last executing test programs: 40m13.554450516s ago: executing program 32 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) 39m43.128917231s ago: executing program 33 (id=119): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000300)) 39m11.9926122s ago: executing program 34 (id=172): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 37m45.18909903s ago: executing program 35 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c054) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40) 37m24.323480657s ago: executing program 36 (id=304): socket(0xa, 0x3, 0x3a) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000021c0)=[{0xf, 0x9, 0x7, 0x7fff0000}]}) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r2, 0x0) 35m3.975049316s ago: executing program 37 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f00000003c0)) 34m16.688878641s ago: executing program 38 (id=591): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62", 0x94}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966b", 0x3}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 33m34.449385401s ago: executing program 39 (id=653): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000440)={0xa0, 0xa0, 0x300, 0x320, 0x5c81, 0xff, 0x2, 0x1, {0x1, 0x1000}, {0x8000, 0x3, 0x1}, {0x31a1, 0x5, 0x1}, {0x101, 0x4, 0x1}, 0x1, 0x10, 0x1, 0x3, 0x0, 0xffffff7b, 0xb, 0x0, 0x81, 0xa, 0x2, 0x9, 0x4, 0x4, 0x1, 0x3}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000150001"], 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 31m54.246404387s ago: executing program 40 (id=789): close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sigaltstack(&(0x7f0000000140)={0x0, 0x80000003}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x6cd, &(0x7f0000000c40)={0x0, 0xc09, 0x2, 0x2, 0x100a5}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2) 31m51.37115424s ago: executing program 41 (id=793): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x0, 0x0}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111, 0x8}}, 0x20) syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) 30m39.114502162s ago: executing program 42 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) dup(r1) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5c1041, 0x0, 0x14}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000280)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x6}, 0x3, 0x40, 0x9, 0x0, 0x20, 'syz1\x00', "92493f5902462c4d814e612652debc18ba3c738e9db8065cc41757d6739657fd", "c09c02c9fe79c56b9494a9dc68d36e1c88a4b798d74998c05d0ab989dd53da4b", [{0x2, 0x4, {0x3, 0x7fff}}, {0x200, 0x6, {0x3, 0x6}}, {0x0, 0x59, {0x1, 0x1}}, {0x800, 0x89d, {0x3, 0x6}}, {0xfffa, 0x5, {0x0, 0x5}}, {0xfffe, 0x4, {0x3, 0x7f}}, {0x3, 0x2, {0x2, 0xc6}}, {0xe44, 0x7, {0x2}}, {0x8, 0x98a4, {0x1, 0xfffffff9}}, {0x8, 0xff, {0x2, 0x7}}, {0xffff, 0x2, {0x1, 0x6}}, {0x9, 0xea5, {0x3, 0x4e7a}}, {0x800, 0x97f0, {0x2, 0x4}}, {0x559, 0x7, {0x3, 0x4}}, {0x9, 0x7, {0x2, 0xbfb8}}, {0x8000, 0x2, {0x0, 0x7ff}}, {0x1, 0x68c, {0x0, 0x3}}, {0xb345, 0x1, {0x2, 0x1}}, {0x5, 0x7, {0x1}}, {0x3, 0xfffe, {0x3, 0xa}}, {0x81, 0x6, {0x2, 0xffffffff}}, {0x6, 0x48, {0x2, 0xcc3}}, {0x4, 0xd7, {0x3, 0x1}}, {0xfff9, 0xfffd, {0x2, 0x7}}, {0x3ff, 0x6, {0x3, 0x8}}, {0x6, 0x5, {0x1, 0xc0}}, {0x1, 0xfff9, {0x0, 0xfbb}}, {0x200, 0xd0fd}, {0x0, 0x7, {0x3, 0x40}}, {0x7f, 0xe7, {0x0, 0xeb}}, {0xa, 0xfffa, {0x3, 0x800}}, {0x5, 0x8b, {0x1, 0xb}}, {0x1, 0x9, {0x1, 0xd}}, {0x8000, 0xeb3, {0x3, 0xe2}}, {0x3, 0x2, {0x0, 0x7}}, {0x5, 0x1, {0x1, 0x80000000}}, {0x9, 0x1, {0x0, 0x4}}, {0xffff, 0x3, {0x3, 0x43}}, {0x8, 0xfffb, {0x1, 0x2}}, {0x0, 0x6, {0x3, 0xde7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6(0xa, 0x3, 0x81) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x800, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc770xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 29m59.66205157s ago: executing program 44 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x53, 0x20040000) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 28m1.75775492s ago: executing program 45 (id=1081): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) 27m50.740256861s ago: executing program 46 (id=1102): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='gretap0\x00') memfd_create(0x0, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x56555958, 0x0, 0xd, [{}, {}, {}, {0x3, 0x3}, {}, {0x2000}]}}) 27m4.940454528s ago: executing program 48 (id=1136): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 26m44.943598209s ago: executing program 49 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, 0x0) 26m18.045815301s ago: executing program 50 (id=1198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x9f527ef601c99f49, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) r3 = socket$kcm(0x10, 0x2, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) io_uring_setup(0xf08, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x854}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 25m49.901661444s ago: executing program 51 (id=1227): syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 24m50.25437431s ago: executing program 52 (id=1272): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x8, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000000240)=0x7, 0x4, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) remap_file_pages(&(0x7f00007fa000/0x4000)=nil, 0x4000, 0x300000a, 0x800, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 24m44.767816044s ago: executing program 53 (id=1278): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000340), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 23m52.999678494s ago: executing program 54 (id=1346): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb71", 0x6c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, r1, 0x808, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x1ac20, 0x404}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4894}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 22m12.192222113s ago: executing program 55 (id=1422): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffffc9993152b3dfbbcf45080045000830000000000001907864010102ac1414aa0387907803000000450000000000fffc00040000000000000000"], 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x4a202, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0xff1f, 0x4000, 0x1}, 0x10) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x1, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffa, 0xf39e, 0xffffffff, 0x8, 0x40, 0x2000, 0xfffffff8]}) 22m5.447098655s ago: executing program 56 (id=1433): sendmsg$inet(0xffffffffffffffff, 0x0, 0xa00) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}], 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c2", 0x1}, {0x0}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xfffffff2}}, './file0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) 20m12.016703855s ago: executing program 57 (id=1578): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) connect$inet(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x4008044, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a0000000000"], 0x38}}, 0x0) 20m10.904425658s ago: executing program 58 (id=1565): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x800) process_vm_readv(0x0, &(0x7f0000002480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x6, 0x0, 0x100fff}) 19m30.86659599s ago: executing program 59 (id=1604): syz_open_dev$usbfs(0x0, 0x4, 0x101100) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) ftruncate(r3, 0x51a9497) request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1c30c1, 0x0) fchown(r1, 0x0, 0x0) fchown(r4, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 19m25.889927881s ago: executing program 60 (id=1612): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001380)={'syz1\x00', {0x5, 0x6, 0x3, 0x5}, 0x4f, [0x7ff, 0x80000000, 0x9, 0x8, 0xb9, 0x8, 0x968, 0x6, 0xff, 0x8, 0x9, 0x5, 0x4, 0xf1ca, 0x4d, 0x10, 0x1ffe000, 0x10, 0x2, 0x0, 0x3e980, 0x3ff, 0x9, 0x5, 0x10001, 0x28, 0x101, 0xf0000, 0x2, 0x0, 0x1dda1920, 0x6, 0x0, 0x8dc7, 0x90c, 0x3, 0x0, 0x6, 0x5, 0x9, 0x9f6, 0x2a41, 0x8001, 0x8, 0x8, 0xff, 0x5, 0x6, 0x0, 0x3, 0x1ff, 0x0, 0x0, 0x2b, 0x25, 0x2, 0xd9d, 0xffffffff, 0x8cf0, 0x2, 0x4, 0xf0, 0x6, 0x4], [0x9, 0x36, 0x0, 0x1, 0xd36, 0x800, 0x9, 0x5, 0x1, 0x4, 0x4, 0x3, 0x2, 0x4, 0x421, 0x1, 0x6, 0x1, 0x2, 0xd8, 0xfffffff9, 0x9, 0x100, 0x20000, 0x8, 0x4, 0x8, 0x8, 0x3, 0x1, 0x3, 0x9, 0x8, 0x93e, 0x1, 0x1e23, 0x8, 0x1, 0x6, 0x998e, 0x1ff, 0x58, 0x5, 0x3, 0x1, 0x0, 0x9, 0x9, 0x5, 0x200, 0x0, 0x0, 0x9, 0xff, 0x3, 0x4, 0xd, 0xfffffff9, 0x6, 0x5, 0x7, 0x0, 0x0, 0x7], [0x648, 0x200, 0xcf40, 0x1, 0x2, 0x3, 0x8, 0x5, 0x800, 0x7, 0xda57, 0xfffffbff, 0x6, 0xfffffffa, 0x0, 0x3ff, 0x0, 0xfffffffb, 0xfff, 0xc, 0x101, 0x4, 0x8001, 0xaa3b, 0x7, 0x8, 0x618, 0xf123, 0x0, 0x1, 0x5, 0x100, 0x3, 0x7, 0x4, 0x83, 0x800, 0x0, 0x7, 0x2, 0x74f, 0x4, 0x3ff, 0x8001, 0x2, 0x9, 0x504, 0x1, 0x7, 0xff, 0x6, 0x10000, 0x9, 0x2, 0xb, 0x2, 0x43, 0x4, 0x7, 0x1ff, 0xd, 0x6, 0x8, 0x3], [0xfffffff2, 0x4, 0x1000, 0xf, 0x80000001, 0x9, 0x1, 0x10, 0x0, 0x5, 0x4, 0x0, 0x55f739a0, 0x448, 0x1, 0x7, 0xfffffe00, 0x3, 0xe, 0xfe9, 0x2, 0x8, 0xee4, 0x8, 0x1, 0x7f, 0x6, 0x660, 0x2, 0x4, 0x72ee, 0x7, 0x1, 0x8, 0x10001, 0xc, 0xffffffff, 0x5f, 0x7fff, 0x1000, 0x3, 0x8000, 0x3ff, 0x1, 0xb, 0x3, 0x6, 0x80000001, 0x0, 0x200, 0x80, 0x7ee, 0x1000, 0x5, 0x6, 0xfdf, 0x2, 0x80000000, 0x8, 0x1ff, 0x6, 0xd, 0x9, 0x7f]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 16m52.607180076s ago: executing program 61 (id=1765): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000010400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) inotify_init() add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x2, 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) close_range(r4, 0xffffffffffffffff, 0x0) 15m47.413885154s ago: executing program 62 (id=1834): syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x10, 0x8000000000000000, 0xd}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000300)=0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) connect$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x37, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x40109441, &(0x7f0000000780)={{0x0, 0x2, 0x100, 0x3f, 0x8c2e, 0x0, 0x5, 0x3, 0x8, 0x800, 0xffffffff, 0xaa3, 0x6, 0x0, 0x5}}) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 15m37.449365903s ago: executing program 63 (id=1847): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$netlink(0x10, 0x3, 0x0) 15m6.647127601s ago: executing program 64 (id=1862): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) shutdown(r4, 0x0) recvmmsg(r4, 0x0, 0x0, 0x4002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 15m3.24033474s ago: executing program 65 (id=1865): socket$nl_generic(0x11, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x80}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u'], 0x17, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='fd\x00') syz_ublk_setup_io_uring(0x6548, &(0x7f0000000180)={0x0, 0x66b7, 0x1, 0x2, 0xd2}, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 12m5.203718384s ago: executing program 66 (id=2042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) mount$fuseblk(0x0, 0x0, 0x0, 0x20080a0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 11m54.873449845s ago: executing program 67 (id=2065): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0xffffffffffffff3d) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000380)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) r0 = syz_open_dev$rtc(0x0, 0xf0, 0x600) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xfff1}, {0xfff7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x8c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x8000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 11m38.806351651s ago: executing program 1 (id=2092): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2a00001, &(0x7f0000000140)=ANY=[@ANYBLOB="10e31ae92cd369ccb14419025e32a93f3f0221ad17cb8e7276b38f1bff5550ead98d8d3e00d73a2ec5d0b64fb4634618cbc6b75af5203017413b923f3456ea8c47aba9e8e625892c695e4746fb02b3c3b4aa00000000000000"], 0x1, 0x198, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000000440)="78fda1c6acf1ed4e6eec4d35b97c175a23268d2545a32c35c5cec63fcdbbbf2ea332b221104c4dbddd177172b6936d5b946210323ce6b78ca14c0f52560bb9866fa9fa389aeb775a55ce2487cd0c21ecf56c4ab738014618aeb1597c9be32b710e7673a696843f93d312855da03413b168863b92b1d109051fec901afba9aae85346b0daf69da67a6f0395ba8339fdb8533f482907126b4ce47d3d9ea342419e5997779458981240daf56e7fb1ad7fdad74597b20671b625748a3d66db7fe60e31cb566816c6f399de75d4d4f6c0e6392a3d2dfaef86000000000000000000000000000000d8f0f0e9a7c240edf99c18190fe6c5", 0xf4, 0x300000f0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11m36.319779907s ago: executing program 1 (id=2096): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) 11m32.087410378s ago: executing program 1 (id=2099): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000000c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) 11m29.633128687s ago: executing program 1 (id=2100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000010400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r3, 0x400, 0x0) inotify_init() add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x2, 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, &(0x7f0000000f80)=""/4115, 0x2e, 0x1013, 0x1}, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 11m18.343695064s ago: executing program 68 (id=2097): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r1, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0x5fae, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x1906) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) 11m13.436299443s ago: executing program 69 (id=2100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000010400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r3, 0x400, 0x0) inotify_init() add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x2, 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, &(0x7f0000000f80)=""/4115, 0x2e, 0x1013, 0x1}, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 9m7.466478027s ago: executing program 4 (id=2240): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x458, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x12, 0x40, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote, [], 0x0, 0x0, 0x0, 0x0, 0x4, 0x13}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {@ipv4=@multicast2, [0x0, 0x0, 0xff000000], @ipv4=@multicast1, [0x0, 0xff], 0x4d6, 0x0, 0x0, 0x0, 0x9}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@broadcast, [0x0, 0x0, 0xffffff00]}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syslog(0x3, &(0x7f0000000900), 0x0) 9m4.317164197s ago: executing program 4 (id=2241): connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x0, './cgroup\x00'}, 0x6e) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x0) r0 = msgget$private(0x0, 0x80) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) msgsnd(r0, &(0x7f0000003a00)={0x1}, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xa820, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) socket$packet(0x11, 0xa, 0x300) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000040)={0x1, 0x1, 0x1000, 0x1, &(0x7f00000006c0)="ca", 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f0000000040), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x0) 8m47.506869349s ago: executing program 70 (id=2241): connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x0, './cgroup\x00'}, 0x6e) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x0) r0 = msgget$private(0x0, 0x80) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) msgsnd(r0, &(0x7f0000003a00)={0x1}, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xa820, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) socket$packet(0x11, 0xa, 0x300) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000040)={0x1, 0x1, 0x1000, 0x1, &(0x7f00000006c0)="ca", 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f0000000040), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x0) 7m52.295335619s ago: executing program 71 (id=2288): fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 7m3.910032759s ago: executing program 72 (id=2346): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000030c0)=@nat={'nat\x00', 0x19, 0x4, 0xff8, [0x200020c0, 0x0, 0x0, 0x200020f0, 0x2000231e], 0x0, 0x0, &(0x7f00000020c0)=ANY=[]}, 0x78) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={r3, 0xd0}, &(0x7f0000000b00)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000002080)=0x1, 0x4) 5m50.068265235s ago: executing program 73 (id=2418): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x4986, 0xff}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) chdir(&(0x7f00000000c0)='./bus\x00') r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r5, 0x0, 0x0, 0x2000, 0x0, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) 5m29.572474304s ago: executing program 74 (id=2436): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6d61703d61636f726e2c6e6f636f6d7073657373006e6f726f636b2c6f76657204922856b097d3e74272696465726f636b7065726d2c6d6117d78fb622703d6e6f726d616c275f75013d7d60a467b86376e2c62d060dd59d160537d205e3947ffb35db72b68ab36ab5b148a3e1e7909de4c967c40033c2174e98411fc7064da9ceb3c504e0900055cc52dc04621d525e767c99ee9466f0e79c977bbb134362c720fa7b782cabcaae94c06db359f69945d7ea85bbd8a9e16d9187cb455675164d4c1065004c406c7185194f023438c245a60591ef62cb4c953c5cf15a0d7a9909072b968f83d6f6cc37a620f966b58316889f8ec29944eb71024be0ea4fd1e5afa5680ec675504f016ba5a6a92701b4c3f35224957e426add6b83e1e65c4a2b7a43ee551a220fda76751f0df1528156f56650e85a9a3c755aa352f9db239401ed37f5b0ebd5ad4c4210", @ANYRESHEX=0x0, @ANYBLOB='Asession=0x0000000000000018,unhide,unhide,overriderockperm,cruft,map=normal,cruft,\x00'], 0x2, 0x6b1, &(0x7f0000000840)="$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") r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) ioperm(0x0, 0x2, 0x7e) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000100)='-1\x00', 0x2) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) getdents64(r1, 0x0, 0x0) 4m38.081530279s ago: executing program 4 (id=2463): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r3 = fsopen(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(r3, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) 4m34.978439214s ago: executing program 1 (id=2435): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x5, 0x0, 0x0, 'queue0\x00', 