dc09b431e422253d95f73c29e7ca5f", 0x5, 0x5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400004c}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000100001042bbd7000000000000000ff", @ANYBLOB="0000038000000138f31e3d99d5ddde2af77119a4001c00128009000100766c616e000000000c000280040004800400038014000300766c616e300000000000000004000000"], 0x50}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$lock(r1, 0x5, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x4, r4}) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r9, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 40.878692896s ago: executing program 35 (id=2100): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc000700000028"], 0x38}}, 0x48c0) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) io_uring_setup(0x66, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000300)={0xf, 0x1, 'client1\x00', 0x80000004, "48474196d75985e1", "b3dd5b714cee2c979551b28f37a4819119dc09b431e422253d95f73c29e7ca5f", 0x5, 0x5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400004c}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000100001042bbd7000000000000000ff", @ANYBLOB="0000038000000138f31e3d99d5ddde2af77119a4001c00128009000100766c616e000000000c000280040004800400038014000300766c616e300000000000000004000000"], 0x50}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$lock(r1, 0x5, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x4, r4}) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r9, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 19.296698735s ago: executing program 0 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f020}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r7, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000180)=0x4) sendfile(r8, r2, &(0x7f00000000c0)=0x58, 0x5) 18.324772424s ago: executing program 2 (id=2146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x1a0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) 17.053715699s ago: executing program 0 (id=2148): unshare(0x20000400) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x47) cachestat(r0, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) mkdirat(r0, &(0x7f00000001c0)='./file1/file0\x00', 0x4199379e78179dca) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0xc43, &(0x7f00000010c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f003) truncate(&(0x7f0000000180)='./file1\x00', 0x400000f001) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x19) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="7b4c2b0366", 0x5}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r6, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x2) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x7fffffff}) 13.964836319s ago: executing program 0 (id=2149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setrlimit(0xb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x1, 0x42002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) 13.466773289s ago: executing program 5 (id=2150): socket$netlink(0x10, 0x3, 0xf) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r0, 0x409, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="07000000040000002000", @ANYRES32=0x0, @ANYBLOB="7717a70531da391e5d64bb8b5c1029f2b758ce84f40a3ede3f1b6f59b846d659de913be388de4b05ef340df769607b275d7ab305a86167a36b613731e15ef508dabb17551ad092142ca992dcb4337c4ec3b0e8fda225dddb2035735e9dd65be7c495b7889fc3b9"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000200"/28], 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0xa86c, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) llistxattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.647517934s ago: executing program 0 (id=2151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d4, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$dsp(r6, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(0x0, 0xd4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x5442, &(0x7f0000000000)={0x0, 0x2484, 0x200, 0x2, 0x33f}, &(0x7f0000000080), &(0x7f00000000c0)) r8 = io_uring_setup(0x6b, &(0x7f0000000a00)={0x0, 0xefc8, 0x10, 0x1, 0x2ad, 0x0, r7}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.900618998s ago: executing program 0 (id=2152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x2000a210}) epoll_wait(r4, &(0x7f0000001e40)=[{}], 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) 8.26528548s ago: executing program 2 (id=2153): r0 = syz_open_dev$video4linux(&(0x7f00000060c0), 0xa, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}}) r1 = socket(0x10, 0x3, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0x3, 0x1d4, &(0x7f0000000580)="$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") r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r9, 0x6, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905810318"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) 8.25516965s ago: executing program 5 (id=2160): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="29000004ef214c82844e159ed78d39495b720362168b5954e4893e97c58b8ef39c00"/53], 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008002000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$kcm(0x21, 0x2, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x2, @mcast1, 0xba}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000001780)={r8, 0x1000, "007181c598c1e5fbcff5034507372f17f70a4acea93d0996a7a8180c6795893620605aea0acc511f6527de3910a8b5b9e113ef694a3715932e8c6cc31f57b759288ded6f7f8d7ba0982a787ac2a77c80ccdb725640de29f5173c8a470622b6ffbbb2241c41075b5bdddf8c20dbfcf113ae66fb077a23311a3749d05d333dd849d212fac3e0f0d57775599d4d8c166991d79f4d5ea6433df676ce70d3f8c90e7094a0873675b692e44ba8939802b58233b8860fc1bdeabbf0cb8e19b0fb97aa2af9abdd96373cc49609ca7b4cad89ec05190c9500cfd87d2b46c755d033fd28909cd4396c4cf57976a655fef5979090621be416b799ed8b751749e448cf3ba1d6c7b2b35139238ad390514c0cd9eb5573ebb6f81926e93326e104a4fbd616973f4eecd49c8f8ce3696e60f048c525c2e259786324d3c7e1da916e83e6f276d1f6e48ea9de717f56c8da85f17c2cc9cd2bcf3a9a74ebbf705e2447b0a285fa7f7f345185c7fca3c667cf2e6907546f3ee67030bec9bfc37f24a2a7f1fdc1978c2198b1a7fd34941e47f8c97e54de2ae77a627993e6a6a338df98a76245ecdcb06639f4e102e67e46df33e95ff6c2f44bc006490689fee38985d9b88d0d9a4e2450a977ebeedd83effedf8447c28c73e5c13927e2b2ccc4fad29431ac79659920a10c2cb6fac96ac160584c24fd8e11022a74125b6e9e31600888980fbf33b2c874f8c4b604b10662f6cc8555559943900edb31848258a68e80f56159ca6a20522ea64f186442168fcdaed6dd40b971aadc4c84c4c5f1c0d6abf59a97142110421620a4010cdf30e81014c45b1771626be8736f9a4d655bd462760b874b44518cce9c51003336d1ba3f53288cb7dab41276897e1f2e05053a6e0fe83bd19cdda65f47cb1ac99611e2e54c80e001a677506e35871bf13449274cd3658c9dab958410074fe813742144d10a112224ed695d7c42ab4b22e10f735e1bbd30651979f407722b654790593e676566d968098b62d3b6a47f66110e9e2648afe17a0065bcb8d433eac3a3a23b702c317f398fcf2af840598b5d3d0661382fc9201dc69d8197cafb48d0253016acb11b311174b6e680fb078573ef6cf62e85e53651ed436d8abab8c7bcbe1c3c984a70ad065356266c3b3c50e73cc041d59504a7103de20147b085f110bb6a377c01f3902ea4b2725efa375b9bf96ba6005af90c2a531239339a26c1d470ef2f64b3c21760369ac57784946a261d69f79c44f82363ce72f360635d1bafbbe86ea9cf003100f65fbf00d7aaefee9077eb7453cf66d378776d35fcdf658c718b1102d2c4e1b96779c1534aa2c4d4d2e57f6819bbb4a71f6ce891cdc77347c5a877428c85c485d55860643731f5250b0f7ee00e56649a0096adfa845ea1b3fb305596f0c604bfa5e7df1e31681a9066db82d4188e776c153f3563ed215b71db83e694218fc0e312125d88e0d18446b4afb6f0653e28cb60980690f8e7f663f7de6bd5b2cca8c3c5d305a6b19c6b9480b9efd0caf7e9139f74f73299f2361951fe219a22ba013521400c76590cf48f421c73bf1510b2c3e16c276a22b13c0ca15c627385af4ea56de32114641fa9197aff7024c60d8c828189c96bc79df9ad3dac37a6732138ddd5784e40e527230c6f91946343661452103975e0a4d8b7cf1e79880038aee7d735e35fe0a5972ccbe845ed870d590f260bf3485da44bd5fba58d24d390a6728e5b31e3720fedf6794c0016872bc85661627bb7a73052fa8b37edf5ca61ee580a125104e2829f50d6fc227d28fb7d64b05529f7e76e1a7b8fb1aaad8ce63ab364d672bc770f38443d814ee1015252f4da5c061ad0b3461914a0f2161c573ea73157c26bbd34774d08729505b3859447a928828bd9da9b5f0e36bc2a1b02493079e2ca6d388b244f7320b336506442d8c8d3a3d7d772a2dd19c059c824da4622267ac7ed2272a8242b78978ae759bc013ce9db6ddccd2cdb6736b697ba957413e0d9a7f604a81884366e7f82cdab1a3276c0d6bfffc6d638de76a60e9656d395b90483987017ff73b13bc579e2f944d93aea6e17fa07676b9cbb17aaa04a25b946c0d06bccf20f71f2659d2969ccb40a40014f9246cf2a9cb162baa9e6875cc84dc0227c8e5220418b0323624899c7c1d0817f8600c1e82cc1610e254feddd37cb29167c428933ee4e743113c6479be1d2d1bf03893f837f09e5f8916e8717d8c932bc6b5202a86b24241ed32472bbd9a7c804bcf01bd62b4838c72bf67a8954ec9108a1bd41f42bc6eab89142a979b646b9182e5b5ae7962af7064758e02525eadb302bb8a8f6e991c9764a2d63031283bf8058e509690c1b0ae46c3cb4017fc60fee811e7938c05c21258762b17e87b354d1da8ff6de31d6348f19a487ac4f54b6cc4d180bba667bfaea6623a7099776252ceeba21530b140d9e38ff9248ea471d0b837b1ab181e59c2b3c70aed7a73acf893c3369ebbdae9f9d439c8a0591dfb94f8f786ef3360c43f61ded4c9caed987360220670aef5f058b239af7809ff7b4e1602c97edb314074e9632a9fc0442be7274218d5f2f93db9905a36cba293d03b431137735fccb0afc7fbc36de783a45e9649ca4fd34a2111ae83413cbc5ebf8cce63f906bac276bb5f02773de39a91589ef0fd7bd84dd719745777d5cdd8cb9758f3e939e241779d90899abd40082f1f501dffec10b8984df93a16c0b356a452b3e8c5d56717eb11097f2d1fbaba7489ac85bbad847f6194b4089abe2f86a7ec20965b4455252896be07ee7607423f78ea3bfbbe8d426d5c30e4069c930113e134e6163467f84ac978691bb9384d4228be751a7f619b79c33e6d1e4c1b780e2c68ee44bee212c2e216aefb6bd7b51b5784e564fa7d1adb3518d74c1e155b35c1fa61a1fdbbb2b257f6e1cdfd1bb8965cbdc6893038a6e2cb1efe0576343c513293e6631ff5194300402d15776fb2a8c96fb013e14e75e86b4e20718ff2b395dc178b6bce58937c5736282fcd59b476b7fcca827bc2d0d369005dd05aba963c092cb7843c50bf80f845d8d125e2fae4cbdffcfc113a80a0f0a478fb1839e323e5c4704886ae530a75704055d46b2fd6e021b5a63889faa46dc06127b25e83cafe9580950e69f31afaa8dea026228b182ac1d634d4a704958d1c3c0a30d4a505323474cb6a4799d9d1ff172447c4cf09296f957ca70618a6919d43a933a5a93c3a4aa608967533adc249597506c750c51bc5584c27cc455bb47c6f29b0611321e03915910b522cc971974347e58587bdf4ad9c86e2bf0c8c95e7e0064ca18d895e946f61914e8269968229db7ff9d124f4f5da851efaef13174a18dd7e955b47a1c0e6af475202a55a4a12fa3c7d8b27060e2dfc1ac458ec3e80e5a029bcc4f28ccab6495dad1345cccc2aeda0aee68d534b459d77259e7911527ca483c9c33637dd07704bedfb2078fc77e6e2abde41ca2f8ec01bd0df74a908c17d02331abc95541abc60fb00a5f36047af0b5cffdc69ff930c7d4c411c8f5220a47e0eee12712ebb1027261e923616b6e95a48f3b455503460dc12dfd7d30c15d7d79e6921bd12356ae3cee139a010ba5363fe2a32e8b006439d15e6c851dad417a48d7f3cf5b220aca15ce4ec09cc6ad52102909c1c2c24c42e5dbf88fa65adefeaf6a968e2eab3d0eedb09c604fef3a94e99e3b647d3aeeec32cb855a7f39075f6f7f80d9dd33a897721bdc139c63574a533b0b2cc8725d11c622d37be2196211f97b35d1177b01bb7cd76b0d3105ee2bbd25321a04353e671f48fde64bad1a111dcf0192149ae558290789eb94e77f40436729c95e7f0e8beb1c6566ea97df7e9a631ba69559b4d28af4d26bad1288ed6c6a9d2a96fd6867f31de69a65140a269a198f9091173df5d2cdd49526833569768f3b9e26e1acc4aa7c71f36bf11cf134d6ce988c598bb0f3f2d55582351ea330765595362b86df4de634efa11387cb1e7b928d8695504bd9020e171308b0a3a3f959a0ecbf6f543a5f271f845d6abb9d607d2d090e78f0bb82781781199e5a4b9ffd2d878576ad707719b5358a8375ee7c61df0edec4563f6da8a9f0178974d47cd13c2e61f6255cc8d724da8eff5e5c86590ebe2283123492baecef1797bb6a745b7fabdfe92dab45a1c98c326ab84496ba1b61fb4e525046e26508e86519af301e51efbdecd5071b38fd8d21be6996f7e146d8c97484ab16720a081a3aa7574dd47c88751a601819b8bb7a071523b9bb9369d5fa9343382879b35d13ef141402eec345ebefaf4eb95fe9bdf0cc7106aaf2b86f9ee66aa45d8401baea5f46af18f37090785b49bdeb3d65e19a0641d5dc40aad7e1f2969057466bf41c043c9a1c423187b65c250feaca043a1e4f919285206c8b9dc1e2b62382888af2f30e4ad9a6d3314f1c3a1eb900a8d8df961740debacf50de33b29c83121bc1dbc0c25792aaecdf731895b5acf3c6573192d14bc74b2d5f392c0cf4aa8973ea87e10f8866471cd10a6468ed2c226146ce1646260002892be9edd6de47a6f0b8c6c653567ffb38564fe8811ed6a0629f1048d4992f09fb8597555ff0e32ed460e56c11a4a124aab835da3aa67e9155236a2c34228c1febf78a3097388326e9c16833d348ebd6989f1462b38c360ec46077240ce31594035e2b4419b6d8a5f3d03c310fd92f7351387e29d28709c46e989a68f9aacbbe88ca454ae63e9056ea78698773ab7306d6a83f49e5b377f2ab7fff429e5529acd449c4ac2ff2e380f1886f88c620cd23474d37626c5f2817ed79a6e427e51871322dbdff102df30e82def783c78e9573f1fad6be8099d173b32e48a6de3ee91f318230bff297c3c407ce08d535cba46737eccf8e666b1bc90dd154427f700594512b49fb1feb6644a37ae52861e5232e8a0ea2975e4ef8fddb7a3c3bb5cfb85e0a161aa628efc780907a29841c516b6c385d7cbcb127c70808636043c997feb0e2cd3c480fcd616b816dbb2696a87d0bcbcae0b8dbdcd94cb21b2b20776a03073893ee67b3f96e9c16adc590d33d026783c14a004b34efd532148fa6c707bb754b1aac02d4e8fa14cc89d341bf467e4747fee5a663fff64cd1f18d8d402e3fdcdcd13b83810d2d2a4fbf6f1456a144edf1bf3874fbe851cd3de154e18e70128693e533a206cae329d2d7d9ed943fd88902ab8806bdfb6a59ef1ce53958a3cf404ad2ed6c4ed8df3c68d0328440fa801ba6e8de55cedc62c8fe251e9968baec10f2d5aeb14489eda45400c4638d5816d9c5a0478419d9eb0e1d8310fc693fa0f27e69425434e16113beb63aff92477aa53e7e2faf5bd4e28ed7c10cfbcfe49d98cb718988b05bb13bf290456fcb2fdf1a81ed31a4363cf0c2b24f83014c97ab0737b4b8b7962383ca0579e17f77f6653b5d887b6f868999d13b27f59a290347fdec1b16aaf02f63c4361781a04a692c662e81f4e7a953794f3737b507644b66693ed12e7cdee626df0d392560d62c05d77bf134ef0fb81bf28bc7e37cf76c35484c1c03512bd38e459d7a1264babde463bf110e062a108e52c16c40d2975ffe615448f66f444d5254d159a358e5cbaaa5e98a1cd220c5ca8bbc6712d1da6aa754646b940e48b25c53506daee5b936de335e2a371b106ca1db1efbe5eb48a5ca490682a058b10de76dec1406d88bffb391ed5428c3ee05551541065c193d7c66ac276e3d21471f98e95ce09742c6744cd5859bfff0f3cc25bf0c47d3c4e0d1c43045cbe8518f9c81943c9778e5e770c53515d94c17"}, &(0x7f0000000400)=0x1008) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x4000004) 5.644409071s ago: executing program 5 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20048081}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r4, 0x0, 0xff2e) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x639) readv(r5, &(0x7f0000000ac0)=[{&(0x7f00000015c0)=""/147, 0x48}, {0x0, 0x2}], 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000040)={0x1e, 0xc, [0x2, 0xffffffff, 0xfffffeff]}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00', 0x1000000}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 4.469741743s ago: executing program 2 (id=2155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.459282263s ago: executing program 5 (id=2156): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ftruncate(r7, 0x2007ffb) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x102) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0x9, 0x0, 0x9, 0xffffffff, 0x0, 0x4, "0ff8000000000000c5c6ff0717c3a86d", 0x4, 0x2, 0x5, 0xff, 0x0, 0x1, 0xff}) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$eJzs282O0lAYxvGnlMI4jo6fG1cmLnQj6OjGnXMB3oC7yVAJsagRNxAT46V4J9yJNwCJ7lxZ00MhLZZyLJZC+P+SGd5wePq2hEPPWSAAB+uG+e/IkWeqMAy/3Jf0+pWkesUnB6BUoX6HAA6V+6PqMwBQjem5a9YBY0f6/vPz5ST+8yzXD9Pz2qw4kpTIN2zzXx3zeK8uTRL5ZnzIteuXb7P8Q6XzV/6x//FS/nhNzlnkZ9f/6EE6f1XSiaRrkq5LOpUUvdM3Jd3K6N9Z6n/X8vyBTUSfvtYGG32TbxXvH82eN73Af5I16K7Pe3H+afZw4itknPmCRpw/szzfVflnBfPNON+6fB90MsZrBY8L2KiZ+V/cpvPflX6Fy/P/pX2+nj//AeQYDEdvL4LA/ziIbramWDyzqvBM0YyPkPfi6O6YeEY5LaLNiFV3ivKLo4whL/VpKbtobOdKo9vXLrzhlsV81pbf6zSo7CsJwJa0P/U/tAfD0eNe/6Lrd/13Z89fzLfdZl/eXrk7B7Dn0otzAAAAAAAAAAAAAACwj25LulMkaPsDPwAAAAA74//+eMiT9PdQTvuTLV4qAAAAAAAAAAAAAAAAAAAAsPf+BAAA//8xiEDA") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000b40)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d650e00b4075db8419d9e6d17b1eec4dfb860a7d7b4021d3459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000004c0)='\x00', 0x1, 0xfffffffffffffffe) 4.191821469s ago: executing program 2 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0xfff], 0x108}}) r2 = socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='cache=no%e') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) close(r3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 3.052701871s ago: executing program 5 (id=2158): openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$getsig(0x4202, r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r3, 0x0, 0x1500}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000033380)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYBLOB="108f2bbc120007171ae540810800f1d9ed7e6b556183cf5283da18c329fc2d1132e25424748c5ce2f044a26a71a4de16e74d22c6a1c791fde85bd9a764fe6fce36aa6b3fa6955e74b5b00555552570a64d455cedd37b6ad3f685ff3807c16bc31bc554aedf0b654e4fd98d6fee2d132b17cfa29e5cb8ad61cfa808973a8765ee335d3d94ed492ec65735a9789fec9e90fcf11ddc857c39ecfaeff5d28676fb5647093c8d4c7ed6ffe24515ce75f94c6e71ba05f8f7afb787856e3c7f6296f2b92894e189750940ccc0dda4db6115e9c8399bc0805eaf4cd1cd0824c2ac82d9a43f9e763a90b662", @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa53, &(0x7f0000000bc0)="$eJzs3U2MW0cdAPBn73rzWeKUhIa0tAmFtgK62+yG8BFBUzUXoqbiVqniEqVpiUgDIpWgVQ5JTtxoFYUb4kOceqkAIdELinriUolG4tJT4cCBKEiROEBLYhTvjNf+x+6zk9196/XvJ43H783YM8/7/PZ53puZAphY9fZjo/146e2Lh//5yD823Xr+ZCdHs/043bV0K3ctLU+H9/tgajG+cf3s8X5xrZhvP+bl4tlrndduKYriXLGnuFw0i92Xrrzx7vwzR88fubD3vTcPXl2JbQcAgEnz7csH9+/821/u3/7hWw8eKjZ01ufz82Za3prO+w+lE/98/l8vepdrXaHbTMg3nUI95Jvqk6+7nEbOt7H3dbH8mfC+jQH5NpSUP9W1rt92wzjL+3GzqNVne5br9dnZxd/kRft3/Uxt9vTJUy+eqaiiwLL790NFUewRhEkLrW2dL0HldakudH0KAJWK1wtvcy62LNydzrtND1f+tafq/V8Py2C193/lx/fvrcdql1+2/b8574jD8hl+b9q4ovVYbnm78vdoa1qO1xHi/UujHn/y+02F92sMWc9B1xHG5frCoHpOrXI97tSg+sf9Yr36Rorz5/DNkN79/Yl/03H5GwP9/WfNtf9vWqpc5XUZKWwc03oLExxa1Rx2gDEQ75trJTk93tcX0zeUpG8sSd9Ukr65JH1LSTpMst+/8tPi9drS7/z4m/7G9bPtL8uw7WG5ne2eFH9ixPrE9shR2+Pifb+jutvy4/3EsJb98dhzJ776wvNXFu//r3X2/5tpf9+Tlpvpu3U5ZcjthbFdvXPvf7O3nPqAfPeG+tzTJ3/7+Y7efLUdS+9TdB1nbqvHrt7XbRuU74HefM2Qb1MK8SpIPD/ZHF6Xzz/ycTV/XtNhexthO2ZCPfJxZXuKx+tqDGtV3h8H3f+f989dRaP24slTJ55Iy3k//fNUY8Ot9ftWud7A3Ru2/8+uorf/z9bO+ka9+7iwbWl9rfu40Azr5wesX0jL+f/cd6c2tdfPHv/+qReWe+Nhwp159bXvHTt16sQPPfHEE086T6o+MgErbe6Vl38wd+bV1x4/+fKxl068dOL0woEDC/PzB762sH+ufV4/1312D6wnS//0q64JAAAAAAAAAAAAMKwfHTl85a/vfOX9xf7/S/3/cv//fOdv7v//k9D/P/aTz/3gcz/A7X3S23nCAKszIV8jhU+G+u4I5ewMr/tUijvz+KX+/7m4OK5rrs99YX0cvzfnC8MJ3DZeykwYgyTOF/jZFF9I8a8LqFDt5/1Xp7hsfOu8r+fxKYxLMZ7y3y2PZ5LHMcn9vweN65SP/9tXoY4sv9XoTlj1NgL9/WvNjf+93kPXL4bK6yKstXCj1WqtZnmtllk8gLWh6vk/c7tnjk//6Vsbb4Wc7dpTvcfLOH4p3I2q57+srPzcsDip2z9k+cs9/2dn/ruhj39hxrzmnZX7319cfb+r2GL3sOXH7c/jQO8YrfwPU/l5ax4thiu/9atQfrwgNKSPQvmbhyw/bv/FUQtOBf4vlZ8/tsceHrb8xTeo1XvrEduN8/W/2G6c3Qjbn8f2HPnvf4cTNd5M5cMkG5d5Zkc1LvP/DhLvw/hyWs4HwnyfQ5zvZNT65/sr8v+BneH9ayX/38z/O96+nuKy70Oe/zfvj80+y/Wu5Uafz3a9HmtgXH3g+p8w5qF9RrMG6jGOodVqrWyDVolKC6fyz7/q3wlVl1/1518mzv8bz+Hj/L8xPc7/G9Pj/L8xvd2u+NHSpL0xPc7/Gz/POP9vTL8vlBvnB95Vkv7pkvTdJen3l6Q/UJL+mZL0vSXpD5akP1SSfm9J+sMl6Z8rSf98SfojJemPfXz6wo9LXr/e5f4ok7r9MMli/zzff5gc+frPoO//jpJ0YHz97K19Tz//u+80F/v/z3TaQ/J1vENpuZF+O8ffS7H9ZCqlvZOW/x7S13p7B0ySOH5G/P/+aEk6ML7yfV6+3zCBav1H7Bl23KpB5/mMly+k+Isp/lKKH0/xbIrnUrwvxfOrVD9WxtO//cPB12tLv/e3hfRh7yeP/YHiOFELQ9Yntg+Mej97HMdvVHdb/h12BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKhMvf24f/+uWlFcevvi4eeOnpy7tebJTo5m+3G6a6nReV1RPJHiqRT/Mj25cf3s8e74ZoprxXxRK2qd9cWz1zolbSmK4lyxp7hcNIvdl6688e78M0fPH7mw9703D15duU8AAAAA1r//BwAA///3txjh") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2.008346171s ago: executing program 2 (id=2159): landlock_create_ruleset(0x0, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2109}, 0x10, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) landlock_restrict_self(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) read$char_usb(r3, &(0x7f0000000300)=""/228, 0xe4) gettid() r4 = syz_open_procfs(0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x42) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f00000001c0)) linkat(r5, &(0x7f0000000180)='./file1\x00', r5, &(0x7f0000000140)='./bus/file0\x00', 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) 1.111928848s ago: executing program 2 (id=2161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x1a0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) 428.620532ms ago: executing program 5 (id=2162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) sendmmsg$unix(r1, &(0x7f0000000740)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000580)="15827cd29800469e13dedbadac9fb431f40a6190b2adde7bc7649dd3b7ba8517566da3d5d016a32cf7bd38201c27307bd27640350291cee68c968561880af4d9884f856e84c65080f1873ffa60278a", 0x4f}, {&(0x7f0000000600)}, {&(0x7f0000000880)="c7b187402937e6a04f646962cd6f95a8e1c16d949c818b9535132bd899057e181025c33ba636d7005c8b8d28671065786e25a8ca8d5aa48919ebab39ea27c273fdac3e91f10c760f802563944d3592cd9bd7cfe87cfd91cbadf1eef5b1650d3e1090fe6bfd29fc3fbebadde980669b377bf60408411d8500eaa84d2969d157d1073432a34fd8f8d9d3a80bd7f914c15491479263060fca7746e08d9d275ee72f52a532e865eed2f4b2f2e2bc8b", 0xad}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000"], 0x40, 0x20004001}}], 0x1, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x20040010) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="97e54c74e5eefa0000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fedbdf250200000014000380080002000800000008000100040000000c0009800800020001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 0 (id=2163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xe71, @remote, 0xf5}}, 0x9, 0x0, 0x9ce3, 0x3, 0x32, 0x3}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): ed_str(super-speed) [ 802.179875][T10517] vhci_hcd vhci_hcd.0: Device attached [ 802.251983][T10512] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 802.258646][T10512] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 802.283541][T10522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 802.310563][T10512] vhci_hcd vhci_hcd.0: Device attached [ 802.385113][T10508] vhci_hcd vhci_hcd.0: Device attached [ 802.444552][T10517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 802.504855][T10508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 802.541822][T10508] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(28) [ 802.548478][T10508] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 802.574437][T10508] vhci_hcd vhci_hcd.0: Device attached [ 802.697206][T10519] vhci_hcd: connection closed [ 802.699468][T10524] vhci_hcd: connection closed [ 802.704522][ T42] vhci_hcd: stop threads [ 802.717812][T10514] vhci_hcd: connection closed [ 802.727951][ T42] vhci_hcd: release socket [ 802.732118][T10509] vhci_hcd: connection reset by peer [ 802.735469][T10516] vhci_hcd: connection closed [ 802.795975][ T42] vhci_hcd: disconnect device [ 802.859171][ T42] vhci_hcd: stop threads [ 802.886027][ T42] vhci_hcd: release socket [ 803.077441][ T42] vhci_hcd: disconnect device [ 803.089848][ T42] vhci_hcd: stop threads [ 803.094289][ T42] vhci_hcd: release socket [ 803.118842][ T42] vhci_hcd: disconnect device [ 803.882969][ T2930] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 803.893805][ T42] vhci_hcd: stop threads [ 803.930574][ T42] vhci_hcd: release socket [ 803.965059][ T42] vhci_hcd: disconnect device [ 803.971724][ T2930] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 803.999803][ T42] vhci_hcd: stop threads [ 804.007950][ T42] vhci_hcd: release socket [ 804.029395][ T42] vhci_hcd: disconnect device [ 805.257803][T10544] loop4: detected capacity change from 0 to 1024 [ 807.952344][ T6547] vhci_hcd: vhci_device speed not set [ 809.116837][T10562] pim6reg: entered allmulticast mode [ 809.134358][T10562] pim6reg: left allmulticast mode [ 809.178656][T10576] kvm: pic: non byte read [ 809.186009][T10576] kvm: pic: non byte read [ 809.195946][T10576] kvm: pic: non byte read [ 809.200451][T10576] kvm: pic: non byte read [ 809.205361][T10576] kvm: pic: non byte read [ 809.209833][T10576] kvm: pic: non byte read [ 809.214465][T10576] kvm: pic: non byte read [ 809.218945][T10576] kvm: pic: non byte read [ 809.224209][T10576] kvm: pic: non byte read [ 809.228883][T10576] kvm: pic: non byte read [ 809.876947][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 809.929671][ T7835] usb usb38-port1: attempt power cycle [ 811.042408][ T7835] usb usb38-port1: unable to enumerate USB device [ 811.943914][ T5793] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 813.531006][T10602] syz_tun: entered allmulticast mode [ 813.944451][T10598] syz_tun: left allmulticast mode [ 814.070174][T10604] loop2: detected capacity change from 0 to 1024 [ 814.558319][ T2912] hfsplus: b-tree write err: -5, ino 4 [ 817.680461][T10624] loop4: detected capacity change from 0 to 2048 [ 818.478827][T10624] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 818.552570][T10628] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 818.553457][T10624] syz.4.936: attempt to access beyond end of device [ 818.553457][T10624] loop4: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 818.586782][T10065] udevd[10065]: incorrect nilfs2 checksum on /dev/loop4 [ 820.278463][T10640] (null): rxe_set_mtu: Set mtu to 256 [ 820.286396][T10640] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 820.992674][T10643] loop4: detected capacity change from 0 to 128 [ 821.349381][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 823.447651][T10659] 9pnet_fd: Insufficient options for proto=fd [ 825.477016][T10682] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 831.724091][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.949'. [ 832.010395][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.419557][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.429040][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.438285][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.447561][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.456944][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.466221][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.475437][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.484523][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 832.521175][T10728] loop4: detected capacity change from 0 to 8 [ 832.528521][T10728] squashfs: Unknown parameter '' [ 833.280788][T10737] blktrace: Concurrent blktraces are not allowed on loop6 [ 833.300408][T10737] dns_resolver: Unsupported server list version (0) [ 834.423243][ T5793] Bluetooth: Frame is too long (len 18, expected len 4) [ 835.603048][T10760] loop4: detected