0x12}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x76421000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x8c) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x102) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x0, 0x2, 0x1, r0}}}, 0x28) 4m33.761020542s ago: executing program 4 (id=2505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) mount$fuseblk(0x0, 0x0, 0x0, 0x20080a0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 4m30.637861785s ago: executing program 1 (id=2507): exit(0x1f52b4ba) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x404000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'batadv_slave_0\x00', 0x1000}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f00000006c0), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000140)={0x8, 0x4, 0x1, 0xffffffff, '\x00', 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x20000080) 4m28.517838575s ago: executing program 4 (id=2508): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x3, {{0xa, 0x0, 0xfffffffe, @mcast1, 0x2}}, {{0xa, 0x4e21, 0x7fff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x90) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0x28}, 0x28) bind$netlink(r2, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x3}, 0x0, 0xffdd, 0x0, 0xc4a4, 0xa}, {0x3, 0x0, 0x4, 0x0, 0x4}, {0x0, 0x4, 0x1, 0x5}, 0xfffffffe, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 4m24.889964487s ago: executing program 4 (id=2511): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0x41, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, 0x0, 0x8800) ioctl$TIOCSETD(r1, 0x5423, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) setsockopt$sock_int(r6, 0x1, 0x52, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f0000000180)) 4m14.906453175s ago: executing program 75 (id=2507): exit(0x1f52b4ba) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x404000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'batadv_slave_0\x00', 0x1000}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f00000006c0), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000140)={0x8, 0x4, 0x1, 0xffffffff, '\x00', 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x20000080) 4m8.693599912s ago: executing program 76 (id=2511): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0x41, 0x5c8, &(0x7f00000006c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, 0x0, 0x8800) ioctl$TIOCSETD(r1, 0x5423, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) setsockopt$sock_int(r6, 0x1, 0x52, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f0000000180)) 3m52.483112346s ago: executing program 9 (id=2543): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x2) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x83, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) 3m47.883197098s ago: executing program 9 (id=2547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03900000000000160000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x20000084) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x100) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d00", 0x22) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = msgget$private(0x0, 0x508) msgsnd(r7, &(0x7f00000000c0)={0x1}, 0x8, 0x800) msgrcv(r7, &(0x7f00000004c0)={0x0, ""/179}, 0xbb, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 3m44.675321075s ago: executing program 9 (id=2555): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5f3774350000d9"], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="958102dfffffff00"], 0x0, &(0x7f00000001c0), &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0xea0}}}}, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x804810, &(0x7f0000000040)={[{@nodioread_nolock}]}, 0x26, 0x756, &(0x7f0000000e80)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = gettid() tkill(r2, 0x7) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000300)={0x7fff, 0xb5315241, 0xd39, 0x8a, 0x1, @discrete={0xfffffff9, 0x80000001}}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa0000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) 3m41.408671068s ago: executing program 9 (id=2561): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x7, 0x7, 0x7, 0x10001}, {0x0, 0x5, 0x7, 0x3}]}) socket$inet6(0xa, 0x80001, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/packet\x00') syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "e2de05c902360f86e75a821bcf5b859ff9a7d897b9543200a520aa171d800035e40e875cc2d3e8c2fd1e1dd1cddc4e2b5cb8448c7b96f1773251246efa165402277af176b67a8ec0737ca9c70e7edaa7a242f2da489643991555bdce6242de1681f683db20c332829cce788a79a6c62647d1926b8608d17365feb1f8cb455d42039d73e572abb968168270d54f0403b7e27cd878a49523cab769eb2d86"}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x40, 0x10, 0x17, "4a8749b80a01381837eadc555d3280f6cf2304b2b7bf80"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000940)={0x20, 0x81, 0x3, "ad72d5"}, &(0x7f0000000980)={0x20, 0x82, 0x1, "95"}, &(0x7f00000009c0)={0x20, 0x83, 0x3, "b594a1"}, &(0x7f0000000a00)={0x20, 0x84, 0x4, "12f78f5c"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "add6d2"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) unshare(0x6020480) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000500)=""/198, 0xc6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3m38.030739369s ago: executing program 9 (id=2564): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x8e, "7a58bea88a00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x7) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x2, 0x1, 0x80}, 0x20) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x65}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendfile(r8, r8, 0x0, 0x81) 3m35.490073784s ago: executing program 9 (id=2566): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x3}, {0x20, 0x3}}, 0x24, 0x1) mknodat$null(0xffffffffffffff9c, 0x0, 0x40, 0x103) read$FUSE(0xffffffffffffffff, &(0x7f0000004c80)={0x2020}, 0x2020) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x1001020, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/166, 0xa6}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/51, 0x33}, {&(0x7f0000000540)=""/26, 0x1a}, {&(0x7f0000000580)=""/241, 0xf1}], 0x9}, 0x3a9f}], 0x2, 0x0, 0x0) shutdown(r0, 0x0) 3m28.56516094s ago: executing program 2 (id=2573): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) fcntl$setlease(r4, 0x400, 0x2) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x0, 0x2, 0x0) 3m26.458058334s ago: executing program 2 (id=2574): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, 0x0, 0x0, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000029a, 0x0) socket$inet6(0xa, 0x3, 0xff) 3m24.601710872s ago: executing program 2 (id=2579): io_setup(0x5, &(0x7f0000000000)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="020b08030200200027bd7000fcdbdf25"], 0x10}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) acct(0x0) socket(0x23, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m17.310923736s ago: executing program 77 (id=2566): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x3}, {0x20, 0x3}}, 0x24, 0x1) mknodat$null(0xffffffffffffff9c, 0x0, 0x40, 0x103) read$FUSE(0xffffffffffffffff, &(0x7f0000004c80)={0x2020}, 0x2020) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x1001020, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/166, 0xa6}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/51, 0x33}, {&(0x7f0000000540)=""/26, 0x1a}, {&(0x7f0000000580)=""/241, 0xf1}], 0x9}, 0x3a9f}], 0x2, 0x0, 0x0) shutdown(r0, 0x0) 3m16.062891135s ago: executing program 2 (id=2585): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) msgsnd(r3, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3m11.88486165s ago: executing program 2 (id=2590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x4d, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000122, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) read$FUSE(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) 3m7.433660471s ago: executing program 2 (id=2593): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYRESHEX=r0], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4020004) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 1m27.455033202s ago: executing program 5 (id=2681): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="10000700000000f7876d6051a4005849a5c3cb00fe78"], 0x2c, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file1\x00', 0x1a8) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe2$watch_queue(&(0x7f0000000040), 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) 1m21.870913894s ago: executing program 8 (id=2685): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 1m19.020480719s ago: executing program 5 (id=2688): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x3000) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) r5 = socket$kcm(0x2c, 0x3, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x6, &(0x7f0000000000)=r6, 0x4) close(0x3) 1m5.805778658s ago: executing program 8 (id=2700): syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x6, 0x1, 0x5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r9, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 1m5.794804451s ago: executing program 5 (id=2702): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f0000000180)=[{0x7, 0x4, 0x20, 0x1000}]}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffba83) r6 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000540)="bc3009bb66", 0x5, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x34}}, 0x0) 1m1.419866235s ago: executing program 5 (id=2691): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 1m1.394030534s ago: executing program 8 (id=2692): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r0 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioprio_get$pid(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) ioctl$COMEDI_UNLOCK(r2, 0x6406) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x40000000015, 0x5, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$inet6(0xa, 0x80003, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 56.890878289s ago: executing program 8 (id=2696): r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xffffffffffffffff) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) read$msr(r5, &(0x7f000001aa40)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) fsopen(0x0, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xbc}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) 51.374000032s ago: executing program 5 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xcbb6, 0x218203) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000040)=0xee6e) r6 = fsmount(r4, 0x0, 0x1) fchdir(r6) symlink(0x0, &(0x7f0000000240)='./file0\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 51.327180874s ago: executing program 8 (id=2707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000240)="c1", 0x1}], 0x1) recvfrom$inet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008000", @ANYRESOCT], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003340)=ANY=[@ANYBLOB='H\x00', @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8], 0x48}}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0xee00, @ANYBLOB='\x00'/88], 0x1ac}, 0x1, 0x0, 0x0, 0x9004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x2108, 0x6, 0x3}, 0x18, 0x3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000040)={0x80c0, r0}, 0x0) 48.90116617s ago: executing program 6 (id=2709): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="831026bd7000fcdbdf251600000018000180140002006e657464657673696d300000000000000500030000000000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0205710, &(0x7f0000000140)={0x0, 0xcf, 0x9e, 0x1, 0x6}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 46.932584997s ago: executing program 8 (id=2712): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1/file0\x00', 0x1000000, &(0x7f00000000c0)={[{@prjquota}, {@nojournal_checksum}]}, 0x1, 0x525, &(0x7f0000000b80)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x12, &(0x7f00000002c0)=0x1010001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)='\x00\x00') r3 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) write$UHID_INPUT(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, 0x0, 0x2000c000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) 44.577279257s ago: executing program 6 (id=2715): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Z', 0x1}], 0x1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x82, {0x0, 0x1}, {0x47, 0x102}, @cond=[{0x400, 0x7, 0x4, 0xff, 0x8, 0xdf1}, {0x2, 0x3f, 0x4, 0x4, 0xdb60, 0x7fff}]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x103, 0x3, 0x7, 0x40, 'syz1\x00'}, 0x0, [0x0, 0x4, 0x56, 0x0, 0x4, 0x1, 0x400, 0xfff, 0x7, 0xfffffffffffffff7, 0x8, 0x6, 0x4, 0xffffffffffffffff, 0xd, 0x4, 0xa000000000000, 0x2, 0x8, 0xfffffffffffffff2, 0x9, 0x3, 0x4ce4, 0x0, 0x9, 0x800, 0x6, 0x800, 0x0, 0x8000000000000000, 0x5, 0x14d3, 0x64f5, 0x2, 0xe7b7, 0x3, 0x765f, 0x80000001, 0x80000001, 0x7ff, 0x3, 0x60dd, 0xffffffffffffffff, 0x9, 0x2, 0x9093, 0x4, 0x7, 0x4ec2, 0x0, 0xed, 0x0, 0x6, 0x3, 0x7, 0x7, 0x8, 0x6, 0x7, 0x4, 0x10, 0x6, 0x9, 0x101, 0x5, 0x4, 0xffffffffffff8000, 0x5, 0x4, 0xe055, 0xd9d, 0x2, 0x3ff, 0x4, 0x80000000, 0x800, 0x1, 0x87d6, 0x7565258a, 0x2, 0x3ff, 0x0, 0x1, 0x401, 0x9, 0x80000001, 0x7, 0x6, 0x7, 0x3, 0x1, 0x0, 0x200, 0x80000001, 0x7, 0x100, 0x2, 0x100000000, 0x2, 0x9, 0x2000000000000007, 0x4, 0x3, 0x100000000, 0x4, 0x1, 0x2b68, 0x1, 0x8000, 0xfffffffffffeffff, 0x61, 0x2, 0x3, 0x100000000, 0x0, 0x6, 0x1, 0x1, 0x9, 0x3, 0xffc0000000000000, 0x10001, 0x3, 0x7, 0x4822, 0x6, 0x39, 0x17800000000000]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r6, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0xcc, r3, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, {0x2c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xfc}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x7, 0x7}}]}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0x0, 0x2, 0x9, 0x1ff}}}, @fils_params, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x3, 0x3, 0x0, {0x1685, 0x1, 0x0, 0x9f, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x5, 0x7}}, @NL80211_ATTR_BSS_SELECT={0x40, 0xe3, 0x0, 0x1, {0x3c, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x3}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xe, 0xb}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x2}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}]}}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000881}, 0x15) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x8954, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x40) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) 42.203185117s ago: executing program 6 (id=2719): socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) setpriority(0x0, r0, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket(0xa, 0x1, 0x0) r5 = fanotify_init(0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x455, 0x8000003, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) 39.341355043s ago: executing program 6 (id=2720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) gettid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 37.817900335s ago: executing program 6 (id=2722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xb, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, &(0x7f0000000580)=""/245, 0xf5) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24000094, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000f80)=ANY=[], 0x540) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) syz_ublk_setup_io_uring(0x2, &(0x7f0000000340)={0x0, 0x81ad, 0x2000, 0x1, 0x3e6, 0x0, r7}, &(0x7f0000000400), &(0x7f0000000480), &(0x7f0000000440)) 34.77717305s ago: executing program 79 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xcbb6, 0x218203) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000040)=0xee6e) r6 = fsmount(r4, 0x0, 0x1) fchdir(r6) symlink(0x0, &(0x7f0000000240)='./file0\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 34.717225224s ago: executing program 6 (id=2727): r0 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x1, 0x3, 0x276}) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) preadv(r1, 0x0, 0x0, 0x1000, 0x3f2f0fde) mkdir(0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000400)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/160) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.32621432s ago: executing program 80 (id=2712): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1/file0\x00', 0x1000000, &(0x7f00000000c0)={[{@prjquota}, {@nojournal_checksum}]}, 0x1, 0x525, &(0x7f0000000b80)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x12, &(0x7f00000002c0)=0x1010001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)='\x00\x00') r3 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) write$UHID_INPUT(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, 0x0, 0x2000c000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) 23.405038357s ago: executing program 7 (id=2738): syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r1, 0x0, 0x0, 0x1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="160000001f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b", 0xf9}, {&(0x7f0000001480)="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", 0xfd9}], 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r5 = gettid() ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94}) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000)) 17.86076236s ago: executing program 81 (id=2727): r0 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x1, 0x3, 0x276}) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) preadv(r1, 0x0, 0x0, 0x1000, 0x3f2f0fde) mkdir(0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000400)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/160) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.832302863s ago: executing program 7 (id=2742): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f00000000c0)={[{@i_version}, {@sysvgroups}, {@sysvgroups}, {@lazytime}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.bfq.io_queued_recursive\x00'}}]}, 0xee, 0x4a6, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'nicvf0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000736e030863cc9b204ebfca01bd897265e1e800ad7fa664edc590dfcfb3ed81797b6"], 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) write$binfmt_format(r4, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x310) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') read$FUSE(r5, &(0x7f0000002340)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4087, 