capacity change from 0 to 128 [ 835.610668][T10760] EXT4-fs: Ignoring removed nobh option [ 837.575266][T10760] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 837.589737][T10760] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 837.801441][ T6061] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 838.810882][T10778] netlink: 'syz.0.967': attribute type 2 has an invalid length. [ 839.705363][T10785] SET target dimension over the limit! [ 840.783532][T10792] loop0: detected capacity change from 0 to 512 [ 840.812548][T10792] EXT4-fs: Ignoring removed orlov option [ 840.818319][T10792] EXT4-fs: Ignoring removed bh option [ 840.839087][T10792] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 843.407083][T10804] __nla_validate_parse: 39 callbacks suppressed [ 843.407102][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 843.505448][T10804] bridge2: entered promiscuous mode [ 843.548050][T10804] bridge2: entered allmulticast mode [ 843.555886][T10812] loop0: detected capacity change from 0 to 128 [ 843.612758][T10804] team0: Port device bridge2 added [ 844.775084][T10409] Bluetooth: hci3: command 0x0406 tx timeout [ 844.816018][T10815] sctp_transport_update_pmtu: 48 callbacks suppressed [ 844.816049][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.836127][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.849125][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.862248][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.875387][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.888780][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.901898][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.915750][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.930224][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 844.942997][T10815] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 846.826227][T10828] overlayfs: overlapping lowerdir path [ 847.006300][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 847.148661][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.485780][T10845] loop2: detected capacity change from 0 to 512 [ 850.880396][T10845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.348002][T10845] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 851.348071][T10861] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 851.673184][T10845] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 851.849498][T10845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.288268][T10878] infiniband syz2: set active [ 857.234663][ T28] audit: type=1326 audit(1758670766.965:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 857.348753][ T28] audit: type=1326 audit(1758670767.002:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 857.414537][ T28] audit: type=1326 audit(1758670767.021:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 857.497770][ T28] audit: type=1326 audit(1758670767.021:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 858.303592][ T28] audit: type=1326 audit(1758670767.031:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 858.328028][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 858.373654][ T28] audit: type=1326 audit(1758670767.031:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 858.446337][ T28] audit: type=1326 audit(1758670767.031:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 858.545253][ T28] audit: type=1326 audit(1758670767.031:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 858.576393][ T28] audit: type=1326 audit(1758670767.031:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 858.649715][ T28] audit: type=1326 audit(1758670767.031:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 858.917267][T10910] loop4: detected capacity change from 0 to 512 [ 858.935597][T10910] EXT4-fs: Ignoring removed orlov option [ 858.941372][T10910] EXT4-fs: Ignoring removed bh option [ 859.017554][T10910] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 861.462637][T10925] loop0: detected capacity change from 0 to 1024 [ 861.844754][ T744] hfsplus: b-tree write err: -5, ino 4 [ 866.370158][T10969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.449210][T10946] sctp_transport_update_pmtu: 46 callbacks suppressed [ 866.449225][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.466915][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.477529][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.488288][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.500171][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.510979][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.521759][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.532650][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.543483][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.554327][T10946] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 866.586871][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 866.688756][T10971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.263360][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 868.272963][T10988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1003'. [ 868.382349][T10988] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.391205][T10988] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.400028][T10988] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.408896][T10988] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.580259][T11003] loop4: detected capacity change from 0 to 256 [ 871.448955][T11003] exfat: Bad value for 'gid' [ 871.729398][T10892] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 874.041272][T11020] dns_resolver: Unsupported server list version (0) [ 874.514383][T11023] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 874.541159][T11025] snd_dummy snd_dummy.0: control 0:9:0:syz1:524289 is already present [ 876.605245][T11040] usb usb5: usbfs: process 11040 (syz.4.1018) did not claim interface 0 before use [ 877.061252][T11041] lo speed is unknown, defaulting to 1000 [ 877.885023][T11049] loop0: detected capacity change from 0 to 16 [ 878.997475][T11049] erofs: (device loop0): mounted with root inode @ nid 36. [ 882.494339][T11055] ISOFS: Unable to identify CD-ROM format. [ 883.880551][T10409] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 884.134867][T11062] loop4: detected capacity change from 0 to 1024 [ 884.797038][T11062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.635323][ T6061] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.688291][T11079] hub 1-0:1.0: USB hub found [ 887.767857][T11079] hub 1-0:1.0: 1 port detected [ 888.201352][T11087] overlayfs: overlapping lowerdir path [ 891.944537][T11106] ISOFS: Unable to identify CD-ROM format. [ 893.252449][T11111] loop4: detected capacity change from 0 to 2048 [ 893.293513][T11111] NILFS (loop4): invalid segment: Inconsistency found [ 893.319241][T11111] NILFS (loop4): trying rollback from an earlier position [ 893.353161][T11111] NILFS (loop4): recovery complete [ 893.434643][T11113] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 893.865364][T11115] xt_socket: unknown flags 0x50 [ 895.684345][T11121] Set syz0 is full, maxelem 0 reached [ 895.831913][T11127] loop0: detected capacity change from 0 to 128 [ 896.104060][T11127] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 897.209136][T11127] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 898.166006][ T5798] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 898.613671][T11147] ubi: mtd0 is already attached to ubi31 [ 898.644585][T11147] kAFS: unparsable volume name [ 899.856297][T11152] loop0: detected capacity change from 0 to 128 [ 900.536215][T11152] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 900.572584][T11152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 902.362854][T11159] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 902.824844][T11180] lo speed is unknown, defaulting to 1000 [ 904.801575][T11186] afs: Unknown parameter '^ª§Kûu–†õkhëˆ/ÐlµØaþË"/™YvoØêk, priority 0 [ 1261.651999][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1554'. [ 1262.636213][T13346] lo speed is unknown, defaulting to 1000 [ 1263.013755][T13346] wlan0 speed is unknown, defaulting to 1000 [ 1263.021078][T13346] lo speed is unknown, defaulting to 1000 [ 1263.237183][ T27] tipc: Node number set to 11578026 [ 1267.962529][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 1268.778520][T13384] dvmrp8: entered allmulticast mode [ 1269.385191][T13394] gtp0: entered promiscuous mode [ 1270.644533][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 1271.047708][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 1275.279745][T13435] overlayfs: missing 'lowerdir' [ 1276.251340][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 1277.667623][T13465] trusted_key: encrypted_key: insufficient parameters specified [ 1281.107317][T13494] lo speed is unknown, defaulting to 1000 [ 1283.008640][T13494] wlan0 speed is unknown, defaulting to 1000 [ 1283.016421][T13494] lo speed is unknown, defaulting to 1000 [ 1291.181462][T13554] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1291.242720][T13554] overlayfs: failed to clone lowerpath [ 1291.673436][T13557] netlink: 'syz.3.1601': attribute type 10 has an invalid length. [ 1291.681580][T13557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1601'. [ 1292.233532][T13557] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1292.240235][T13557] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.265980][T13557] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1294.419028][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 1294.641935][T13587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1608'. [ 1301.540498][ T5793] Bluetooth: hci1: unexpected event for opcode 0x200f [ 1301.658581][T13613] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1301.726537][T13613] overlayfs: failed to clone lowerpath [ 1302.933473][T13618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'. [ 1305.844229][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 1307.355720][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.362120][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.203919][T13657] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1622'. [ 1312.186452][T13686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1630'. [ 1322.144588][T13757] xt_hashlimit: max too large, truncated to 1048576 [ 1325.877892][T13783] lo speed is unknown, defaulting to 1000 [ 1326.230044][T13783] wlan0 speed is unknown, defaulting to 1000 [ 1326.240418][T13783] lo speed is unknown, defaulting to 1000 [ 1331.390177][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1658'. [ 1332.369424][T13814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.953296][T13833] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1334.680591][T13834] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1337.134696][T13852] lo speed is unknown, defaulting to 1000 [ 1337.690976][T13852] wlan0 speed is unknown, defaulting to 1000 [ 1337.698614][T13852] lo speed is unknown, defaulting to 1000 [ 1343.046077][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 1350.539251][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 1351.788450][ T5793] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1351.800203][ T5793] Bluetooth: hci2: Injecting HCI hardware error event [ 1351.824094][ T5793] Bluetooth: hci2: hardware error 0x00 [ 1354.409005][ T5793] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1357.537574][T13981] tipc: Started in network mode [ 1357.543221][T13981] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1357.555309][T13981] tipc: Enabled bearer , priority 0 [ 1358.068793][T13987] lo speed is unknown, defaulting to 1000 [ 1358.406293][T13987] wlan0 speed is unknown, defaulting to 1000 [ 1358.416876][T13987] lo speed is unknown, defaulting to 1000 [ 1359.230595][ T27] tipc: Node number set to 11578026 [ 1362.399257][T14010] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1697'. [ 1362.438572][T14007] vlan0: entered promiscuous mode [ 1362.443756][T14007] macvtap0: entered promiscuous mode [ 1363.108913][T14012] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1698'. [ 1367.666956][T14044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1706'. [ 1368.767377][T14052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 1370.979075][T14069] netlink: 'syz.2.1712': attribute type 4 has an invalid length. [ 1371.722910][T14070] netlink: 'syz.2.1712': attribute type 4 has an invalid length. [ 1372.530433][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.536970][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.661874][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 1380.892714][T14123] netlink: 'syz.4.1723': attribute type 10 has an invalid length. [ 1380.958036][T14123] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1380.984075][T14123] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1381.101807][T14125] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1381.284672][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 