0xff7) 16.97808739s ago: executing program 7 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f00000008c0), 0x0, 0x4, 0x0) connect$unix(r2, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r4, 0x0, 0x58) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) 16.930454038s ago: executing program 0 (id=2744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) close_range(r2, r3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x1, 0x106) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100, 0x264001) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x220000, 0x80) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) r6 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x2, 0x1b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xc1, 0x91, 0x1, 0x8, 0x10b8, 0x1f98, 0x3da2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x2, 0x58, 0x90, 0x5}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="f194b5000000d16865309ce8c626e686ecfd2e9dedc21d070f09f175c04552ff22e7011b6493e911eaa0c06423367d52994a5e87aa444fd5781990e8566159d9c3b1d9f33ec1d7fedd6a30060a35464764060d9cac95b9b1d0d873bf36fa38ef9852becf130f70e5c8f6552a2a77e05d8f024667273972de990c4d9bc38d533aaaef9451b65eef7f84f83ce1fc0d30ff4264ac5386578b26e3fc8d42e0008333d62bd711c39ff61f4c047921bac338de503af81421b712018dcfad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) 15.560603416s ago: executing program 7 (id=2745): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r1 = epoll_create(0x8) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r4 = fcntl$getown(r1, 0x9) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000480)={0x20022c00, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), {0x31}, &(0x7f00000002c0)=""/247, 0xf7, &(0x7f00000003c0)=""/13, &(0x7f0000000400)=[r4, r4, r5], 0x3, {r6}}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r8, 0xc0a85352, &(0x7f00000008c0)={{0xc6, 0x4}, 'port1\x00', 0x189, 0x40000, 0x6, 0xfffffeff, 0x10, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28, 0x2}) close_range(r7, 0xffffffffffffffff, 0x0) 13.006304566s ago: executing program 0 (id=2746): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4008000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 12.827024789s ago: executing program 3 (id=2747): socket(0x10, 0x80002, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sync_file_range(r2, 0x4179, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r5 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x7) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x2, 0x1, 0x80}, 0x20) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x65}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendfile(r8, r8, 0x0, 0x81) 8.464735729s ago: executing program 0 (id=2749): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}, {@xino_off}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x5, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) 8.464351594s ago: executing program 3 (id=2750): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x27, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x29) chdir(0x0) r4 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$read(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x80, 0x2, @loopback, 0x2}, 0x1c) r6 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r6, 0x3a, 0x1, 0x0, 0xffffffffffffffbf) 5.195304628s ago: executing program 3 (id=2751): close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 5.104439072s ago: executing program 0 (id=2752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x11, 0x1a3, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x800, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) chdir(&(0x7f0000000400)='./file0\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r2, @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x6}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240), 0x0, 0xfffffffffffffff8) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0xffffffffffffffff) r8 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r8, r8, r8}, 0xffffffffffffffff, 0x8d, &(0x7f0000000000)={&(0x7f0000000280)={'sha256\x00'}}) 4.238528655s ago: executing program 7 (id=2753): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsopen(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x5, 0x0, &(0x7f00000002c0)="b800000500", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) fsopen(&(0x7f0000000140)='vxfs\x00', 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000200)=0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x7577e0b0a29503e5) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @multicast2, 0x0, 0x0, 'sed\x00'}, 0x2c) 3.241934262s ago: executing program 3 (id=2754): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) prlimit64(r0, 0xc, 0x0, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 2.75404928s ago: executing program 0 (id=2755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000008c0)={[{@quota}, {@mb_optimize_scan}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup(r5, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r6 = fspick(r5, &(0x7f0000000100)='./file0\x00', 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r6}, 0x18) 1.945245094s ago: executing program 3 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f00000008c0), 0x0, 0x4, 0x0) connect$unix(r2, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r4, 0x0, 0x58) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) 333.158562ms ago: executing program 3 (id=2757): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = io_uring_setup(0x6c9a, &(0x7f0000000000)={0x0, 0x7645, 0x80, 0x3, 0x39e}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0xffffffffffffffff, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x7d5, 0x18}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 0s ago: executing program 0 (id=2758): socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0xa, '\x00', @data, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @svalue=0xfffffffffffffff8}]}, 0x7fe}]}) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) kernel console output (not intermixed with test programs): 1) entered disabled state [ 2138.992923][T21328] bridge_slave_1: entered allmulticast mode [ 2139.034100][T21328] bridge_slave_1: entered promiscuous mode [ 2139.292360][T21328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2140.768218][T21328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2141.656549][T21328] team0: Port device team_slave_0 added [ 2141.864800][T21328] team0: Port device team_slave_1 added [ 2142.670027][T21328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2142.677363][T21328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2142.825263][T21328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2143.284379][T21328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2143.321721][T21328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2143.434862][T21328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2146.514280][T21592] loop8: detected capacity change from 0 to 2048 [ 2146.742717][T21328] hsr_slave_0: entered promiscuous mode [ 2146.750852][T21328] hsr_slave_1: entered promiscuous mode [ 2146.758012][T21328] debugfs: 'hsr0' already exists in 'hsr' [ 2146.764697][T21328] Cannot create hsr debugfs directory [ 2146.833989][T21592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2146.954970][T16314] bridge_slave_1: left allmulticast mode [ 2146.992278][T16314] bridge_slave_1: left promiscuous mode [ 2147.027637][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2147.099089][T16314] bridge_slave_0: left allmulticast mode [ 2147.157632][T16314] bridge_slave_0: left promiscuous mode [ 2147.278774][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2147.877846][T21606] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2150.838951][T21592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2150.932214][T16606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2150.956791][T16606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2150.974925][T16606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2152.427762][T16606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2152.435855][T16606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2154.813541][T13607] Bluetooth: hci0: command tx timeout [ 2157.524533][T13607] Bluetooth: hci0: command tx timeout [ 2159.561874][T13607] Bluetooth: hci0: command tx timeout [ 2160.053567][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.063822][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.243812][T16314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2160.720089][T16314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2162.801489][T13607] Bluetooth: hci0: command tx timeout [ 2162.801539][T18845] Bluetooth: hci4: command 0x0406 tx timeout [ 2162.925921][T16314] bond0 (unregistering): Released all slaves [ 2163.530509][T18845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2163.556693][T18845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2163.607179][T18845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2163.933181][T18845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2163.946049][T18845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2164.105017][T21592] syz_tun (unregistering): left allmulticast mode [ 2166.777691][T13607] Bluetooth: hci5: command tx timeout [ 2168.000175][T13607] Bluetooth: hci2: command 0x0406 tx timeout [ 2168.693636][T16314] hsr_slave_0: left promiscuous mode [ 2168.749854][T16314] hsr_slave_1: left promiscuous mode [ 2168.768249][T16314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2168.973537][T18845] Bluetooth: hci5: command tx timeout [ 2172.018507][T18845] Bluetooth: hci5: command tx timeout [ 2172.068989][T16314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2172.211413][T16314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2172.300532][T16314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2172.503588][T16314] veth1_macvtap: left promiscuous mode [ 2172.531785][T21748] fuse: Invalid rootmode [ 2172.579367][T16314] veth0_macvtap: left promiscuous mode [ 2172.715421][T16314] veth1_vlan: left promiscuous mode [ 2172.818650][T16314] veth0_vlan: left promiscuous mode [ 2174.039908][T18845] Bluetooth: hci5: command tx timeout [ 2174.556271][T16314] team0 (unregistering): Port device team_slave_1 removed [ 2175.008518][T16314] team0 (unregistering): Port device team_slave_0 removed [ 2176.035023][T21625] lo speed is unknown, defaulting to 1000 [ 2176.150988][T21687] lo speed is unknown, defaulting to 1000 [ 2177.613771][T16314] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.855142][T16314] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.986097][T21625] bridge0: port 1(bridge_slave_0) entered blocking state [ 2177.995871][T21625] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.004041][T21625] bridge_slave_0: entered allmulticast mode [ 2178.012785][T21625] bridge_slave_0: entered promiscuous mode [ 2178.087927][T16314] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.112699][T21625] bridge0: port 2(bridge_slave_1) entered blocking state [ 2178.122816][T21625] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.130734][T21625] bridge_slave_1: entered allmulticast mode [ 2178.142341][T21625] bridge_slave_1: entered promiscuous mode [ 2178.213826][T16314] netdevsim netdevsim8 netdevsim0 (unregistering): left allmulticast mode [ 2178.229785][T16314] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.302726][T21625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2178.352936][T21625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2178.441300][T21687] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.448719][T21687] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.459970][T21687] bridge_slave_0: entered allmulticast mode [ 2178.469114][T21687] bridge_slave_0: entered promiscuous mode [ 2178.487812][T21625] team0: Port device team_slave_0 added [ 2178.495199][T21687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2178.503150][T21687] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.510762][T21687] bridge_slave_1: entered allmulticast mode [ 2178.521216][T21687] bridge_slave_1: entered promiscuous mode [ 2178.550904][T21625] team0: Port device team_slave_1 added [ 2178.592325][T21687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2178.688254][T21687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2178.798189][T21625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2178.805197][T21625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2178.833286][T21625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2178.852130][T21687] team0: Port device team_slave_0 added [ 2178.871505][T21687] team0: Port device team_slave_1 added [ 2178.911345][T21625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2178.919362][T21625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2178.947726][T21625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2179.108489][T21687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2179.117555][T21687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2179.144617][T21687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2179.173599][T21625] hsr_slave_0: entered promiscuous mode [ 2179.180571][T21625] hsr_slave_1: entered promiscuous mode [ 2179.189029][T21687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2179.196960][T21687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2179.223428][T21687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2179.246712][T16314] bridge_slave_1: left allmulticast mode [ 2179.252434][T16314] bridge_slave_1: left promiscuous mode [ 2179.258523][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2179.268785][T16314] bridge_slave_0: left allmulticast mode [ 2179.275702][T16314] bridge_slave_0: left promiscuous mode [ 2179.281887][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.295204][T16314] bridge_slave_1: left allmulticast mode [ 2179.301085][T16314] bridge_slave_1: left promiscuous mode [ 2179.308068][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2179.318241][T16314] bridge_slave_0: left allmulticast mode [ 2179.324760][T16314] bridge_slave_0: left promiscuous mode [ 2179.332534][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.491756][T16314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2179.502991][T16314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2179.513745][T16314] bond0 (unregistering): Released all slaves [ 2179.715485][T16314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2179.728532][T16314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2179.740517][T16314] bond0 (unregistering): Released all slaves [ 2179.755682][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 2180.033140][T21687] hsr_slave_0: entered promiscuous mode [ 2180.042527][T21687] hsr_slave_1: entered promiscuous mode [ 2180.053052][T21687] debugfs: 'hsr0' already exists in 'hsr' [ 2180.059308][T21687] Cannot create hsr debugfs directory [ 2180.346088][T16314] hsr_slave_0: left promiscuous mode [ 2180.357625][T16314] hsr_slave_1: left promiscuous mode [ 2180.363760][T16314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2180.372845][T16314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2180.386223][T16314] hsr_slave_0: left promiscuous mode [ 2180.393534][T16314] hsr_slave_1: left promiscuous mode [ 2180.401881][T16314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2180.409666][T16314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2180.421889][T16314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2180.429892][T16314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2180.465343][T16314] veth1_macvtap: left promiscuous mode [ 2180.471182][T16314] veth0_macvtap: left promiscuous mode [ 2180.477201][T16314] veth1_vlan: left promiscuous mode [ 2180.483006][T16314] veth0_vlan: left promiscuous mode [ 2180.693222][T16314] team0 (unregistering): Port device team_slave_1 removed [ 2180.722704][T16314] team0 (unregistering): Port device team_slave_0 removed [ 2180.920924][T16314] pim6reg (unregistering): left allmulticast mode [ 2181.168388][T16314] team0 (unregistering): Port device team_slave_1 removed [ 2181.189432][T16314] team0 (unregistering): Port device team_slave_0 removed [ 2181.363444][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18 [ 2182.262037][ T5283] 8021q: adding VLAN 0 to HW filter on device eth19 [ 2182.385487][T21625] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2182.402854][T21625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2182.562958][T21625] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2182.574147][T21625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2182.583012][T21625] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2182.594767][T21625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2182.622585][T21625] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2182.642853][T21625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2182.988429][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20 [ 2183.044575][T21625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2183.181440][T21625] 8021q: adding VLAN 0 to HW filter on device team0 [ 2183.226009][T21650] bridge0: port 1(bridge_slave_0) entered blocking state [ 2183.233266][T21650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2183.246057][T21650] bridge0: port 2(bridge_slave_1) entered blocking state [ 2183.253260][T21650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2183.436462][T21687] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2183.452425][T21687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2183.468077][T21687] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2183.481519][T21687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2183.500110][T21687] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2183.513166][T21687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2183.537522][T21687] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2183.554171][T21687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2183.771096][T21687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2183.809894][T21687] 8021q: adding VLAN 0 to HW filter on device team0 [ 2183.834173][T21381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2183.841572][T21381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2183.886779][T21381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2183.894578][T21381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2184.194975][T21625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2184.844117][T21625] veth0_vlan: entered promiscuous mode [ 2184.864775][T21625] veth1_vlan: entered promiscuous mode [ 2184.928052][T21625] veth0_macvtap: entered promiscuous mode [ 2184.942818][T21625] veth1_macvtap: entered promiscuous mode [ 2184.977522][T21687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2184.998672][T21625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2185.032684][T21625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2185.059327][T21381] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.074553][T21381] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.099549][T21381] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.110739][T21381] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.314732][T21687] veth0_vlan: entered promiscuous mode [ 2185.355371][T21687] veth1_vlan: entered promiscuous mode [ 2185.370216][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2185.387904][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2185.464561][T16314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2185.491363][T16314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2185.493947][T21687] veth0_macvtap: entered promiscuous mode [ 2185.539505][T21687] veth1_macvtap: entered promiscuous mode [ 2185.597556][T21687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2185.698578][T21687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2187.168651][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2187.229733][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2187.433950][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2187.516868][T21964] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2362'. [ 2188.006553][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.194335][T21975] loop5: detected capacity change from 0 to 128 [ 2190.356919][T21975] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2190.371809][T21975] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2190.923447][T21987] fuse: fd is not a fuse device [ 2190.974041][T16314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2191.143620][T16314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2191.491644][T14415] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2191.638727][T16314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2191.669351][T16314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.874888][T22016] loop5: detected capacity change from 0 to 512 [ 2194.959758][T22016] EXT4-fs: Ignoring removed orlov option [ 2194.989402][T22016] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2195.024094][T22016] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2196.657420][T22016] EXT4-fs (loop5): 1 truncate cleaned up [ 2196.718644][T22016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2197.934294][T22037] smc: net device vcan0 applied user defined pnetid SYZ1 [ 2197.943683][T22037] smc: net device vcan0 erased user defined pnetid SYZ1 [ 2197.998051][T14415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2199.337845][ T5769] IPVS: starting estimator thread 0... [ 2199.409081][T22055] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2406'. [ 2200.204326][T22053] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 2200.247740][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 2201.146248][T22054] IPVS: using max 25 ests per chain, 60000 per kthread [ 2205.191017][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2415'. [ 2205.200409][T22081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2415'. [ 2206.470526][T22085] overlayfs: failed to clone upperpath [ 2213.840740][T22124] futex_wake_op: syz.3.2424 tries to shift op by 144; fix this program [ 2217.226938][T22159] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2426'. [ 2217.922124][T22158] /dev/sg0: Can't lookup blockdev [ 2220.674184][T22177] loop5: detected capacity change from 0 to 512 [ 2221.218468][T22180] Invalid ELF header type: 1027 != 1 [ 2221.445430][T22177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2221.454069][T22177] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 2221.479408][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.485863][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.537419][T22175] xt_CONNSECMARK: invalid mode: 0 [ 2221.615700][T20641] libceph: connect (1)[c::]:6789 error -101 [ 2222.522353][T20641] libceph: mon0 (1)[c::]:6789 connect error [ 2222.536527][T22177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 2222.595798][T22177] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.2431: Allocating blocks 41-42 which overlap fs metadata [ 2222.611015][T22177] loop5: lost filesystem error report for type 5 error -117 [ 2222.616524][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 2222.630629][ C1] EXT4-fs (loop5): initial error at time 2000001421: ext4_mb_mark_diskspace_used:4221 [ 2222.640373][ C1] EXT4-fs (loop5): last error at time 2000001421: ext4_mb_mark_diskspace_used:4221 [ 2222.650773][T22177] Quota error (device loop5): write_blk: dquota write failed [ 2222.658763][T22177] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 2222.670695][T22177] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.2431: Allocating blocks 41-42 which overlap fs metadata [ 2222.685053][T22177] loop5: lost filesystem error report for type 5 error -117 [ 2222.710334][T22177] Quota error (device loop5): write_blk: dquota write failed [ 2222.725429][T22177] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2222.735513][T22177] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.2431: Failed to acquire dquot type 1 [ 2222.747212][T22177] loop5: lost filesystem error report for type 5 error -117 [ 2222.768855][T22177] EXT4-fs error (device loop5): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 2222.786253][T22177] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.2431: corrupted inode contents [ 2222.801222][T22177] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2222.811644][T22177] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.2431: mark_inode_dirty error [ 2222.832458][T22177] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2222.841769][T22177] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.2431: corrupted inode contents [ 2222.863216][T22177] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2222.866530][T22177] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.2431: mark_inode_dirty error [ 2222.887272][T22177] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2222.889801][T22177] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.2431: corrupted inode contents [ 2222.920019][T22177] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2222.925449][T22177] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 2222.947878][T22177] loop5: lost filesystem error report for type 5 error -117 [ 2222.948498][T20641] libceph: connect (1)[c::]:6789 error -101 [ 2222.965805][T22177] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.2431: corrupted inode contents [ 2222.978290][T22177] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2222.983849][T22177] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.2431: mark_inode_dirty error [ 2223.006021][T22177] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2223.011339][T20641] libceph: mon0 (1)[c::]:6789 connect error [ 2223.031193][T22177] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 2223.041548][T22177] loop5: lost filesystem error report for type 5 error -117 [ 2223.049033][T22177] EXT4-fs (loop5): 1 truncate cleaned up [ 2223.068088][T22177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2223.152236][T22174] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 2223.287718][T22176] ceph: No mds server is up or the cluster is laggy [ 2223.587366][T14415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2223.958199][T22199] netlink: 'syz.6.2437': attribute type 1 has an invalid length. [ 2223.966386][T22199] netlink: 'syz.6.2437': attribute type 2 has an invalid length. [ 2223.974450][T22199] netlink: 'syz.6.2437': attribute type 3 has an invalid length. [ 2224.895579][T22193] loop9: detected capacity change from 0 to 512 [ 2225.141753][T22193] EXT4-fs: Ignoring removed i_version option [ 2225.473691][T22193] ext3: Unknown parameter 'defcontext' [ 2225.667609][T22193] loop9: detected capacity change from 0 to 1024 [ 2225.719974][ T30] audit: type=1800 audit(2000001424.337:133): pid=22193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2440" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 2226.134488][T13607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2226.151041][T13607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2226.671351][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2226.678811][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2226.696493][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2226.712691][T22214] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2226.739600][T22215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2226.749962][T22214] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2226.767446][T22214] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2227.039810][T22214] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2227.077172][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.092669][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.105429][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.113722][T13607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2227.113988][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.132152][T13607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2227.153790][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.162216][T13607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2227.162652][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.179405][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.188012][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.199607][T22214] virt_wifi0 speed is unknown, defaulting to 1000 [ 2227.802603][T22229] loop3: detected capacity change from 0 to 64 [ 2229.475251][T13607] Bluetooth: hci6: command tx timeout [ 2229.663609][T22248] ubi31: attaching mtd0 [ 2229.700632][T22248] ubi31: scanning is finished [ 2229.880764][T13607] Bluetooth: Frame is too long (len 12, expected len 4) [ 2230.445485][T22248] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 2230.543706][T22251] loop3: detected capacity change from 0 to 4096 [ 2230.637006][T22251] EXT4-fs: inline encryption not supported [ 2230.660722][T22251] EXT4-fs: Ignoring removed mblk_io_submit option [ 2230.694097][T22251] EXT4-fs: Ignoring removed bh option [ 2230.721724][T22251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2231.678788][T16606] Bluetooth: hci6: command 0x041b tx timeout [ 2231.796761][T22271] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 2232.016158][T22251] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 2232.064932][T22251] System zones: 0-5 [ 2232.172481][T22251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2232.583306][ T30] audit: type=1800 audit(2000001431.197:134): pid=22251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2451" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 2232.925840][T22279] binder: 22277:22279 ioctl c0285840 200000000000 returned -22 [ 2233.620984][T21687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2233.727863][T18845] Bluetooth: hci6: command 0x041b tx timeout [ 2235.525415][T22292] overlayfs: failed to clone lowerpath [ 2235.643276][T22293] overlayfs: failed to clone lowerpath [ 2235.933684][T18845] Bluetooth: hci6: command 0x041b tx timeout [ 2237.795338][T22311] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2461'. [ 2238.531085][T18845] Bluetooth: hci6: command 0x041b tx timeout [ 2240.671468][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.285711][T22313] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2241.295173][T22313] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2241.304929][T22313] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2241.328127][ T30] audit: type=1800 audit(2000001445.896:135): pid=22313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2461" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 2241.825558][T22332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2243.030919][T22340] loop3: detected capacity change from 0 to 32768 [ 2243.108892][T22340] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2243.857442][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.917464][T16606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2243.937627][T16606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2243.958826][T16606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2244.017002][T22340] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 2244.034170][T16606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2244.053374][T16606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2244.092479][T22340] XFS (loop3): Starting recovery (logdev: internal) [ 2244.188083][T22345] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2470'. [ 2244.188951][T22206] lo speed is unknown, defaulting to 1000 [ 2244.352162][T22206] virt_wifi0 speed is unknown, defaulting to 1000 [ 2244.406700][T22340] XFS (loop3): Ending recovery (logdev: internal) [ 2244.814054][T22365] loop9: detected capacity change from 0 to 512 [ 2244.833899][T22365] ext4: Unknown parameter 'nouser_xattr' [ 2245.049516][ T30] audit: type=1800 audit(2000001449.307:136): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2469" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 2245.538613][ T30] audit: type=1800 audit(2000001449.707:137): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2469" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 2246.291274][T18845] Bluetooth: hci4: command tx timeout [ 2247.006270][T22373] loop9: detected capacity change from 0 to 32768 [ 2247.244252][T22373] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 2248.212743][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.325702][ T30] audit: type=1800 audit(2000001452.907:138): pid=22386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2473" name=".log" dev="loop9" ino=17059 res=0 errno=0 [ 2248.377889][T18845] Bluetooth: hci4: command tx timeout [ 2249.188306][T21687] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2249.651918][T21625] ocfs2: Unmounting device (7,9) on (node local) [ 2250.294442][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.604865][T18845] Bluetooth: hci4: command tx timeout [ 2252.674276][T18845] Bluetooth: hci4: command tx timeout [ 2255.332856][T22433] loop3: detected capacity change from 0 to 32768 [ 2255.598812][T22445] netlink: 'syz.9.2483': attribute type 1 has an invalid length. [ 2255.917255][T22433] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2256.008974][T22433] XFS (loop3): Ending clean mount [ 2256.018315][T22433] XFS (loop3): Quotacheck needed: Please wait. [ 2257.836430][T22433] XFS (loop3): Quotacheck: Done. [ 2258.445847][ T30] audit: type=1800 audit(2000001462.837:139): pid=22461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2475" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 2258.792984][T22462] loop9: detected capacity change from 0 to 1024 [ 2258.956855][T22462] hfsplus: failed to load extents file [ 2259.235282][T21687] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2259.681994][T22343] lo speed is unknown, defaulting to 1000 [ 2261.317157][ T57] bridge_slave_1: left allmulticast mode [ 2261.343067][ T57] bridge_slave_1: left promiscuous mode [ 2261.814737][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 2261.965654][ T57] bridge_slave_0: left allmulticast mode [ 2262.021269][ T57] bridge_slave_0: left promiscuous mode [ 2262.056326][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.445883][ T30] audit: type=1326 audit(2000001467.057:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2262.592462][ T30] audit: type=1326 audit(2000001467.117:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2262.670813][T22482] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2490'. [ 2262.715960][ T30] audit: type=1326 audit(2000001467.117:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2262.790010][ T30] audit: type=1326 audit(2000001467.117:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2263.023287][ T30] audit: type=1326 audit(2000001467.117:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2263.400597][ T30] audit: type=1326 audit(2000001467.117:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2263.790685][ T30] audit: type=1326 audit(2000001467.117:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.041119][ T30] audit: type=1326 audit(2000001467.117:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.154492][ T30] audit: type=1326 audit(2000001467.127:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.221910][ T30] audit: type=1326 audit(2000001467.127:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.302724][ T30] audit: type=1326 audit(2000001467.137:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.431689][ T30] audit: type=1326 audit(2000001467.147:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.516631][ T30] audit: type=1326 audit(2000001467.147:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.597462][ T30] audit: type=1326 audit(2000001467.147:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.654552][ T30] audit: type=1326 audit(2000001467.157:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.734331][ T30] audit: type=1326 audit(2000001467.187:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22478 comm="syz.5.2490" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f99ce59 code=0x7ffc0000 [ 2264.942887][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2264.958741][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2265.031775][ T57] bond0 (unregistering): Released all slaves [ 2265.423617][T22343] virt_wifi0 speed is unknown, defaulting to 1000 [ 2266.469990][T22206] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.492303][T22206] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.522909][T22206] bridge_slave_0: entered allmulticast mode [ 2266.549350][T22206] bridge_slave_0: entered promiscuous mode [ 2266.570043][T22206] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.590044][T22206] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.614097][T22206] bridge_slave_1: entered allmulticast mode [ 2266.640523][T22206] bridge_slave_1: entered promiscuous mode [ 2266.904793][T22206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2267.031679][T22206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2267.418395][T22206] team0: Port device team_slave_0 added [ 2267.428255][T22206] team0: Port device team_slave_1 added [ 2269.545699][ T57] hsr_slave_0: left promiscuous mode [ 2270.614455][ T57] hsr_slave_1: left promiscuous mode [ 2270.676042][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2270.723294][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2270.812722][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2270.903409][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2271.820564][ T57] veth1_macvtap: left promiscuous mode [ 2271.930181][ T57] veth0_macvtap: left promiscuous mode [ 2272.035399][ T57] veth1_vlan: left promiscuous mode [ 2272.135779][ T57] veth0_vlan: left promiscuous mode [ 2275.920134][T18845] Bluetooth: hci0: command 0x0406 tx timeout [ 2278.187403][T22546] netlink: 'syz.5.2500': attribute type 1 has an invalid length. [ 2278.195542][T22546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2278.202770][T22546] IPv6: NLM_F_CREATE should be set when creating new route [ 2279.197403][T22550] Can't find a SQUASHFS superblock on nullb0 [ 2281.147986][ T57] team0 (unregistering): Port device team_slave_1 removed [ 2281.219817][ T57] team0 (unregistering): Port device team_slave_0 removed [ 2281.568673][T22206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2281.596389][T22206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2281.686270][T22206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2281.750108][T22206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2281.759061][T22206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2281.833810][T22206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2282.493182][T18845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2282.518649][T18845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2282.528143][T18845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2282.536686][T18845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2282.546383][T18845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2282.921569][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.931905][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.031596][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2283.201726][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2283.488791][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2283.768173][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2283.890904][T22343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.924958][T22343] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.939854][T22343] bridge_slave_0: entered allmulticast mode [ 2283.967054][T22343] bridge_slave_0: entered promiscuous mode [ 2283.998284][T22343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2284.019132][T22343] bridge0: port 2(bridge_slave_1) entered disabled state [ 2284.045068][T22343] bridge_slave_1: entered allmulticast mode [ 2284.069490][T22343] bridge_slave_1: entered promiscuous mode [ 2284.207535][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.325268][T22343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2284.347470][T22571] lo speed is unknown, defaulting to 1000 [ 2284.377280][T22343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2284.436959][T22571] virt_wifi0 speed is unknown, defaulting to 1000 [ 2284.550762][T22343] team0: Port device team_slave_0 added [ 2284.594418][T16606] Bluetooth: hci2: command tx timeout [ 2284.728313][T22343] team0: Port device team_slave_1 added [ 2284.978431][T22343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2284.987263][T22343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2285.017282][T22343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2285.109138][T22343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2285.117460][T22343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2285.163388][T22343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2285.210003][ T57] bridge_slave_1: left allmulticast mode [ 2285.215760][ T57] bridge_slave_1: left promiscuous mode [ 2285.221586][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.246898][ T57] bridge_slave_0: left allmulticast mode [ 2285.258230][ T57] bridge_slave_0: left promiscuous mode [ 2285.266275][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.507999][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2285.520338][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2285.531032][ T57] bond0 (unregistering): Released all slaves [ 2285.547700][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2285.680275][T22343] hsr_slave_0: entered promiscuous mode [ 2285.686963][T22343] hsr_slave_1: entered promiscuous mode [ 2285.695534][T22343] debugfs: 'hsr0' already exists in 'hsr' [ 2285.701309][T22343] Cannot create hsr debugfs directory [ 2285.950992][ T57] hsr_slave_0: left promiscuous mode [ 2285.960184][ T57] hsr_slave_1: left promiscuous mode [ 2285.967157][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2285.977537][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2285.986186][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2285.995834][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2286.008604][ T57] veth1_macvtap: left promiscuous mode [ 2286.014170][ T57] veth0_macvtap: left promiscuous mode [ 2286.020010][ T57] veth1_vlan: left promiscuous mode [ 2286.025812][ T57] veth0_vlan: left promiscuous mode [ 2286.306030][ T57] team0 (unregistering): Port device team_slave_1 removed [ 2286.345276][ T57] team0 (unregistering): Port device team_slave_0 removed [ 2286.703125][T16606] Bluetooth: hci2: command tx timeout [ 2286.986727][T22571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.996196][T22571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.013834][T22571] bridge_slave_0: entered allmulticast mode [ 2287.064421][T22571] bridge_slave_0: entered promiscuous mode [ 2287.089169][T22571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.108988][T22571] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.157434][T22571] bridge_slave_1: entered allmulticast mode [ 2287.168764][T22571] bridge_slave_1: entered promiscuous mode [ 2287.293200][ T57] IPVS: stop unused estimator thread 0... [ 2287.379339][T22571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2287.392572][T22571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2287.446476][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2287.461362][T22571] team0: Port device team_slave_0 added [ 2287.527908][T22571] team0: Port device team_slave_1 added [ 2287.548393][ T57] bridge_slave_1: left allmulticast mode [ 2287.556474][ T57] bridge_slave_1: left promiscuous mode [ 2287.562416][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.572711][ T57] bridge_slave_0: left allmulticast mode [ 2287.578500][ T57] bridge_slave_0: left promiscuous mode [ 2287.584868][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.673890][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2287.685329][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2287.696011][ T57] bond0 (unregistering): Released all slaves [ 2287.731573][T22571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2287.768221][T22571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2287.820949][T22571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2287.837709][T22571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2287.844826][T22571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2287.871782][T22571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2287.993286][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2288.001238][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2288.032735][ T57] team0 (unregistering): Port device team_slave_1 removed [ 2288.065802][ T57] team0 (unregistering): Port device team_slave_0 removed [ 2288.230453][T22571] hsr_slave_0: entered promiscuous mode [ 2288.244131][T22571] hsr_slave_1: entered promiscuous mode [ 2288.250579][T22571] debugfs: 'hsr0' already exists in 'hsr' [ 2288.257101][T22571] Cannot create hsr debugfs directory [ 2288.753563][T16606] Bluetooth: hci2: command tx timeout [ 2288.776587][T22343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2288.812137][T22343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2288.822591][T22343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2288.833823][T22343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2288.855051][T22343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2288.868768][T22343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2288.925811][T22343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2288.945947][T22343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2289.257501][T22343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2289.331394][T22343] 8021q: adding VLAN 0 to HW filter on device team0 [ 2289.360424][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.367753][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2289.384493][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.391695][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.790330][T22571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2289.816879][T22571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2289.839597][T22571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2289.851216][T22571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2289.864275][T22571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2289.887095][T22571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2289.899238][T22571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2289.927834][T22571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2290.081130][T22571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2290.119025][T22571] 8021q: adding VLAN 0 to HW filter on device team0 [ 2290.127576][T16606] Bluetooth: hci5: command 0x0406 tx timeout [ 2290.191207][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 2290.198462][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2290.220560][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 2290.227824][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2290.344520][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2290.737220][T22343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2290.832856][T18845] Bluetooth: hci2: command tx timeout [ 2291.215565][T22571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2291.384571][T22343] veth0_vlan: entered promiscuous mode [ 2291.396638][T22571] veth0_vlan: entered promiscuous mode [ 2291.442649][T22343] veth1_vlan: entered promiscuous mode [ 2291.460437][T22571] veth1_vlan: entered promiscuous mode [ 2291.504420][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2291.544022][T22343] veth0_macvtap: entered promiscuous mode [ 2291.552294][T22571] veth0_macvtap: entered promiscuous mode [ 2291.573329][T22343] veth1_macvtap: entered promiscuous mode [ 2291.585820][T22571] veth1_macvtap: entered promiscuous mode [ 2291.633843][T22343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2291.668736][T22571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2291.693664][T22571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2291.713138][T22343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2291.746764][ T5973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.775821][ T5973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.811540][ T5973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.859976][ T5973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.921163][ T5973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.964930][ T6553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.001352][ T6553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.018192][ T6553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.077474][T21650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2292.106049][T21650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2292.238696][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2292.247359][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2292.329319][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2292.356846][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2292.527990][T22715] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2515'. [ 2292.838735][T22718] loop9: detected capacity change from 0 to 512 [ 2294.224312][ T8979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2295.297476][ T8979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.396065][T22718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2295.752902][T22718] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2296.804421][T21625] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2305.640740][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2306.115663][T22785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2509'. [ 2306.124913][T22785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2509'. [ 2306.582169][T22782] loop9: detected capacity change from 0 to 512 [ 2306.868466][T22782] EXT4-fs: Ignoring removed orlov option [ 2306.939372][T22782] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2307.056926][T22782] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2307.288644][T22789] loop3: detected capacity change from 0 to 1024 [ 2307.399461][T22789] hfsplus: failed to load extents file [ 2307.405415][T22782] EXT4-fs (loop9): 1 truncate cleaned up [ 2307.486604][T22782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2310.362749][T22801] random: crng reseeded on system resumption [ 2311.325174][T21625] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2313.258708][T20729] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2313.970666][T20729] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2314.015477][T20729] usb 10-1: config 63 has an invalid interface number: 66 but max is 0 [ 2314.048030][T20729] usb 10-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.094445][T20729] usb 10-1: config 63 has no interface number 0 [ 2314.153426][T20729] usb 10-1: config 63 interface 66 has no altsetting 0 [ 2314.183497][T20729] usb 10-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2314.399789][T20729] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.408470][T20729] usb 10-1: Product: syz [ 2314.431072][T20729] usb 10-1: Manufacturer: syz [ 2314.444063][T20729] usb 10-1: SerialNumber: syz [ 2316.468564][T22865] loop3: detected capacity change from 0 to 32768 [ 2316.535494][T20729] usb 10-1: can't set config #63, error -71 [ 2316.593930][T20729] usb 10-1: USB disconnect, device number 2 [ 2316.753744][T22865] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2316.819986][T22865] XFS (loop3): Ending clean mount [ 2316.846952][T22865] XFS (loop3): Quotacheck needed: Please wait. [ 2318.235180][T16606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2318.255333][T16606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2318.270237][T16606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2318.285583][T16606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2318.294210][T16606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2318.522018][T22865] XFS (loop3): Quotacheck: Done. [ 2319.266010][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2319.266041][ T30] audit: type=1800 audit(2000001523.809:166): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2532" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 2319.794322][T21687] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2320.088165][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2320.442199][T18845] Bluetooth: hci6: command tx timeout [ 2322.512770][T18845] Bluetooth: hci6: command tx timeout [ 2322.763466][T22920] kAFS: unable to lookup cell '' [ 2323.782671][T16606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2323.812419][T16606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2323.829714][T16606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2323.839473][T16606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2323.853886][T16606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2324.564427][ T802] IPVS: starting estimator thread 0... [ 2324.591903][T18845] Bluetooth: hci6: command tx timeout [ 2324.883667][T22938] IPVS: using max 23 ests per chain, 55200 per kthread [ 2325.465486][T16316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.510733][T22884] lo speed is unknown, defaulting to 1000 [ 2325.522170][T22884] virt_wifi0 speed is unknown, defaulting to 1000 [ 2325.689586][T16316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.896715][T16316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.962857][T18845] Bluetooth: hci7: command tx timeout [ 2326.066687][T16316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.156336][T22923] lo speed is unknown, defaulting to 1000 [ 2326.176508][T22923] virt_wifi0 speed is unknown, defaulting to 1000 [ 2326.468247][T16316] bridge_slave_1: left allmulticast mode [ 2326.474389][T16316] bridge_slave_1: left promiscuous mode [ 2326.480257][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2326.493097][T16316] bridge_slave_0: left allmulticast mode [ 2326.498896][T16316] bridge_slave_0: left promiscuous mode [ 2326.506313][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2326.671892][T18845] Bluetooth: hci6: command tx timeout [ 2326.836702][T16316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2326.849410][T16316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2326.861249][T16316] bond0 (unregistering): Released all slaves [ 2327.334421][T22884] bridge0: port 1(bridge_slave_0) entered blocking state [ 2327.355938][T22884] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.383573][T22884] bridge_slave_0: entered allmulticast mode [ 2327.405105][T22884] bridge_slave_0: entered promiscuous mode [ 2327.426225][T22884] bridge0: port 2(bridge_slave_1) entered blocking state [ 2327.434457][T22884] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.443049][T22884] bridge_slave_1: entered allmulticast mode [ 2327.451131][T22884] bridge_slave_1: entered promiscuous mode [ 2327.502027][T16316] hsr_slave_0: left promiscuous mode [ 2327.508129][T16316] hsr_slave_1: left promiscuous mode [ 2327.514429][T16316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2327.522137][T16316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2327.530157][T16316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2327.537728][T16316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2327.552384][T16316] veth1_macvtap: left promiscuous mode [ 2327.558219][T16316] veth0_macvtap: left promiscuous mode [ 2327.563957][T16316] veth1_vlan: left promiscuous mode [ 2327.569352][T16316] veth0_vlan: left promiscuous mode [ 2327.879372][T16316] team0 (unregistering): Port device team_slave_1 removed [ 2327.898375][T16316] team0 (unregistering): Port device team_slave_0 removed [ 2328.032090][T18845] Bluetooth: hci7: command tx timeout [ 2328.064184][T22884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2328.079669][T22884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2328.207114][T22884] team0: Port device team_slave_0 added [ 2328.284085][T22884] team0: Port device team_slave_1 added [ 2328.355901][T22923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2328.366508][T22923] bridge0: port 1(bridge_slave_0) entered disabled state [ 2328.384397][T22923] bridge_slave_0: entered allmulticast mode [ 2328.393867][T22923] bridge_slave_0: entered promiscuous mode [ 2328.403679][T22884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2328.411241][T22884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2328.440695][T22884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2328.454260][T22923] bridge0: port 2(bridge_slave_1) entered blocking state [ 2328.462038][T22923] bridge0: port 2(bridge_slave_1) entered disabled state [ 2328.472829][T22923] bridge_slave_1: entered allmulticast mode [ 2328.489398][T22923] bridge_slave_1: entered promiscuous mode [ 2328.498419][T22884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2328.507432][T22884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2328.534910][T22884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2328.615833][T22923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2328.660144][T22923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2328.827747][T16316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.888255][T22884] hsr_slave_0: entered promiscuous mode [ 2328.898176][T22884] hsr_slave_1: entered promiscuous mode [ 2328.911312][T22884] debugfs: 'hsr0' already exists in 'hsr' [ 2328.918235][T22884] Cannot create hsr debugfs directory [ 2328.930528][T22923] team0: Port device team_slave_0 added [ 2329.001273][T16316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2329.042157][T22923] team0: Port device team_slave_1 added [ 2329.177635][T22923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2329.187610][T22923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2329.215340][T22923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2329.266498][T16316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2329.295499][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2329.304076][T22923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2329.311051][T22923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2329.339435][T22923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2329.435682][T16316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2329.555921][T22923] hsr_slave_0: entered promiscuous mode [ 2329.562931][T22923] hsr_slave_1: entered promiscuous mode [ 2329.569344][T22923] debugfs: 'hsr0' already exists in 'hsr' [ 2329.575321][T22923] Cannot create hsr debugfs directory [ 2330.112021][T18845] Bluetooth: hci7: command tx timeout [ 2330.356900][T16316] bridge_slave_1: left allmulticast mode [ 2330.364388][T16316] bridge_slave_1: left promiscuous mode [ 2330.370293][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2330.383414][T16316] bridge_slave_0: left allmulticast mode [ 2330.389159][T16316] bridge_slave_0: left promiscuous mode [ 2330.400295][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2330.681273][T16316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2330.693507][T16316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2330.705338][T16316] bond0 (unregistering): Released all slaves [ 2330.722004][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2331.193896][T16316] hsr_slave_0: left promiscuous mode [ 2331.200070][T16316] hsr_slave_1: left promiscuous mode [ 2331.206976][T16316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2331.215538][T16316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2331.224470][T16316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2331.233007][T16316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2331.247223][T16316] veth1_macvtap: left promiscuous mode [ 2331.252915][T16316] veth0_macvtap: left promiscuous mode [ 2331.258493][T16316] veth1_vlan: left promiscuous mode [ 2331.264078][T16316] veth0_vlan: left promiscuous mode [ 2331.572133][T16316] team0 (unregistering): Port device team_slave_1 removed [ 2331.591202][T16316] team0 (unregistering): Port device team_slave_0 removed [ 2331.764855][T22884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2331.782910][T22884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2331.792016][T22884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2331.804962][T22884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2331.846050][T22884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2331.895005][T22884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2331.904551][T22884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2331.955226][T22884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2332.191957][T18845] Bluetooth: hci7: command tx timeout [ 2332.284167][T22884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2332.320450][T22884] 8021q: adding VLAN 0 to HW filter on device team0 [ 2332.343032][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 2332.350232][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2332.405046][T16314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.412281][T16314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2332.765148][T22923] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2332.792987][T22923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2332.808313][T22923] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2332.829521][T22923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2332.844813][T22923] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2332.856054][T22923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2332.868847][T22923] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2332.898401][T22923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2333.133206][T22923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2333.189284][T22923] 8021q: adding VLAN 0 to HW filter on device team0 [ 2333.219006][T16314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2333.226250][T16314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2333.277798][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 2333.285127][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2333.527015][T22884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2333.653869][T22884] veth0_vlan: entered promiscuous mode [ 2333.687559][T22884] veth1_vlan: entered promiscuous mode [ 2333.763428][T22884] veth0_macvtap: entered promiscuous mode [ 2333.780806][T22884] veth1_macvtap: entered promiscuous mode [ 2333.869279][T22884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2333.903309][T22884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2333.948531][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2333.974894][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2333.993337][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.004898][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.308703][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.337594][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.384097][ T6317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.394766][ T6317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2336.984131][T22923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2337.034600][T23095] Bluetooth: MGMT ver 1.23 [ 2344.354245][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.402691][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.521865][T15358] lo speed is unknown, defaulting to 1000 [ 2346.098232][T22923] veth0_vlan: entered promiscuous mode [ 2346.280751][T23159] comedi comedi4: bad chanlist[3]=0x0000000e chan=14 range length=2 [ 2346.643398][T22923] veth1_vlan: entered promiscuous mode [ 2346.900636][T23152] loop9: detected capacity change from 0 to 2048 [ 2347.838357][T22923] veth0_macvtap: entered promiscuous mode [ 2347.955043][T22923] veth1_macvtap: entered promiscuous mode [ 2348.016082][T23152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2348.061201][T23152] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2348.181874][T23169] overlayfs: failed to clone upperpath [ 2348.366585][ T30] audit: type=1326 audit(2000001552.970:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23160 comm="syz.6.2557" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcec7f9ce59 code=0x0 [ 2348.919818][T22923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2348.938254][T22923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2348.994926][T21650] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.006693][T21650] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.052661][T21625] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2349.063352][T21650] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.107843][T21650] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.116937][T21982] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2349.303747][T21982] usb 6-1: Using ep0 maxpacket: 32 [ 2349.347397][T21982] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 2349.404466][T21982] usb 6-1: config 0 has no interface number 0 [ 2349.432629][T21982] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2349.528124][T21982] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2349.567956][T21982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.596506][T21982] usb 6-1: Product: syz [ 2349.618479][T21982] usb 6-1: Manufacturer: syz [ 2349.869997][T21982] usb 6-1: SerialNumber: syz [ 2350.455359][T21982] usb 6-1: config 0 descriptor?? [ 2350.483534][T21982] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2350.679970][T21982] em28xx 6-1:0.132: Video interface 132 found: [ 2350.788990][T23175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2350.795577][T23175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2350.833856][T23175] vhci_hcd vhci_hcd.0: Device attached [ 2351.013631][T23176] random: crng reseeded on system resumption [ 2351.064824][T21982] em28xx 6-1:0.132: unknown em28xx chip ID (39) [ 2351.278730][ T802] usb 38-1: SetAddress Request (2) to port 0 [ 2351.461515][ T802] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2351.552882][T23189] vhci_hcd: connection closed [ 2351.608929][ T13] vhci_hcd vhci_hcd.2: stop threads [ 2351.925385][ T13] vhci_hcd vhci_hcd.2: release socket [ 2352.179042][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 2354.888435][T21982] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2354.897624][T21982] em28xx 6-1:0.132: board has no eeprom [ 2354.967887][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2355.041296][T21982] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2355.089956][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2355.125545][T21982] em28xx 6-1:0.132: analog set to bulk mode. [ 2355.174887][ T8080] em28xx 6-1:0.132: Registering V4L2 extension [ 2355.400345][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2355.474244][T21982] usb 6-1: USB disconnect, device number 5 [ 2355.484199][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2355.553013][T21982] em28xx 6-1:0.132: Disconnecting em28xx [ 2356.915779][ T802] usb 38-1: device descriptor read/8, error -110 [ 2357.422812][T23219] loop5: detected capacity change from 0 to 512 [ 2358.038912][T23219] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 2358.063565][T23219] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2358.080198][T23219] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.2569: Allocating blocks 41-42 which overlap fs metadata [ 2358.100218][T23219] loop5: lost filesystem error report for type 5 error -117 [ 2358.103720][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 2358.119327][ C1] EXT4-fs (loop5): initial error at time 2000001562: ext4_mb_mark_diskspace_used:4221 [ 2358.130135][ C1] EXT4-fs (loop5): last error at time 2000001562: ext4_mb_mark_diskspace_used:4221 [ 2358.166708][T23219] Quota error (device loop5): write_blk: dquota write failed [ 2358.175879][T23219] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 2358.186518][T23219] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.2569: Allocating blocks 41-42 which overlap fs metadata [ 2358.202858][T23219] loop5: lost filesystem error report for type 5 error -117 [ 2358.219410][T23219] Quota error (device loop5): write_blk: dquota write failed [ 2358.236836][T23219] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2358.248006][T23219] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.2569: Failed to acquire dquot type 1 [ 2358.263260][T23219] loop5: lost filesystem error report for type 5 error -117 [ 2358.267600][T23219] EXT4-fs error (device loop5): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 2358.296614][T23219] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.2569: corrupted inode contents [ 2358.303456][ T802] usb usb38-port1: attempt power cycle [ 2358.311825][T23219] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2358.347690][T23219] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.2569: mark_inode_dirty error [ 2358.374213][T23219] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2358.390909][T23219] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.2569: corrupted inode contents [ 2358.416087][T23219] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2358.425118][T23219] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.2569: mark_inode_dirty error [ 2358.454895][T23219] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2358.461799][T23219] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.2569: corrupted inode contents [ 2358.490671][T23219] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2358.493944][T23219] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 2358.522113][T23219] loop5: lost filesystem error report for type 5 error -117 [ 2358.522772][T23219] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.2569: corrupted inode contents [ 2358.544388][T23219] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2358.546788][T23219] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.2569: mark_inode_dirty error [ 2358.572119][T23219] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 2358.575511][T23219] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 2358.597714][T23219] loop5: lost filesystem error report for type 5 error -117 [ 2358.607732][T23219] EXT4-fs (loop5): 1 truncate cleaned up [ 2358.633425][T23219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2358.868424][T14415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2359.084917][ T802] usb usb38-port1: unable to enumerate USB device [ 2359.673696][ T8080] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 2361.788985][ T8080] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 2361.807104][ T8080] em28xx 6-1:0.132: No AC97 audio processor [ 2361.825030][ T8080] usb 6-1: Decoder not found [ 2361.829702][ T8080] em28xx 6-1:0.132: failed to create media graph [ 2361.839645][ T8080] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 2364.364035][ T8080] em28xx 6-1:0.132: Remote control support is not available for this card. [ 2364.704241][T21982] em28xx 6-1:0.132: Closing input extension [ 2365.911777][T23261] loop5: detected capacity change from 0 to 256 [ 2367.138395][T23261] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2368.179926][T23261] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2369.138462][T23261] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 2369.313912][T23261] exFAT-fs (loop5): failed to load alloc-bitmap [ 2369.393946][T23261] exFAT-fs (loop5): failed to recognize exfat type [ 2372.513306][T21982] em28xx 6-1:0.132: Freeing device [ 2375.022176][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2375.141085][T23295] loop5: detected capacity change from 0 to 40427 [ 2375.185232][T23295] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 2375.193126][T23295] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2375.204422][T23296] loop2: detected capacity change from 0 to 128 [ 2375.215895][T23295] F2FS-fs (loop5): invalid crc value [ 2375.320549][T23295] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2375.359170][T23295] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2375.368022][T23295] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2375.530874][T23296] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2375.604040][T23296] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2378.759462][T22884] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2379.097772][T16606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2379.142288][T16606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2379.164505][T16606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2379.179973][T16606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2379.188856][T16606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2382.172841][T18845] Bluetooth: hci2: command tx timeout [ 2383.648418][T23348] loop3: detected capacity change from 0 to 128 [ 2383.752546][T23348] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 2383.927827][T23348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2384.553859][T18845] Bluetooth: hci2: command tx timeout [ 2387.079984][T18845] Bluetooth: hci2: command tx timeout [ 2388.119766][T15645] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2388.350259][T15645] usb 9-1: Using ep0 maxpacket: 32 [ 2389.361754][T18845] Bluetooth: hci2: command tx timeout [ 2389.561137][T15645] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2389.665006][T23379] binder: 23376:23379 ioctl c0285840 200000000000 returned -22 [ 2392.389031][T15645] usb 9-1: string descriptor 0 read error: -71 [ 2392.452463][T15645] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2392.508643][T15645] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2392.610875][T15645] usb 9-1: config 0 descriptor?? [ 2392.653218][T15645] usb 9-1: can't set config #0, error -71 [ 2392.723104][T15645] usb 9-1: USB disconnect, device number 6 [ 2394.267596][T23398] binder: 23392:23398 ioctl c0306201 0 returned -14 [ 