1384.935640][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1384.944983][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1384.954430][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1384.963749][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1384.973043][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1384.982446][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1384.991791][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1385.001131][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1385.010474][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 1388.818741][T14168] __nla_validate_parse: 6 callbacks suppressed [ 1388.818756][T14168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1733'. [ 1389.130983][T14176] 9pnet_fd: Insufficient options for proto=fd [ 1397.501234][T14245] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424) [ 1397.512545][T14245] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1405.483257][T14292] netlink: 'syz.2.1759': attribute type 4 has an invalid length. [ 1405.762183][T14308] netlink: 'syz.2.1759': attribute type 4 has an invalid length. [ 1409.795761][T14328] lo speed is unknown, defaulting to 1000 [ 1410.512007][T14345] overlayfs: failed to clone lowerpath [ 1411.528286][T14328] wlan0 speed is unknown, defaulting to 1000 [ 1412.570716][T14328] lo speed is unknown, defaulting to 1000 [ 1413.936050][T14363] syz_tun: entered allmulticast mode [ 1415.157830][T14369] batadv_slave_0: entered promiscuous mode [ 1422.404530][ T7833] libceph: connect (1)[b::]:6789 error -101 [ 1422.433077][ T7833] libceph: mon0 (1)[b::]:6789 connect error [ 1422.596981][T14408] ceph: No mds server is up or the cluster is laggy [ 1428.589617][ T8425] syz_tun (unregistering): left allmulticast mode [ 1430.665896][T13943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1430.678023][T13943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1430.686980][T13943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1430.697356][T13943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1430.705761][T13943] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1430.713673][T13943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1431.708965][ T28] audit: type=1326 audit(1758671303.602:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1431.725014][T14460] lo speed is unknown, defaulting to 1000 [ 1431.772991][ T28] audit: type=1326 audit(1758671303.602:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1431.796500][ T28] audit: type=1326 audit(1758671303.611:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1431.827085][ T28] audit: type=1326 audit(1758671303.611:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1431.904534][ T28] audit: type=1326 audit(1758671303.611:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1431.998674][ T28] audit: type=1326 audit(1758671303.611:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1432.117481][ T28] audit: type=1326 audit(1758671304.191:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1432.176126][T14473] netlink: 'syz.3.1795': attribute type 4 has an invalid length. [ 1432.184920][ T28] audit: type=1326 audit(1758671304.191:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1432.285548][T14473] sz1: rxe_set_mtu: Set mtu to 256 [ 1432.349563][T14473] infiniband sz1: set down [ 1432.355295][ T28] audit: type=1326 audit(1758671304.238:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1433.065186][T13943] Bluetooth: hci0: command tx timeout [ 1433.101078][ T28] audit: type=1326 audit(1758671304.238:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14462 comm="syz.2.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1433.399950][T14483] netlink: 'syz.3.1795': attribute type 4 has an invalid length. [ 1433.414290][T14483] sz1: rxe_set_mtu: Set mtu to 4096 [ 1433.468270][T14483] infiniband sz1: set active [ 1433.548156][ T7808] lo speed is unknown, defaulting to 1000 [ 1433.555637][ T27] lo speed is unknown, defaulting to 1000 [ 1433.555751][T14476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1798'. [ 1433.570930][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 1434.464970][ T23] lo speed is unknown, defaulting to 1000 [ 1434.465239][T14460] wlan0 speed is unknown, defaulting to 1000 [ 1434.471062][T11675] lo speed is unknown, defaulting to 1000 [ 1434.527612][T14488] veth1_macvtap: left promiscuous mode [ 1434.533181][T14488] macsec0: entered allmulticast mode [ 1434.542724][T14489] veth1_macvtap: entered promiscuous mode [ 1434.548606][T14489] veth1_macvtap: entered allmulticast mode [ 1434.554502][T14489] macsec0: left allmulticast mode [ 1434.559770][T14489] veth1_macvtap: left allmulticast mode [ 1434.813181][ T7808] lo speed is unknown, defaulting to 1000 [ 1436.146642][T13943] Bluetooth: hci0: command tx timeout [ 1437.347947][T14460] lo speed is unknown, defaulting to 1000 [ 1437.375921][T14503] pim6reg: entered allmulticast mode [ 1437.387266][T14503] pim6reg: left allmulticast mode [ 1438.218626][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1438.225734][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1438.393095][T13943] Bluetooth: hci0: command tx timeout [ 1438.483217][ T6169] tipc: Disabling bearer [ 1438.495473][ T6169] tipc: Left network mode [ 1439.496724][ T6169] batman_adv: batadv0: Removing interface: gretap1 [ 1439.525684][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1439.525700][ T28] audit: type=1326 audit(1758671311.581:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.584749][ T28] audit: type=1326 audit(1758671311.581:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.607973][ T28] audit: type=1326 audit(1758671311.581:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.644309][ T28] audit: type=1326 audit(1758671311.581:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.699108][ T28] audit: type=1326 audit(1758671311.581:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.730758][ T28] audit: type=1326 audit(1758671311.609:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.768327][ T28] audit: type=1326 audit(1758671311.609:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.793568][ T28] audit: type=1326 audit(1758671311.609:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.820016][ T28] audit: type=1326 audit(1758671311.609:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.859804][ T28] audit: type=1326 audit(1758671311.609:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1439.972164][ T6169] dvmrp8 (unregistering): left allmulticast mode [ 1440.023126][T14460] chnl_net:caif_netlink_parms(): no params data found [ 1440.056904][ T6169] IPVS: stopping backup sync thread 6522 ... [ 1440.161239][ T6169] bond0: (slave wlan1): Releasing backup interface [ 1440.172397][ T6169] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 1440.599703][T14460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.629387][T13943] Bluetooth: hci0: command tx timeout [ 1441.158580][T14460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.174186][T14460] bridge_slave_0: entered allmulticast mode [ 1441.216712][T14460] bridge_slave_0: entered promiscuous mode [ 1441.262546][T14460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.313032][T14460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.334610][T14460] bridge_slave_1: entered allmulticast mode [ 1441.460207][T14460] bridge_slave_1: entered promiscuous mode [ 1444.779138][T14593] autofs4:pid:14593:autofs_fill_super: called with bogus options [ 1445.144098][T14460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.223548][T14460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.486053][T14460] team0: Port device team_slave_0 added [ 1446.519979][T14460] team0: Port device team_slave_1 added [ 1447.064840][T14611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.084552][T14611] batadv_slave_0: entered promiscuous mode [ 1447.816079][ T6169] bond0: left promiscuous mode [ 1447.821005][ T6169] bond_slave_0: left promiscuous mode [ 1447.839033][ T6169] bond_slave_1: left promiscuous mode [ 1447.861446][ T6169] batadv0: left promiscuous mode [ 1447.903423][ T6169] hsr_slave_0: left promiscuous mode [ 1447.920835][ T6169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.944698][ T6169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1448.364390][ T6169] bond1 (unregistering): Released all slaves [ 1450.500303][ T6169] team0 (unregistering): Port device team_slave_1 removed [ 1450.606448][ T6169] team0 (unregistering): Port device team_slave_0 removed [ 1450.712308][ T6169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.802752][ T6169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.918094][T14627] ceph: No mds server is up or the cluster is laggy [ 1451.979171][ T6169] bond0 (unregistering): Released all slaves [ 1452.192690][T14460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.205603][T14460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.237606][T14460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.285286][T14460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.303976][T14460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.371244][T14460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.095398][T14647] tmpfs: Unknown parameter 'usrquotaization' [ 1453.526643][T14460] hsr_slave_0: entered promiscuous mode [ 1453.533718][T14460] hsr_slave_1: entered promiscuous mode [ 1453.548847][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1825'. [ 1453.558059][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 1454.496192][T14653] geneve1: left promiscuous mode [ 1454.501228][T14653] macsec0: entered allmulticast mode [ 1454.520207][T14654] geneve1: entered promiscuous mode [ 1454.525498][T14654] geneve1: entered allmulticast mode [ 1454.530930][T14654] macsec0: left allmulticast mode [ 1454.536001][T14654] geneve1: left allmulticast mode [ 1456.685465][T14460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1456.702677][T14460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1456.724692][T14460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1456.738714][T14460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1456.965383][ T6169] IPVS: stop unused estimator thread 0... [ 1457.161926][T14460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.591390][T14460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.978071][T14691] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1831'. [ 1459.232984][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.240255][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.271599][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.278884][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.436179][T14460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1460.446996][T14460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1464.504030][T14460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.292555][T14752] xt_nat: multiple ranges no longer supported [ 1471.079151][T14460] veth0_vlan: entered promiscuous mode [ 1471.496185][T14460] veth1_vlan: entered promiscuous mode [ 1472.095775][T14460] veth0_macvtap: entered promiscuous mode [ 1472.109083][T14460] veth1_macvtap: entered promiscuous mode [ 1472.135283][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.146625][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.159218][T14460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1472.176065][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.198944][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.414428][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.944246][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.999345][T14460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.164028][T14460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.181505][T14460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.207032][T14460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.232489][T14460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.864826][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.880526][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.933386][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.952631][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.282792][T14862] macsec0: entered allmulticast mode [ 1480.294090][T14862] veth1_macvtap: entered allmulticast mode [ 1480.300160][T14862] macsec0: left allmulticast mode [ 1480.415178][T14862] veth1_macvtap: left allmulticast mode [ 1483.947110][T14888] xt_hashlimit: max too large, truncated to 1048576 [ 1486.889584][T14905] loop5: detected capacity change from 0 to 16 [ 1486.940703][T14905] erofs: (device loop5): mounted with root inode @ nid 36. [ 1486.987795][T14909] 9pnet_fd: Insufficient options for proto=fd [ 1487.038471][T14905] syz.5.1866: attempt to access beyond end of device [ 1487.038471][T14905] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1489.390003][T14917] syz.5.1866 (14917): drop_caches: 2 [ 1489.936147][T14924] loop5: detected capacity change from 0 to 1024 [ 1490.001464][T14926] pim6reg: entered allmulticast mode [ 1490.022329][T14926] pim6reg: left allmulticast mode [ 1490.182872][T14924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1491.752572][T14460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1493.601761][T14967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1875'. [ 1494.122197][T14970] loop5: detected capacity change from 0 to 16 [ 1494.143440][T14970] erofs: (device loop5): mounted with root inode @ nid 36. [ 1495.827019][T14973] syz.5.1878 (14973): drop_caches: 2 [ 1498.045129][T14995] overlayfs: failed to clone lowerpath [ 1500.518781][T15006] lo speed is unknown, defaulting to 1000 [ 1500.940796][T15006] wlan0 speed is unknown, defaulting to 1000 [ 1500.951666][T15006] lo speed is unknown, defaulting to 1000 [ 1501.684328][T15005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1502.521008][T15018] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1503.894758][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1503.901317][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1505.208348][T15035] loop5: detected capacity change from 0 to 16 [ 1505.277186][T15035] erofs: (device loop5): mounted with root inode @ nid 36. [ 1506.677746][T15041] syz.5.1889 (15041): drop_caches: 2 [ 1509.038150][T13943] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1509.049252][T13943] Bluetooth: hci3: Injecting HCI hardware error event [ 1509.059273][ T5793] Bluetooth: hci3: hardware error 0x00 [ 1512.853414][ T5793] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1514.785783][T15100] loop5: detected capacity change from 0 to 1024 [ 1515.035267][T15101] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1518.315668][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1518.315681][ T28] audit: type=1326 audit(1758671384.869:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1518.464708][ T28] audit: type=1326 audit(1758671384.869:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1518.547603][ T28] audit: type=1326 audit(1758671384.869:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1519.464713][T15131] overlayfs: failed to clone upperpath [ 1519.629489][T15133] netlink: 'syz.0.1906': attribute type 9 has an invalid length. [ 1519.637547][T15133] netlink: 'syz.0.1906': attribute type 7 has an invalid length. [ 1519.645530][T15133] netlink: 'syz.0.1906': attribute type 8 has an invalid length. [ 1519.880329][ T28] audit: type=1326 audit(1758671384.869:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1519.992780][ T28] audit: type=1326 audit(1758671384.869:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1520.185637][ T28] audit: type=1326 audit(1758671384.869:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1520.224596][ T28] audit: type=1326 audit(1758671384.869:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1527.266206][ T28] audit: type=1326 audit(1758671384.869:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1527.289447][ T28] audit: type=1326 audit(1758671384.869:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1527.312347][ T28] audit: type=1326 audit(1758671384.879:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1527.335676][ T28] audit: type=1326 audit(1758671384.879:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1527.410168][ T28] audit: type=1326 audit(1758671384.879:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1527.479693][ T28] audit: type=1326 audit(1758671384.879:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1527.585046][ T28] audit: type=1326 audit(1758671384.879:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1527.681823][ T28] audit: type=1326 audit(1758671384.879:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1528.055301][ T28] audit: type=1326 audit(1758671384.879:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1528.206486][ T28] audit: type=1326 audit(1758671384.879:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1528.535318][T10592] syz_tun (unregistering): left allmulticast mode [ 1528.953537][T14513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.981798][T14513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.011130][T13943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1529.029113][T13943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1529.043802][T13943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1529.074638][T13943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1529.084049][T13943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1529.092886][T13943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1529.151305][T14513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.162313][T14513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.223267][T15166] lo speed is unknown, defaulting to 1000 [ 1529.335669][T14513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.365829][T14513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.476949][T14513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.491577][T14513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.505312][T15172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.513925][T15172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.522937][T15172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.530405][T15172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.548179][T15173] loop5: detected capacity change from 0 to 1024 [ 1529.637792][T15166] wlan0 speed is unknown, defaulting to 1000 [ 1529.647369][T15166] lo speed is unknown, defaulting to 1000 [ 1530.552690][T14513] tipc: Left network mode [ 1531.080640][T15166] chnl_net:caif_netlink_parms(): no params data found [ 1531.246531][T15166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.257462][T15166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.265071][T15166] bridge_slave_0: entered allmulticast mode [ 1531.272704][T15166] bridge_slave_0: entered promiscuous mode [ 1531.282126][T15166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.289790][T15166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.297540][T15166] bridge_slave_1: entered allmulticast mode [ 1531.305239][T15166] bridge_slave_1: entered promiscuous mode [ 1531.338657][T13943] Bluetooth: hci1: command tx timeout [ 1531.542620][T15166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.583765][T15166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.727625][T15166] team0: Port device team_slave_0 added [ 1531.816221][T15166] team0: Port device team_slave_1 added [ 1531.954419][T15166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.971296][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.033421][T15166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.100010][T15166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.107731][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.204482][T15166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.394281][T15166] hsr_slave_0: entered promiscuous mode [ 1532.422402][T15166] hsr_slave_1: entered promiscuous mode [ 1532.441243][T15166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1532.449043][T15166] Cannot create hsr debugfs directory [ 1532.564559][T14513] hsr_slave_0: left promiscuous mode [ 1532.571478][T14513] hsr_slave_1: left promiscuous mode [ 1532.577608][T14513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1532.585794][T14513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1532.594989][T14513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1532.603806][T14513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1532.612309][T14513] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1532.619392][T14513] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1532.634823][T14513] geneve1: left promiscuous mode [ 1532.641606][T14513] veth1_vlan: left promiscuous mode [ 1532.647296][T14513] veth0_vlan: left promiscuous mode [ 1532.766252][T14513] infiniband sz1: set down [ 1532.810408][T14513] pim6reg (unregistering): left allmulticast mode [ 1533.378522][T14513] team0 (unregistering): Port device team_slave_1 removed [ 1533.451257][T14513] team0 (unregistering): Port device team_slave_0 removed [ 1533.562207][T13943] Bluetooth: hci1: command tx timeout [ 1534.135321][ T744] smc: removing ib device sz1 [ 1534.181915][T14098] lo speed is unknown, defaulting to 1000 [ 1534.188148][ T7833] lo speed is unknown, defaulting to 1000 [ 1534.698174][T15166] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1534.713111][T15166] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1534.755320][T15166] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1534.774257][T15166] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1535.086570][T15166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.147638][T15166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.181892][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.189309][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.236521][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.243907][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.608444][T15166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.786574][T13943] Bluetooth: hci1: command tx timeout [ 1535.815674][T14513] IPVS: stop unused estimator thread 0... [ 1536.100855][T15166] veth0_vlan: entered promiscuous mode [ 1536.120893][T15166] veth1_vlan: entered promiscuous mode [ 1536.179897][T15166] veth0_macvtap: entered promiscuous mode [ 1536.196677][T15166] veth1_macvtap: entered promiscuous mode [ 1536.241422][T15166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1536.255514][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.268330][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.288560][T15166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.327425][T15166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.338152][T15166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.347253][T15166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.356134][T15166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.479150][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.492936][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.533823][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.543400][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.354135][T13943] Bluetooth: hci1: command tx timeout [ 1539.335684][T15291] loop6: detected capacity change from 0 to 1024 [ 1539.528404][T15160] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1541.121051][T15318] loop5: detected capacity change from 0 to 256 [ 1542.038579][T15318] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1542.907787][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1920'. [ 1546.480983][T15352] netlink: 'syz.5.1927': attribute type 4 has an invalid length. [ 1548.848483][T15357] netlink: 'syz.5.1927': attribute type 4 has an invalid length. [ 1550.909088][T15395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 1550.972957][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 1551.085176][T15395] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1934'. [ 1557.112567][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1942'. [ 1557.121572][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1942'. [ 1557.135675][T15445] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.144416][T15445] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.153163][T15445] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.161888][T15445] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.354103][T15443] lo speed is unknown, defaulting to 1000 [ 1558.359956][T15443] lo speed is unknown, defaulting to 1000 [ 1558.366275][T15443] lo speed is unknown, defaulting to 1000 [ 1558.380984][T15443] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1558.864800][T15443] lo speed is unknown, defaulting to 1000 [ 1558.871709][T15443] lo speed is unknown, defaulting to 1000 [ 1558.878743][T15443] lo speed is unknown, defaulting to 1000 [ 1558.885560][T15443] lo speed is unknown, defaulting to 1000 [ 1559.435610][T15467] (null): rxe_set_mtu: Set mtu to 256 [ 1559.449724][T15467] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1563.219383][T15482] loop6: detected capacity change from 0 to 1024 [ 1564.296283][T15482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1564.313689][T15482] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1568.774968][T15494] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 480: padding at end of block bitmap is not set [ 1569.310527][T15494] EXT4-fs (loop6): Remounting filesystem read-only [ 1569.466875][T15166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1569.584516][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1569.591004][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1572.636677][ T7833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1573.535284][ T7833] usb 6-1: Using ep0 maxpacket: 8 [ 