2394.945237][T21650] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2395.686486][T23402] loop3: detected capacity change from 0 to 2048 [ 2400.312755][T23402] NILFS (loop3): error -4 creating segctord thread [ 2401.629607][T18845] Bluetooth: hci3: command 0x0406 tx timeout [ 2403.516387][T23436] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2403.524381][T23436] overlayfs: failed to set xattr on upper [ 2403.530638][T23436] overlayfs: ...falling back to redirect_dir=nofollow. [ 2403.537648][T23436] overlayfs: ...falling back to index=off. [ 2403.543640][T23436] overlayfs: ...falling back to uuid=null. [ 2403.593279][T23437] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2406.540602][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.663757][T21650] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.950252][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2408.063485][T18845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2408.143961][T18845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2408.177205][T18845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2408.266679][T18845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2408.282903][T18845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2409.633083][T23320] lo speed is unknown, defaulting to 1000 [ 2409.764346][T23320] virt_wifi0 speed is unknown, defaulting to 1000 [ 2410.476976][T23468] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2617'. [ 2410.650029][T23468] loop5: detected capacity change from 0 to 4096 [ 2410.658979][T23468] ntfs3: Unknown parameter '' [ 2410.766026][T16606] Bluetooth: hci0: command tx timeout [ 2413.278992][T16606] Bluetooth: hci0: command tx timeout [ 2414.437966][T23478] loop5: detected capacity change from 0 to 128 [ 2414.448094][T23478] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 2414.495638][T23478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2415.583704][T16606] Bluetooth: hci0: command tx timeout [ 2415.679022][T21650] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.709068][T18845] Bluetooth: hci1: command 0x0406 tx timeout [ 2417.709718][T16606] Bluetooth: hci0: command tx timeout [ 2420.521205][T23497] loop5: detected capacity change from 0 to 2048 [ 2421.902483][T23501] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2422.530670][T21650] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2423.740629][T23517] loop8: detected capacity change from 0 to 40427 [ 2423.757817][T23517] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 2423.766595][T23517] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2423.864328][T23517] F2FS-fs (loop8): invalid crc value [ 2423.982819][T23517] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2424.043458][T23517] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 2424.051380][T23517] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2427.836538][T21650] bridge_slave_1: left allmulticast mode [ 2427.863603][T21650] bridge_slave_1: left promiscuous mode [ 2427.894536][T21650] bridge0: port 2(bridge_slave_1) entered disabled state [ 2427.933313][T21650] bridge_slave_0: left allmulticast mode [ 2427.964486][T21650] bridge_slave_0: left promiscuous mode [ 2428.012042][T21650] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.083425][T23549] loop3: detected capacity change from 0 to 40427 [ 2428.096526][T23549] F2FS-fs (loop3): invalid crc value [ 2428.254362][T23549] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 2428.284493][T23549] F2FS-fs (loop3): Start checkpoint disabled! [ 2428.310106][T23549] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 2428.318058][T23549] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2432.495155][ T13] kworker/u8:1: attempt to access beyond end of device [ 2432.495155][ T13] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2432.568362][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2432.568423][ T13] Tainted: [L]=SOFTLOCKUP [ 2432.568437][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2432.568462][ T13] Workqueue: writeback wb_workfn (flush-7:3) [ 2432.568535][ T13] Call Trace: [ 2432.568547][ T13] [ 2432.568562][ T13] dump_stack_lvl+0x100/0x190 [ 2432.568607][ T13] f2fs_stop_checkpoint+0x600/0x9b0 [ 2432.568670][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.568727][ T13] ? errseq_set+0xe3/0x150 [ 2432.568768][ T13] ? errseq_set+0xe3/0x150 [ 2432.568807][ T13] f2fs_write_end_io+0xf59/0x1340 [ 2432.568852][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 2432.568902][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.568957][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 2432.568997][ T13] bio_endio+0x78f/0x8f0 [ 2432.569056][ T13] submit_bio_noacct+0x64c/0x2000 [ 2432.569111][ T13] f2fs_submit_write_bio+0x135/0x340 [ 2432.569177][ T13] __submit_merged_bio+0x331/0x780 [ 2432.569225][ T13] __submit_merged_write_cond+0x3fe/0x510 [ 2432.569275][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 2432.569328][ T13] ? __pfx___might_resched+0x10/0x10 [ 2432.569382][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.569437][ T13] f2fs_write_cache_pages+0x20e9/0x2630 [ 2432.569509][ T13] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 2432.569567][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.569615][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.569660][ T13] ? find_held_lock+0x2b/0x80 [ 2432.569733][ T13] ? nr_blockdev_pages+0xde/0x120 [ 2432.569773][ T13] ? nr_blockdev_pages+0xde/0x120 [ 2432.569811][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.569876][ T13] ? si_meminfo+0x118/0x230 [ 2432.569915][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.569962][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.570072][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.570117][ T13] ? rcu_is_watching+0x12/0xc0 [ 2432.570180][ T13] f2fs_write_data_pages+0x799/0x16d0 [ 2432.570228][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.570273][ T13] ? trace_f2fs_writepages.constprop.0+0x75/0x230 [ 2432.570336][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 2432.570392][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.570443][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.570489][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 2432.570542][ T13] do_writepages+0x278/0x600 [ 2432.570610][ T13] ? __pfx_do_writepages+0x10/0x10 [ 2432.570673][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.570733][ T13] __writeback_single_inode+0x164/0x1350 [ 2432.570794][ T13] ? find_held_lock+0x2b/0x80 [ 2432.570856][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.570904][ T13] ? __pfx___writeback_single_inode+0x10/0x10 [ 2432.570964][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.571010][ T13] ? do_raw_spin_unlock+0x145/0x1e0 [ 2432.571065][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.571118][ T13] writeback_sb_inodes+0x766/0x1c60 [ 2432.571202][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 2432.571260][ T13] ? do_raw_spin_lock+0x128/0x260 [ 2432.571315][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.571419][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.571466][ T13] ? rcu_is_watching+0x12/0xc0 [ 2432.571521][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.571566][ T13] ? queue_io+0x287/0x540 [ 2432.571622][ T13] wb_writeback+0x1bf/0xb90 [ 2432.571700][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 2432.571771][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.571818][ T13] ? mark_held_locks+0x40/0x70 [ 2432.571867][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 2432.571927][ T13] wb_workfn+0x14f/0xc00 [ 2432.571998][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.572043][ T13] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2432.572100][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 2432.572161][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.572209][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.572257][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.572301][ T13] ? rcu_is_watching+0x12/0xc0 [ 2432.572354][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.572407][ T13] process_one_work+0xa0e/0x1980 [ 2432.572474][ T13] ? __pfx_process_one_work+0x10/0x10 [ 2432.572517][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.572576][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.572627][ T13] worker_thread+0x5ef/0xe50 [ 2432.572698][ T13] ? kthread+0x13a/0x450 [ 2432.572736][ T13] ? __pfx_worker_thread+0x10/0x10 [ 2432.572778][ T13] kthread+0x370/0x450 [ 2432.572818][ T13] ? __pfx_kthread+0x10/0x10 [ 2432.572862][ T13] ret_from_fork+0x72b/0xd50 [ 2432.572910][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 2432.572955][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2432.573000][ T13] ? __switch_to+0x800/0x1100 [ 2432.573052][ T13] ? __switch_to_asm+0x39/0x70 [ 2432.573101][ T13] ? __pfx_kthread+0x10/0x10 [ 2432.573146][ T13] ret_from_fork_asm+0x1a/0x30 [ 2432.573221][ T13] [ 2433.097578][ T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 2435.103900][T16606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2435.122580][T16606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2435.135110][T16606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2435.143491][T16606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2435.151727][T16606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2435.561044][T21650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2435.607788][T21650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2435.654070][T23582] loop8: detected capacity change from 0 to 8 [ 2435.664424][T21650] bond0 (unregistering): Released all slaves [ 2435.694101][T23582] squashfs: Unknown parameter '' [ 2435.812252][T23438] lo speed is unknown, defaulting to 1000 [ 2435.863886][T23438] virt_wifi0 speed is unknown, defaulting to 1000 [ 2436.269139][T21650] IPVS: stopping master sync thread 22271 ... [ 2437.734990][T13607] Bluetooth: hci4: command tx timeout [ 2439.788648][T16606] Bluetooth: hci4: command tx timeout [ 2441.388084][T16606] Bluetooth: hci5: command 0x0406 tx timeout [ 2441.758362][T23618] loop3: detected capacity change from 0 to 40427 [ 2441.868598][T18845] Bluetooth: hci4: command tx timeout [ 2441.928719][T23618] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2441.936605][T23618] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2441.985200][T23618] F2FS-fs (loop3): invalid crc value [ 2442.175776][T23618] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2442.197024][T23618] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2442.205435][T23618] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2443.935667][T23617] netlink: 149 bytes leftover after parsing attributes in process `syz.5.2640'. [ 2444.595612][T13607] Bluetooth: hci4: command tx timeout [ 2444.743712][T23631] Bluetooth: MGMT ver 1.23 [ 2444.753159][T21650] hsr_slave_0: left promiscuous mode [ 2444.901646][T21650] hsr_slave_1: left promiscuous mode [ 2444.972262][T21650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2445.038616][T21650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2445.130827][T21650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2445.164658][T21650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2445.273767][T21650] veth1_macvtap: left promiscuous mode [ 2445.291428][T21650] veth0_macvtap: left promiscuous mode [ 2445.320502][T21650] veth1_vlan: left promiscuous mode [ 2445.337340][T21650] veth0_vlan: left promiscuous mode [ 2447.146877][T21650] team0 (unregistering): Port device team_slave_1 removed [ 2447.225841][T21650] team0 (unregistering): Port device team_slave_0 removed [ 2448.108811][T16606] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2448.849395][T16606] Bluetooth: hci7: command 0x0406 tx timeout [ 2449.601628][T23575] lo speed is unknown, defaulting to 1000 [ 2453.379713][T23575] virt_wifi0 speed is unknown, defaulting to 1000 [ 2454.629487][T23686] loop3: detected capacity change from 0 to 8 [ 2454.653789][T23687] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2454.682808][T23686] squashfs: Unknown parameter '' [ 2454.981521][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2456.964325][ T6318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2457.657504][ T30] audit: type=1326 audit(2000001662.273:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.6.2665" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec7f9ce59 code=0x7ffc0000 [ 2457.744160][ T30] audit: type=1326 audit(2000001662.273:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.6.2665" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec7f9ce59 code=0x7ffc0000 [ 2458.798175][T16606] Bluetooth: hci7: command 0x0406 tx timeout [ 2459.155120][T13607] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 2460.731892][T23438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2460.900946][T23438] bridge0: port 1(bridge_slave_0) entered disabled state [ 2460.977665][T23438] bridge_slave_0: entered allmulticast mode [ 2461.041794][T23438] bridge_slave_0: entered promiscuous mode [ 2462.474093][T23742] loop5: detected capacity change from 0 to 1024 [ 2462.484451][T23742] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 2462.494952][T23742] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2462.512163][T23742] EXT4-fs (loop5): invalid journal inode [ 2462.518006][T23742] EXT4-fs (loop5): can't get journal size [ 2463.092715][T23742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2463.313908][T23741] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (7780!=20869) [ 2463.615651][T23756] netlink: 149 bytes leftover after parsing attributes in process `syz.8.2659'. [ 2463.640826][T13607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2463.656808][T13607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2463.673471][T13607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2463.685642][T13607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2463.705599][T13607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2464.932208][ T6318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.437449][T16606] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2465.787276][T16606] Bluetooth: hci2: command tx timeout [ 2466.567873][T23575] bridge0: port 1(bridge_slave_0) entered blocking state [ 2466.576456][T14415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2467.113442][T23575] bridge0: port 1(bridge_slave_0) entered disabled state [ 2467.128990][T23575] bridge_slave_0: entered allmulticast mode [ 2467.186090][T23575] bridge_slave_0: entered promiscuous mode [ 2467.267948][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.274471][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.473720][T23785] fuse: fd is not a fuse device [ 2467.636677][T23784] loop8: detected capacity change from 0 to 4096 [ 2467.786113][T23784] ext4: Unknown parameter 'defcontext' [ 2467.867383][T16606] Bluetooth: hci2: command tx timeout [ 2469.493204][T23798] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2469.493262][T23798] overlayfs: failed to set xattr on upper [ 2469.493278][T23798] overlayfs: ...falling back to redirect_dir=nofollow. [ 2469.493295][T23798] overlayfs: ...falling back to index=off. [ 2469.493310][T23798] overlayfs: ...falling back to uuid=null. [ 2469.674186][T23799] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2470.021759][ T6318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2470.048732][T16606] Bluetooth: hci2: command tx timeout [ 2471.114588][T23575] bridge0: port 2(bridge_slave_1) entered blocking state [ 2471.149470][T23575] bridge0: port 2(bridge_slave_1) entered disabled state [ 2471.183664][T23575] bridge_slave_1: entered allmulticast mode [ 2471.239909][T23575] bridge_slave_1: entered promiscuous mode [ 2472.371972][T16606] Bluetooth: hci2: command tx timeout [ 2473.320573][T23812] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2475.832659][T23808] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 2475.944557][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2478.673234][T23826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2481.367294][ T6318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.771836][T23848] loop3: detected capacity change from 0 to 1024 [ 2482.790503][T23848] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 2482.810587][T23848] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2482.905656][T23848] EXT4-fs (loop3): invalid journal inode [ 2482.912709][T23848] EXT4-fs (loop3): can't get journal size [ 2482.931015][T23848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2483.182701][T23845] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (7780!