1573.700307][ T7833] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1573.710836][ T7833] usb 6-1: can't read configurations, error -71 [ 1583.138534][T15607] loop5: detected capacity change from 0 to 128 [ 1583.153536][T15607] qnx6: superblock #1 checksum error [ 1583.596454][T10378] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1584.011140][T10378] usb 7-1: Using ep0 maxpacket: 8 [ 1585.806590][T10378] usb 7-1: device descriptor read/all, error -71 [ 1586.399206][T15643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1978'. [ 1586.420194][T15643] netlink: set zone limit has 8 unknown bytes [ 1587.853455][T15661] loop5: detected capacity change from 0 to 1024 [ 1588.053126][T15661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1588.065859][T15661] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.281414][T15665] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 480: padding at end of block bitmap is not set [ 1592.863358][T15665] EXT4-fs (loop5): Remounting filesystem read-only [ 1592.954058][T14460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.578162][T15695] syz.5.1986: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1596.595380][T15695] CPU: 1 PID: 15695 Comm: syz.5.1986 Not tainted syzkaller #0 [ 1596.602909][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1596.613107][T15695] Call Trace: [ 1596.616440][T15695] [ 1596.619414][T15695] dump_stack_lvl+0x16c/0x230 [ 1596.624235][T15695] ? show_regs_print_info+0x20/0x20 [ 1596.629471][T15695] ? load_image+0x3b0/0x3b0 [ 1596.634015][T15695] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1596.640495][T15695] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1596.647023][T15695] warn_alloc+0x210/0x300 [ 1596.651424][T15695] ? stack_trace_save+0x9c/0xe0 [ 1596.656319][T15695] ? zone_watermark_ok_safe+0x230/0x230 [ 1596.661908][T15695] ? kasan_set_track+0x5f/0x70 [ 1596.666734][T15695] ? kasan_set_track+0x4e/0x70 [ 1596.671519][T15695] ? __kasan_kmalloc+0x8f/0xa0 [ 1596.676303][T15695] ? xsk_init_queue+0xb0/0x110 [ 1596.681154][T15695] ? xsk_setsockopt+0x43c/0x6f0 [ 1596.686109][T15695] ? do_sock_setsockopt+0x175/0x1a0 [ 1596.691410][T15695] ? __x64_sys_setsockopt+0x184/0x200 [ 1596.696814][T15695] __vmalloc_node_range+0x126/0x1320 [ 1596.702175][T15695] ? free_vm_area+0x50/0x50 [ 1596.706713][T15695] vmalloc_user+0x74/0x80 [ 1596.711081][T15695] ? xskq_create+0xbf/0x170 [ 1596.715610][T15695] xskq_create+0xbf/0x170 [ 1596.719964][T15695] xsk_init_queue+0xb0/0x110 [ 1596.724578][T15695] xsk_setsockopt+0x43c/0x6f0 [ 1596.729286][T15695] ? xsk_poll+0x670/0x670 [ 1596.733642][T15695] ? __fget_files+0x28/0x4d0 [ 1596.738294][T15695] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1596.743877][T15695] ? security_socket_setsockopt+0x7e/0xa0 [ 1596.749648][T15695] ? xsk_poll+0x670/0x670 [ 1596.754009][T15695] do_sock_setsockopt+0x175/0x1a0 [ 1596.759068][T15695] ? __fdget+0x180/0x210 [ 1596.763343][T15695] __x64_sys_setsockopt+0x184/0x200 [ 1596.768586][T15695] do_syscall_64+0x55/0xb0 [ 1596.773040][T15695] ? clear_bhb_loop+0x40/0x90 [ 1596.777832][T15695] ? clear_bhb_loop+0x40/0x90 [ 1596.782529][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.788495][T15695] RIP: 0033:0x7fbd0bb8eec9 [ 1596.793036][T15695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.812674][T15695] RSP: 002b:00007fbd0c995038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1596.821130][T15695] RAX: ffffffffffffffda RBX: 00007fbd0bde6090 RCX: 00007fbd0bb8eec9 [ 1596.829142][T15695] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 1596.837172][T15695] RBP: 00007fbd0bc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1596.845355][T15695] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.853363][T15695] R13: 00007fbd0bde6128 R14: 00007fbd0bde6090 R15: 00007fff4dfea648 [ 1596.861469][T15695] [ 1596.865297][T15695] Mem-Info: [ 1596.868475][T15695] active_anon:17574 inactive_anon:0 isolated_anon:0 [ 1596.868475][T15695] active_file:17844 inactive_file:41084 isolated_file:0 [ 1596.868475][T15695] unevictable:768 dirty:200 writeback:0 [ 1596.868475][T15695] slab_reclaimable:6664 slab_unreclaimable:97140 [ 1596.868475][T15695] mapped:33234 shmem:10003 pagetables:898 [ 1596.868475][T15695] sec_pagetables:0 bounce:0 [ 1596.868475][T15695] kernel_misc_reclaimable:0 [ 1596.868475][T15695] free:1324174 free_pcp:12204 free_cma:0 [ 1596.914579][T15695] Node 0 active_anon:70268kB inactive_anon:0kB active_file:71376kB inactive_file:164084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133004kB dirty:808kB writeback:0kB shmem:38568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:3620kB sec_pagetables:0kB all_unreclaimable? no [ 1596.948931][T15695] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1596.979224][T15695] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.006627][T15695] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1597.012535][T15695] Node 0 DMA32 free:1406036kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:70220kB inactive_anon:0kB active_file:71376kB inactive_file:162764kB unevictable:1536kB writepending:808kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:10760kB local_pcp:2844kB free_cma:0kB [ 1597.043452][T15695] lowmem_reserve[]: 0 0 1 1 1 [ 1597.048201][T15695] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.075575][T15695] lowmem_reserve[]: 0 0 0 0 0 [ 1597.080302][T15695] Node 1 Normal free:3875284kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:38012kB local_pcp:21884kB free_cma:0kB [ 1597.109811][T15695] lowmem_reserve[]: 0 0 0 0 0 [ 1597.114538][T15695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1597.127318][T15695] Node 0 DMA32: 453*4kB (UE) 452*8kB (UME) 914*16kB (UME) 700*32kB (ME) 358*64kB (ME) 146*128kB (UME) 90*256kB (UME) 57*512kB (UME) 24*1024kB (UME) 10*2048kB (UME) 299*4096kB (UM) = 1406036kB [ 1597.146664][T15695] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1597.158646][T15695] Node 1 Normal: 273*4kB (UME) 66*8kB (UME) 46*16kB (UME) 91*32kB (UME) 23*64kB (UME) 9*128kB (UME) 3*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 943*4096kB (ME) = 3875284kB [ 1597.176657][T15695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1597.186251][T15695] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1597.195576][T15695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1597.205234][T15695] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1597.214576][T15695] 68929 total pagecache pages [ 1597.219264][T15695] 0 pages in swap cache [ 1597.223425][T15695] Free swap = 124664kB [ 1597.227621][T15695] Total swap = 124996kB [ 1597.231789][T15695] 2097051 pages RAM [ 1597.235622][T15695] 0 pages HighMem/MovableOnly [ 1597.240297][T15695] 416137 pages reserved [ 1597.244775][T15695] 0 pages cma reserved [ 1598.924039][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1990'. [ 1598.933942][T15706] netlink: set zone limit has 8 unknown bytes [ 1602.683989][T15742] loop5: detected capacity change from 0 to 16 [ 1602.755830][T15742] erofs: (device loop5): mounted with root inode @ nid 36. [ 1602.905544][T15742] syz.5.1996: attempt to access beyond end of device [ 1602.905544][T15742] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1605.323848][T15754] syz.5.1996 (15754): drop_caches: 2 [ 1611.472363][T15791] loop5: detected capacity change from 0 to 1024 [ 1611.555498][T15791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1611.604121][T15794] veth1_macvtap: left promiscuous mode [ 1611.605214][T15791] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1611.609913][T15794] macsec0: entered allmulticast mode [ 1611.630582][T15795] veth1_macvtap: entered promiscuous mode [ 1611.636490][T15795] veth1_macvtap: entered allmulticast mode [ 1611.642375][T15795] macsec0: left allmulticast mode [ 1611.647602][T15795] veth1_macvtap: left allmulticast mode [ 1612.510894][T15799] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 480: padding at end of block bitmap is not set [ 1612.626336][T15799] EXT4-fs (loop5): Remounting filesystem read-only [ 1613.132405][T15816] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 1613.140338][T15816] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1613.146916][T15816] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 1613.153916][T15816] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 1613.160478][T15816] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1613.168357][T15816] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1613.175020][T15816] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1613.181597][T15816] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1613.189586][T15816] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1613.235171][T14460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.245041][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 1613.268225][T15803] tipc: Enabling of bearer rejected, failed to enable media [ 1613.572236][T15823] trusted_key: encrypted_key: insufficient parameters specified [ 1615.099339][T15829] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2013'. [ 1615.129151][T15830] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2015'. [ 1616.807243][T15853] loop5: detected capacity change from 0 to 64 [ 1617.722581][T15856] input: syz0 as /devices/virtual/input/input5 [ 1618.937450][ T7808] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1619.402630][ T7808] usb 6-1: device not accepting address 4, error -71 [ 1619.678882][T15876] ISOFS: Unable to identify CD-ROM format. [ 1623.103575][T15900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.121135][T15900] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1623.645609][T15914] pim6reg: entered allmulticast mode [ 1624.028470][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2024'. [ 1625.854168][ T5793] Bluetooth: hci1: command tx timeout [ 1630.587724][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'. [ 1630.597517][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'. [ 1630.606757][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2031'. [ 1633.391036][T15958] hub 9-0:1.0: USB hub found [ 1633.401919][T15958] hub 9-0:1.0: 1 port detected [ 1633.939181][T15971] loop5: detected capacity change from 0 to 8192 [ 1634.024714][T15971] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1634.064580][T15971] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1634.091084][T15971] REISERFS (device loop5): using ordered data mode [ 1634.109706][T15971] reiserfs: using flush barriers [ 1634.310602][T15971] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1634.575349][T15985] loop6: detected capacity change from 0 to 4096 [ 1635.551125][T15971] REISERFS (device loop5): checking transaction log (loop5) [ 1635.582991][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1635.589755][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1635.698113][T15991] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1636.052159][T16001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2041'. [ 1636.215939][T16002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1636.252254][T16002] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1637.038507][T15971] REISERFS (device loop5): Using tea hash to sort names [ 1637.060971][T15971] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1637.993394][T16018] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2043'. [ 1638.415160][T16018] loop6: detected capacity change from 0 to 40427 [ 1638.456175][T16018] F2FS-fs (loop6): Invalid log sectorsize (131081) [ 1638.462903][T16018] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1638.474419][T16018] F2FS-fs (loop6): Invalid gid value -1 [ 1638.822501][T15866] I/O error, dev loop6, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1639.642541][T16039] ptrace attach of "./syz-executor exec"[14460] was attempted by " [ 1641.084626][T16046] trusted_key: encrypted_key: insufficient parameters specified [ 1655.609713][T16100] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1655.752676][T16103] IPVS: stopping backup sync thread 16100 ... [ 1659.637818][T16121] hugetlbfs: syz.2.2060 (16121): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1659.966928][T16126] loop6: detected capacity change from 0 to 128 [ 1660.276603][T16126] befs: (loop6): invalid magic header [ 1660.520126][T16104] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1661.923992][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2066'. [ 1661.934623][T16144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1662.098922][T16145] loop6: detected capacity change from 0 to 512 [ 1662.594770][T16145] EXT4-fs (loop6): 1 orphan inode deleted [ 1662.602988][T16145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1662.618857][T16145] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1662.747818][T16144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1663.133058][T16149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2064'. [ 1664.071200][T15166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.842783][T13943] Bluetooth: hci1: command 0x0406 tx timeout [ 1672.768561][T16209] fuse: Unknown parameter '0x0000000000000008' [ 1672.794161][T16209] 9pnet_fd: Insufficient options for proto=fd [ 1676.181850][T16219] loop6: detected capacity change from 0 to 1024 [ 1676.387751][T16219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.588135][T16219] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1677.631343][T16230] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 480: padding at end of block bitmap is not set [ 1677.684042][T16241] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 16: comm syz.6.2080: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=2368, size=1024 fake=0 [ 1677.733348][T16241] EXT4-fs (loop6): Remounting filesystem read-only [ 1678.152625][T16230] EXT4-fs (loop6): Remounting filesystem read-only [ 1678.378726][T15166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.384044][T16233] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2081'. [ 1679.901906][T16258] trusted_key: encrypted_key: insufficient parameters specified [ 1679.958230][ T28] audit: type=1326 audit(1758671536.470:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1680.874113][T16257] wlan0 speed is unknown, defaulting to 1000 [ 1680.881660][T16257] lo speed is unknown, defaulting to 1000 [ 1681.094446][ T28] audit: type=1326 audit(1758671536.470:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1681.267279][ T28] audit: type=1326 audit(1758671536.526:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1681.290877][ T28] audit: type=1326 audit(1758671536.526:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1681.325532][ T28] audit: type=1326 audit(1758671536.535:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1681.401999][ T28] audit: type=1326 audit(1758671536.544:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1682.236057][ T28] audit: type=1326 audit(1758671536.544:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1682.657178][T16271] wlan0 speed is unknown, defaulting to 1000 [ 1682.668406][T16271] lo speed is unknown, defaulting to 1000 [ 1683.519336][ T28] audit: type=1326 audit(1758671536.544:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1683.544047][ T28] audit: type=1326 audit(1758671536.554:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1683.566869][ T28] audit: type=1326 audit(1758671536.554:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.0.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1684.052169][T16280] loop6: detected capacity change from 0 to 8192 [ 1684.082837][T16280] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1684.113541][T16280] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 1684.420086][T16280] REISERFS (device loop6): using ordered data mode [ 1684.445032][T16280] reiserfs: using flush barriers [ 1684.859265][T16280] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1684.881282][T16280] REISERFS (device loop6): checking transaction log (loop6) [ 1685.399379][T16280] REISERFS (device loop6): Using tea hash to sort names [ 1685.416888][T16280] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1689.331695][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1689.331715][ T28] audit: type=1326 audit(1758671544.935:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1689.331770][ T28] audit: type=1326 audit(1758671544.982:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90cd8eec9 code=0x7ffc0000 [ 1690.551561][ T28] audit: type=1326 audit(1758671546.301:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bb8eec9 code=0x7ffc0000 [ 1690.679299][ T28] audit: type=1326 audit(1758671546.301:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bb8eec9 code=0x7ffc0000 [ 1690.768080][ T28] audit: type=1326 audit(1758671546.301:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0bb8eec9 code=0x7ffc0000 [ 1690.826943][ T28] audit: type=1326 audit(1758671546.301:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bb8eec9 code=0x7ffc0000 [ 1691.175483][ T28] audit: type=1326 audit(1758671546.301:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bb8eec9 code=0x7ffc0000 [ 1691.679274][T13943] Bluetooth: hci1: command 0x0406 tx timeout [ 1692.023933][ T28] audit: type=1326 audit(1758671546.301:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0bb8eec9 code=0x7ffc0000 [ 1692.336501][ T28] audit: type=1326 audit(1758671546.301:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bb8eec9 code=0x7ffc0000 [ 1692.982651][ T28] audit: type=1326 audit(1758671546.301:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0bb8eec9 code=0x7ffc0000 [ 1693.306102][T16341] loop5: detected capacity change from 0 to 1024 [ 1694.908182][ T7833] IPVS: starting estimator thread 0... [ 1695.028803][T16356] IPVS: using max 19 ests per chain, 45600 per kthread [ 1695.118877][T16358] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2100'. [ 1695.149464][ T2932] hfsplus: b-tree write err: -5, ino 4 [ 1697.752733][T16372] loop5: detected capacity change from 0 to 32768 [ 1698.806732][T16375] (null): rxe_set_mtu: Set mtu to 4096 [ 1698.813815][T16375] lo speed is unknown, defaulting to 1000 [ 1698.839243][T16375] lo speed is unknown, defaulting to 1000 [ 1698.852848][T16375] lo speed is unknown, defaulting to 1000 [ 1700.636580][T16375] infiniband sz1: set active [ 1700.641369][T16375] infiniband sz1: added lo [ 1700.677007][T16375] RDS/IB: sz1: added [ 1700.681182][T16375] smc: adding ib device sz1 with port count 1 [ 1700.687413][T16375] smc: ib device sz1 port 1 has pnetid [ 1700.694487][T16375] lo speed is unknown, defaulting to 1000 [ 1700.828552][T16375] lo speed is unknown, defaulting to 1000 [ 1700.955145][T16375] lo speed is unknown, defaulting to 1000 [ 1700.988572][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1700.994962][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1701.083460][T16375] lo speed is unknown, defaulting to 1000 [ 1701.285072][T14098] lo speed is unknown, defaulting to 1000 [ 1701.297824][T14098] lo speed is unknown, defaulting to 1000 [ 1701.307779][T16372] read_mapping_page failed! [ 1701.319344][T16372] jfs_mount: dbMount failed w/rc = -5 [ 1701.364238][T16372] Mount JFS Failure: -5 [ 1701.368452][T16372] jfs_mount failed w/return code = -5 [ 1703.950839][T16406] bridge0: port 3(syz_tun) entered blocking state [ 1703.957562][T16406] bridge0: port 3(syz_tun) entered disabled state [ 1703.964444][T16406] syz_tun: entered allmulticast mode [ 1703.971861][T16406] syz_tun: entered promiscuous mode [ 1703.978382][T16406] bridge0: port 3(syz_tun) entered blocking state [ 1703.987599][T16406] bridge0: port 3(syz_tun) entered forwarding state [ 1704.005808][T16406] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1706.639804][T16416] netlink: 'syz.2.2113': attribute type 10 has an invalid length. [ 1706.664494][T16416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2113'. [ 1708.252095][T16431] loop5: detected capacity change from 0 to 64 [ 1708.439234][T16430] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1708.510627][T16431] MINIX-fs: bad superblock or unable to read bitmaps [ 1709.006022][T11675] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1709.805840][T11675] usb 6-1: Using ep0 maxpacket: 16 [ 1709.867828][T11675] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 1709.888356][T11675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.913180][T11675] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1709.929129][T11675] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1709.938789][T11675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.952506][T11675] usb 6-1: config 0 descriptor?? [ 1710.016181][T11675] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 1710.823320][T16455] Error parsing options; rc = [-22] [ 1711.050447][T11675] usb 6-1: USB disconnect, device number 6 [ 1711.050480][ C0] pxrc 6-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1713.734614][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1713.758412][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1713.769041][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1713.780853][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1713.789808][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1713.808347][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1714.247683][T16486] loop5: detected capacity change from 0 to 16 [ 1715.187527][T16471] ceph: No mds server is up or the cluster is laggy [ 1715.908555][T16486] erofs: (device loop5): mounted with root inode @ nid 36. [ 1715.964632][T16486] syz.5.2126: attempt to access beyond end of device [ 1715.964632][T16486] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1716.174897][ T5793] Bluetooth: hci1: command tx timeout [ 1717.237609][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1717.237670][ T28] audit: type=1326 audit(1758671570.715:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1717.473463][ T28] audit: type=1326 audit(1758671570.724:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1717.496205][ T28] audit: type=1326 audit(1758671570.724:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1717.564581][ T28] audit: type=1326 audit(1758671570.724:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1717.733594][ T744] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.807210][ T28] audit: type=1326 audit(1758671570.733:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1717.883514][ T28] audit: type=1326 audit(1758671570.733:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1718.862348][ T5793] Bluetooth: hci1: command tx timeout [ 1718.869720][ T28] audit: type=1326 audit(1758671570.733:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1718.892791][ T28] audit: type=1326 audit(1758671570.733:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1718.968735][ T28] audit: type=1326 audit(1758671570.743:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1719.018046][ T744] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.028520][ T28] audit: type=1326 audit(1758671570.743:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16498 comm="syz.2.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2b58d8eec9 code=0x7ffc0000 [ 1719.764713][ T744] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.777269][T16525] Bluetooth: MGMT ver 1.22 [ 1719.782630][T16525] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1719.806641][T16525] loop5: detected capacity change from 0 to 1024 [ 1720.795277][ T744] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.863596][T16473] wlan0 speed is unknown, defaulting to 1000 [ 1721.035002][ T5793] Bluetooth: hci1: command tx timeout [ 1721.127663][T16473] lo speed is unknown, defaulting to 1000 [ 1721.711963][T16473] lo speed is unknown, defaulting to 1000 [ 1723.007919][T16517] wlan0 speed is unknown, defaulting to 1000 [ 1723.305747][T16553] loop5: detected capacity change from 0 to 164 [ 1723.327717][ T5793] Bluetooth: hci1: command tx timeout [ 1723.453921][T16553] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 1723.472940][T16553] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 1723.655018][T16517] lo speed is unknown, defaulting to 1000 [ 1724.224024][T16517] lo speed is unknown, defaulting to 1000 [ 1724.472020][T16565] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1724.483332][T16565] tipc: Enabled bearer , priority 10 [ 1724.614921][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1724.902613][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1725.469531][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1726.591908][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1727.714690][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1727.863849][T16473] chnl_net:caif_netlink_parms(): no params data found [ 1728.815371][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1728.914366][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.938739][T16473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.981617][T16473] bridge_slave_0: entered allmulticast mode [ 1729.032622][T16473] bridge_slave_0: entered promiscuous mode [ 1729.071977][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.093084][T16473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.109528][T16473] bridge_slave_1: entered allmulticast mode [ 1729.118849][T16473] bridge_slave_1: entered promiscuous mode [ 1729.927265][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1730.471549][T16473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1730.729723][T16473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.908722][T16629] loop5: detected capacity change from 0 to 128 [ 1730.956817][T16629] EXT4-fs: Ignoring removed nobh option [ 1731.039057][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1731.533586][T16629] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1731.868065][T16629] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1732.150810][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1732.246062][ T744] hsr_slave_0: left promiscuous mode [ 1732.280090][ T744] hsr_slave_1: left promiscuous mode [ 1732.570937][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1732.650323][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.107127][T16645] trusted_key: encrypted_key: insufficient parameters specified [ 1733.262667][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1733.352166][ T744] bridge_slave_1: left allmulticast mode [ 1733.358013][ T744] bridge_slave_1: left promiscuous mode [ 1733.376047][T14460] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1733.417736][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.562945][ T744] bridge_slave_0: left allmulticast mode [ 1733.583295][ T744] bridge_slave_0: left promiscuous mode [ 1733.589219][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.025892][T16048] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1734.142125][ T744] veth1_macvtap: left promiscuous mode [ 1734.217331][ T744] veth0_macvtap: left promiscuous mode [ 1734.301714][T16048] usb 6-1: device descriptor read/64, error -71 [ 1734.310976][ T744] veth1_vlan: left promiscuous mode [ 1734.374474][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1734.391238][ T744] veth0_vlan: left promiscuous mode [ 1734.685707][T16048] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1734.942574][T16048] usb 6-1: device descriptor read/64, error -71 [ 1735.124567][T16048] usb usb6-port1: attempt power cycle [ 1735.486302][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1735.605425][T16048] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1735.726667][T16048] usb 6-1: device descriptor read/8, error -71 [ 1736.117592][T16048] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1736.214876][T16048] usb 6-1: device descriptor read/8, error -71 [ 1736.409017][T16048] usb usb6-port1: unable to enumerate USB device [ 1736.608812][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1737.710068][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1738.832460][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1739.933603][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1741.045412][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1742.167946][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1743.269064][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1743.375445][ T744] team0 (unregistering): Port device team_slave_1 removed [ 1743.448179][ T744] team0 (unregistering): Port device team_slave_0 removed [ 1743.520282][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.586254][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.320941][ T744] bond0 (unregistering): Released all slaves [ 1744.380901][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1744.433385][T16473] team0: Port device team_slave_0 added [ 1744.454275][T16473] team0: Port device team_slave_1 added [ 1744.626711][T16674] wlan0 speed is unknown, defaulting to 1000 [ 1744.634333][T16674] lo speed is unknown, defaulting to 1000 [ 1744.641568][T16674] lo speed is unknown, defaulting to 1000 [ 1744.750406][T16692] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1745.208993][T16473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1745.216135][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1745.242866][T16473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1745.503433][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1746.063380][T16473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.081776][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.109045][T16473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.270746][T16473] hsr_slave_0: entered promiscuous mode [ 1746.556750][T16473] hsr_slave_1: entered promiscuous mode [ 1746.604529][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1746.650442][T16715] loop5: detected capacity change from 0 to 64 [ 1747.144254][T16473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1747.179432][T16473] Cannot create hsr debugfs directory [ 1747.716354][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1748.828253][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1748.904470][T16730] loop5: detected capacity change from 0 to 2048 [ 1749.016595][T16730] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1749.164506][T16731] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1749.940004][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1750.362103][T16473] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1750.385384][T16473] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1750.422594][T16473] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1750.498632][T16473] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1750.665298][T16743] ksmbd: Unknown IPC event: 0, ignore. [ 1751.051837][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1751.197763][T16752] page:ffffea00012b8000 refcount:4 mapcount:1 mapping:ffff888140aa17f0 index:0x0 pfn:0x4ae00 [ 1751.210130][T16752] head:ffffea00012b8000 order:9 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 1751.219121][T16752] aops:hugetlbfs_aops ino:9e6b dentry name(?):"anon_hugepage" [ 1751.226744][T16752] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 1751.234983][T16752] page_type: 0xfffff7ff(hugetlb) [ 1751.239966][T16752] raw: 00fff00000000041 ffffea00013b8008 ffffffff96f04d30 ffff888140aa17f0 [ 1751.248666][T16752] raw: 0000000000000000 0000000000000000 00000004fffff7ff 0000000000000000 [ 1751.257277][T16752] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1751.264576][T16752] page_owner tracks the page as allocated [ 1751.272108][T16752] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x146cc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 16669, tgid 16665 (syz.0.2151), ts 1738940892563, free_ts 1738940892563 [ 1751.292638][T16752] post_alloc_hook+0x1cd/0x210 [ 1751.297434][T16752] get_page_from_freelist+0x195c/0x19f0 [ 1751.303008][T16752] __alloc_pages+0x1e3/0x460 [ 1751.307619][T16752] alloc_buddy_hugetlb_folio+0xe5/0x3b0 [ 1751.313185][T16752] alloc_fresh_hugetlb_folio+0xf6/0x950 [ 1751.318749][T16752] alloc_surplus_hugetlb_folio+0xfe/0x2b0 [ 1751.324519][T16752] alloc_hugetlb_folio+0xd17/0x1610 [ 1751.329733][T16752] hugetlb_fault+0xdd8/0x2b40 [ 1751.334431][T16752] handle_mm_fault+0x30fc/0x4920 [ 1751.339389][T16752] __get_user_pages+0x5ea/0x1470 [ 1751.344345][T16752] __gup_longterm_locked+0x4de/0x2920 [ 1751.349734][T16752] internal_get_user_pages_fast+0x217f/0x2730 [ 1751.355825][T16752] io_pin_pages+0x92/0x170 [ 1751.360303][T16752] io_sqe_buffer_register+0x153/0x18f0 [ 1751.365793][T16752] io_sqe_buffers_register+0x3ac/0x510 [ 1751.371276][T16752] __se_sys_io_uring_register+0x674/0xc50 [ 1751.377021][T16752] page last free stack trace: [ 1751.381703][T16752] free_unref_page_prepare+0x7ce/0x8e0 [ 1751.387190][T16752] free_unref_page+0x32/0x2e0 [ 1751.391891][T16752] release_pages+0x66f/0x2220 [ 1751.396582][T16752] tlb_flush_mmu+0x368/0x4f0 [ 1751.401195][T16752] unmap_page_range+0x26d4/0x2fe0 [ 1751.406323][T16752] unmap_vmas+0x25e/0x3a0 [ 1751.410668][T16752] exit_mmap+0x200/0xb50 [ 1751.414945][T16752] __mmput+0x118/0x3c0 [ 1751.419063][T16752] exit_mm+0x1da/0x2c0 [ 1751.423147][T16752] do_exit+0x88e/0x23c0 [ 1751.427325][T16752] do_group_exit+0x21b/0x2d0 [ 1751.431937][T16752] get_signal+0x12fc/0x1400 [ 1751.436477][T16752] arch_do_signal_or_restart+0x96/0x780 [ 1751.442080][T16752] exit_to_user_mode_loop+0x70/0x110 [ 1751.447386][T16752] exit_to_user_mode_prepare+0xf6/0x180 [ 1751.452951][T16752] syscall_exit_to_user_mode+0x1a/0x50 [ 1751.458435][T16752] page has been migrated, last migrate reason: mempolicy_mbind [ 1751.466099][T16752] ------------[ cut here ]------------ [ 1751.471562][T16752] kernel BUG at mm/filemap.c:155! [ 1751.476620][T16752] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1751.482693][T16752] CPU: 1 PID: 16752 Comm: syz.5.2162 Not tainted syzkaller #0 [ 1751.490158][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1751.500222][T16752] RIP: 0010:filemap_unaccount_folio+0x704/0xc60 [ 1751.506491][T16752] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 f5 b0 d2 ff e9 74 f9 ff ff e8 eb b0 d2 ff 48 89 df 48 c7 c6 20 24 b3 8a e8 dc 72 12 00 <0f> 0b e8 d5 b0 d2 ff 48 89 df 48 c7 c6 a0 29 b3 8a e8 c6 72 12 00 [ 1751.526111][T16752] RSP: 0018:ffffc90003ab73b8 EFLAGS: 00010046 [ 1751.532193][T16752] RAX: 59032e437ce04800 RBX: ffffea00012b8000 RCX: 59032e437ce04800 [ 1751.540178][T16752] RDX: 0000000000000005 RSI: ffffffff8aaace20 RDI: ffffffff8afc71c0 [ 1751.548158][T16752] RBP: ffffc90003ab7518 R08: ffffffff8e4a91af R09: 1ffffffff1c95235 [ 1751.556156][T16752] R10: dffffc0000000000 R11: fffffbfff1c95236 R12: 0000000000000040 [ 1751.564143][T16752] R13: 1ffffd4000257000 R14: 1ffffd4000257001 R15: ffffea00012b8008 [ 1751.572127][T16752] FS: 00007fbd0c9746c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1751.581070][T16752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1751.587665][T16752] CR2: fffffffffffffffd CR3: 0000000066832000 CR4: 00000000003526e0 [ 1751.595653][T16752] Call Trace: [ 1751.598949][T16752] [ 1751.601894][T16752] __filemap_remove_folio+0xc4/0x7f0 [ 1751.607209][T16752] ? __rwlock_init+0x150/0x150 [ 1751.611993][T16752] ? __bpf_trace_file_check_and_advance_wb_err+0x150/0x150 [ 1751.619214][T16752] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1751.624334][T16752] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1751.629758][T16752] filemap_remove_folio+0xf1/0x2c0 [ 1751.634890][T16752] remove_inode_hugepages+0x5dc/0x1870 [ 1751.640386][T16752] ? do_raw_spin_unlock+0x121/0x230 [ 1751.645606][T16752] ? preempt_schedule+0xab/0xc0 [ 1751.650476][T16752] ? hugetlb_vmdelete_list+0x1c0/0x1c0 [ 1751.655961][T16752] ? up_write+0x1ec/0x410 [ 1751.660321][T16752] hugetlbfs_fallocate+0xd45/0x1090 [ 1751.665544][T16752] ? hugetlbfs_file_mmap+0x800/0x800 [ 1751.670846][T16752] ? preempt_schedule_thunk+0x1a/0x30 [ 1751.676254][T16752] ? sb_start_write+0x18a/0x1c0 [ 1751.681117][T16752] vfs_fallocate+0x58e/0x700 [ 1751.685717][T16752] do_madvise+0x15fe/0x3710 [ 1751.690272][T16752] ? madvise_set_anon_name+0x440/0x440 [ 1751.695847][T16752] ? schedule+0xc7/0x170 [ 1751.700098][T16752] ? futex_wait_queue+0x27/0x1b0 [ 1751.705044][T16752] ? futex_wait_queue+0x138/0x1b0 [ 1751.710074][T16752] ? futex_unqueue+0xcb/0xf0 [ 1751.714703][T16752] ? futex_wait+0x2b9/0x530 [ 1751.719222][T16752] ? futex_wait_setup+0x260/0x260 [ 1751.724279][T16752] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1751.730269][T16752] ? do_futex+0x2ff/0x3e0 [ 1751.734606][T16752] ? __ia32_sys_get_robust_list+0x90/0x90 [ 1751.740431][T16752] ? lock_chain_count+0x20/0x20 [ 1751.745301][T16752] ? __might_fault+0xaa/0x120 [ 1751.750008][T16752] ? lock_chain_count+0x20/0x20 [ 1751.754872][T16752] __x64_sys_madvise+0xa6/0xc0 [ 1751.759658][T16752] do_syscall_64+0x55/0xb0 [ 1751.764095][T16752] ? clear_bhb_loop+0x40/0x90 [ 1751.768781][T16752] ? clear_bhb_loop+0x40/0x90 [ 1751.773470][T16752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1751.779380][T16752] RIP: 0033:0x7fbd0bb8eec9 [ 1751.783806][T16752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1751.803604][T16752] RSP: 002b:00007fbd0c974038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1751.812040][T16752] RAX: ffffffffffffffda RBX: 00007fbd0bde6180 RCX: 00007fbd0bb8eec9 [ 1751.820037][T16752] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 1751.828016][T16752] RBP: 00007fbd0bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1751.836001][T16752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.843982][T16752] R13: 00007fbd0bde6218 R14: 00007fbd0bde6180 R15: 00007fff4dfea648 [ 1751.851993][T16752] [ 1751.855032][T16752] Modules linked in: [ 1751.858969][T16752] ---[ end trace 0000000000000000 ]--- [ 1751.864751][T16752] RIP: 0010:filemap_unaccount_folio+0x704/0xc60 [ 1751.871032][T16752] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 f5 b0 d2 ff e9 74 f9 ff ff e8 eb b0 d2 ff 48 89 df 48 c7 c6 20 24 b3 8a e8 dc 72 12 00 <0f> 0b e8 d5 b0 d2 ff 48 89 df 48 c7 c6 a0 29 b3 8a e8 c6 72 12 00 [ 1751.890655][T16752] RSP: 0018:ffffc90003ab73b8 EFLAGS: 00010046 [ 1751.896746][T16752] RAX: 59032e437ce04800 RBX: ffffea00012b8000 RCX: 59032e437ce04800 [ 1751.904835][T16752] RDX: 0000000000000005 RSI: ffffffff8aaace20 RDI: ffffffff8afc71c0 [ 1751.912836][T16752] RBP: ffffc90003ab7518 R08: ffffffff8e4a91af R09: 1ffffffff1c95235 [ 1751.920831][T16752] R10: dffffc0000000000 R11: fffffbfff1c95236 R12: 0000000000000040 [ 1751.928824][T16752] R13: 1ffffd4000257000 R14: 1ffffd4000257001 R15: ffffea00012b8008 [ 1751.936822][T16752] FS: 00007fbd0c9746c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1751.945765][T16752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1751.952360][T16752] CR2: fffffffffffffffd CR3: 0000000066832000 CR4: 00000000003526e0 [ 1751.960350][T16752] Kernel panic - not syncing: Fatal exception [ 1751.966773][T16752] Kernel Offset: disabled [ 1751.971107][T16752] Rebooting in 86400 seconds..