=20869) [ 2483.230678][T23575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2483.259408][T23575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2483.954104][T23860] misc userio: Invalid payload size [ 2483.963470][T23860] misc userio: No port type given on /dev/userio [ 2484.323845][T21687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2484.561248][T23575] team0: Port device team_slave_0 added [ 2484.591923][T23575] team0: Port device team_slave_1 added [ 2486.287336][T23575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2487.258430][T23575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2487.731654][T23872] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2487.731751][T23872] overlayfs: failed to set xattr on upper [ 2487.731818][T23872] overlayfs: ...falling back to redirect_dir=nofollow. [ 2487.731880][T23872] overlayfs: ...falling back to index=off. [ 2487.731920][T23872] overlayfs: ...falling back to uuid=null. [ 2487.745408][T23575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2487.806353][T23874] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2489.193228][T23575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2489.193441][T23575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2489.193570][T23575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2491.180224][T23888] binder: 23880:23888 ioctl c0285840 200000000000 returned -22 [ 2493.315125][T23753] lo speed is unknown, defaulting to 1000 [ 2493.620047][T23753] virt_wifi0 speed is unknown, defaulting to 1000 [ 2493.711472][T23575] hsr_slave_0: entered promiscuous mode [ 2493.729496][T23575] hsr_slave_1: entered promiscuous mode [ 2494.006979][ T6318] bridge_slave_1: left allmulticast mode [ 2494.020368][ T6318] bridge_slave_1: left promiscuous mode [ 2494.040236][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 2494.068765][ T6318] bridge_slave_0: left allmulticast mode [ 2494.076038][ T6318] bridge_slave_0: left promiscuous mode [ 2494.096833][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 2494.467724][ T6318] bond0 (unregistering): Released all slaves [ 2494.912026][ T6318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2494.943857][ T6318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2494.957816][ T6318] bond0 (unregistering): Released all slaves [ 2494.984725][T13607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2495.022894][T13607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2495.035009][T13607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2495.050246][T13607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2495.125811][T13607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2495.954445][ T6318] hsr_slave_0: left promiscuous mode [ 2496.014761][ T6318] hsr_slave_1: left promiscuous mode [ 2496.038622][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2496.076343][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2496.150740][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2496.176430][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2496.275768][ T6318] veth1_macvtap: left promiscuous mode [ 2496.285677][ T6318] veth0_macvtap: left promiscuous mode [ 2496.309100][ T6318] veth1_vlan: left promiscuous mode [ 2496.321183][ T6318] veth0_vlan: left promiscuous mode [ 2496.850819][ T6318] team0 (unregistering): Port device team_slave_1 removed [ 2496.874574][ T6318] team0 (unregistering): Port device team_slave_0 removed [ 2497.236334][T16606] Bluetooth: hci0: command tx timeout [ 2497.638909][T23753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2497.657623][T23753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2497.697217][T23753] bridge_slave_0: entered allmulticast mode [ 2497.718421][T23753] bridge_slave_0: entered promiscuous mode [ 2497.741808][T23753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2497.778362][T23753] bridge0: port 2(bridge_slave_1) entered disabled state [ 2497.785804][T23753] bridge_slave_1: entered allmulticast mode [ 2497.797704][T23753] bridge_slave_1: entered promiscuous mode [ 2497.913779][T23913] lo speed is unknown, defaulting to 1000 [ 2497.933883][T23753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2497.961127][T23913] virt_wifi0 speed is unknown, defaulting to 1000 [ 2497.974984][T23753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2498.075426][ T6318] bridge_slave_1: left allmulticast mode [ 2498.086184][ T6318] bridge_slave_1: left promiscuous mode [ 2498.100675][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 2498.125816][ T6318] bridge_slave_0: left allmulticast mode [ 2498.132194][ T6318] bridge_slave_0: left promiscuous mode [ 2498.140933][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 2498.155550][ T6318] bridge_slave_0: left allmulticast mode [ 2498.161411][ T6318] bridge_slave_0: left promiscuous mode [ 2498.174391][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 2498.306057][ T6318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2498.319994][ T6318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2498.330899][ T6318] bond0 (unregistering): Released all slaves [ 2498.445397][ T6318] bond0 (unregistering): Released all slaves [ 2498.474059][T23753] team0: Port device team_slave_0 added [ 2498.484953][T23753] team0: Port device team_slave_1 added [ 2498.690848][T23753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2498.714938][T23753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2498.741489][T23753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2498.818555][ T6318] hsr_slave_0: left promiscuous mode [ 2498.830294][ T6318] hsr_slave_1: left promiscuous mode [ 2498.848204][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2498.867287][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2499.005476][ T6318] team0 (unregistering): Port device team_slave_1 removed [ 2499.039203][ T6318] team0 (unregistering): Port device team_slave_0 removed [ 2499.306215][T16606] Bluetooth: hci0: command tx timeout [ 2499.314160][T23753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2499.321379][T23753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2499.349710][T23753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2499.561052][T23753] hsr_slave_0: entered promiscuous mode [ 2499.571631][T23753] hsr_slave_1: entered promiscuous mode [ 2500.089176][ T5283] 8021q: adding VLAN 0 to HW filter on device eth21 [ 2500.295264][T23913] bridge0: port 1(bridge_slave_0) entered blocking state [ 2500.303063][T23913] bridge0: port 1(bridge_slave_0) entered disabled state [ 2500.312810][T23913] bridge_slave_0: entered allmulticast mode [ 2500.321603][T23913] bridge_slave_0: entered promiscuous mode [ 2500.348837][ T5283] 8021q: adding VLAN 0 to HW filter on device eth22 [ 2500.360235][T23913] bridge0: port 2(bridge_slave_1) entered blocking state [ 2500.375897][T23913] bridge0: port 2(bridge_slave_1) entered disabled state [ 2500.392211][T23913] bridge_slave_1: entered allmulticast mode [ 2500.400706][T23913] bridge_slave_1: entered promiscuous mode [ 2500.490325][T23913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2500.521181][T23913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2500.573581][T23913] team0: Port device team_slave_0 added [ 2500.611194][T23913] team0: Port device team_slave_1 added [ 2500.644980][ T5283] 8021q: adding VLAN 0 to HW filter on device eth23 [ 2500.663309][T23913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2500.675612][T23913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2500.703907][T23913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2500.722832][T23913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2500.731777][T23913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2500.760006][T23913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2500.957449][T23913] hsr_slave_0: entered promiscuous mode [ 2500.968549][T23913] hsr_slave_1: entered promiscuous mode [ 2500.975176][T23913] debugfs: 'hsr0' already exists in 'hsr' [ 2500.991843][T23913] Cannot create hsr debugfs directory [ 2501.389048][T16606] Bluetooth: hci0: command tx timeout [ 2501.404769][T23753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2501.424962][T23753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2501.444610][T23753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2501.457712][T23753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2501.474067][T23753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2501.497478][T23753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2501.632031][T23753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2501.649961][T23753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2501.675602][ T5283] 8021q: adding VLAN 0 to HW filter on device eth24 [ 2502.122455][T23753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2502.176962][T23753] 8021q: adding VLAN 0 to HW filter on device team0 [ 2502.239939][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 2502.247190][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2502.289203][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2502.296920][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2502.603556][T23913] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2502.621866][T23913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2502.649636][T23913] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2502.678068][T23913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2502.697497][T23913] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2502.714948][T23913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2502.732202][T23913] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2502.766569][T23913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2502.987764][T23913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2503.025647][T23913] 8021q: adding VLAN 0 to HW filter on device team0 [ 2503.059467][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 2503.066712][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2503.105466][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 2503.112808][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2503.467037][T16606] Bluetooth: hci0: command tx timeout [ 2503.577300][T23753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2503.721508][T23753] veth0_vlan: entered promiscuous mode [ 2503.753805][T23753] veth1_vlan: entered promiscuous mode [ 2503.852758][T23753] veth0_macvtap: entered promiscuous mode [ 2503.869843][T23753] veth1_macvtap: entered promiscuous mode [ 2503.930641][T23753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2503.969741][T23753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2504.002792][ T6318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2504.028724][ T6318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2504.051233][ T6318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2504.064026][ T6318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2504.341645][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2504.374430][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2504.472711][T23913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2504.480422][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2504.510696][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2508.812462][T23913] veth0_vlan: entered promiscuous mode [ 2508.847232][T23913] veth1_vlan: entered promiscuous mode [ 2508.908355][T23913] veth0_macvtap: entered promiscuous mode [ 2508.973750][T23913] veth1_macvtap: entered promiscuous mode [ 2509.101090][T23913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2509.188071][T23913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2510.645166][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2690'. [ 2511.108090][T16314] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2511.142095][T16314] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2511.283096][T16314] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2511.335091][T16314] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2513.313418][T13607] Bluetooth: hci2: command 0x0406 tx timeout [ 2513.834954][T16314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2513.883518][T16314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2515.271589][T16314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2515.280239][T16314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2516.202341][T24168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2516.942874][T24171] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2698'. [ 2516.956133][T20729] Process accounting resumed [ 2517.643354][T24177] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2519.530547][T24187] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 24187 comm: syz.0.2705) [ 2521.710748][T24192] loop0: detected capacity change from 0 to 128 [ 2522.334322][T24193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2707'. [ 2524.564658][T24204] loop8: detected capacity change from 0 to 512 [ 2526.595338][T24221] loop3: detected capacity change from 0 to 4096 [ 2526.604141][T24221] overlayfs: failed lookup in lower (newroot/70, name='file0', err=-40): overlapping layers [ 2526.615745][T24221] overlayfs: failed lookup in lower (newroot/70, name='file0', err=-40): overlapping layers [ 2527.262000][T24227] loop0: detected capacity change from 0 to 32768 [ 2527.270636][T24227] btrfs: Deprecated parameter 'usebackuproot' [ 2527.276821][T24227] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2527.293013][T24227] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2716 (24227) [ 2527.331409][T24227] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2527.344182][T24227] BTRFS info (device loop0): using crc32c checksum algorithm [ 2527.985817][ T36] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2528.000113][T24227] BTRFS error (device loop0): failed to load root extent [ 2528.007502][T24227] BTRFS warning (device loop0): try to load backup roots slot 1 [ 2528.017886][ T8979] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2528.222917][T24227] BTRFS warning (device loop0): couldn't read tree root [ 2528.230090][T24227] BTRFS warning (device loop0): try to load backup roots slot 2 [ 2528.242074][ T36] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2528.333112][T24227] BTRFS warning (device loop0): couldn't read tree root [ 2528.340225][T24227] BTRFS warning (device loop0): try to load backup roots slot 3 [ 2528.365831][T24227] BTRFS info (device loop0): rebuilding free space tree [ 2528.471325][T24227] BTRFS info (device loop0): checking UUID tree [ 2528.478441][T24227] BTRFS info (device loop0): enabling ssd optimizations [ 2528.486726][T24227] BTRFS info (device loop0): turning on async discard [ 2528.493566][T24227] BTRFS info (device loop0): enabling free space tree [ 2528.503959][T24227] BTRFS info (device loop0): force clearing of disk cache [ 2528.511327][T24227] BTRFS info (device loop0): enabling auto defrag [ 2528.517917][T24227] BTRFS info (device loop0): trying to use backup root at mount time [ 2528.526125][T24227] BTRFS info (device loop0): use zstd compression, level 3 [ 2528.668812][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.677188][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.786492][T24259] random: crng reseeded on system resumption [ 2531.858567][T24294] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2535.662956][T23753] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2536.417847][T24316] loop7: detected capacity change from 0 to 1024 [ 2537.042877][T24316] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 2537.054348][T24316] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2537.067254][T24316] EXT4-fs (loop7): invalid journal inode [ 2537.073004][T24316] EXT4-fs (loop7): can't get journal size [ 2537.084329][T24316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2537.218175][T24315] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (7780!=20869) [ 2537.538511][T23913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2537.702697][T13607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2537.784184][T13607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2537.810790][T13607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2538.005285][T13607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2538.013995][T13607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2540.625141][T16606] Bluetooth: hci4: command tx timeout [ 2541.413576][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 2541.422809][T24352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'. [ 2542.045928][T13607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2542.093601][T13607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2542.134489][T13607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2542.177407][T24358] loop3: detected capacity change from 0 to 512 [ 2542.226713][T13607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2542.234937][T13607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2542.403815][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2542.442716][T24358] EXT4-fs (loop3): 1 truncate cleaned up [ 2542.939722][T13607] Bluetooth: hci4: command tx timeout [ 2543.446343][T24358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2544.522411][T16606] Bluetooth: hci3: command tx timeout [ 2544.682746][T24367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 2544.991069][T16606] Bluetooth: hci4: command tx timeout [ 2546.584864][T16606] Bluetooth: hci3: command tx timeout [ 2547.064977][T16606] Bluetooth: hci4: command tx timeout [ 2547.347401][T21687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2547.777172][T24385] random: crng reseeded on system resumption [ 2548.664927][T16606] Bluetooth: hci3: command tx timeout [ 2550.836834][T16606] Bluetooth: hci3: command tx timeout [ 2550.912277][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2552.913487][T24432] loop7: detected capacity change from 0 to 512 [ 2552.996685][T24432] EXT4-fs: Ignoring removed i_version option [ 2553.053250][T24432] ext3: Unknown parameter 'defcontext' [ 2553.133886][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2553.754014][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 2553.774112][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2553.847143][T13607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2553.880770][T13607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2553.898505][T13607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2553.918596][T13607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2553.929735][T13607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2554.344823][ T5769] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2554.878501][ T5769] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2554.888129][T24355] lo speed is unknown, defaulting to 1000 [ 2554.937039][ T5769] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 2554.968650][ T5769] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2555.029816][ T5769] usb 1-1: config 63 has no interface number 0 [ 2555.068417][ T5769] usb 1-1: config 63 interface 66 has no altsetting 0 [ 2555.113522][ T5769] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2555.125783][T24355] virt_wifi0 speed is unknown, defaulting to 1000 [ 2555.154436][ T5769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2555.167970][T24320] lo speed is unknown, defaulting to 1000 [ 2555.198257][ T5769] usb 1-1: Product: syz [ 2555.219167][ T5769] usb 1-1: Manufacturer: syz [ 2555.230789][T24320] virt_wifi0 speed is unknown, defaulting to 1000 [ 2555.246799][ T5769] usb 1-1: SerialNumber: syz [ 2555.492569][ T57] bridge_slave_1: left allmulticast mode [ 2555.512429][ T57] bridge_slave_1: left promiscuous mode [ 2555.530939][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 2555.575750][ T5769] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2555.601575][ T5769] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 2555.639630][ T5769] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 2555.669016][ T5769] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 2555.690618][ T5769] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 2555.712859][ T5769] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 2555.767170][ T5769] uvcvideo 1-1:63.66: No streaming interface found for terminal 29. [ 2555.796178][ T5769] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized! [ 2555.989163][ T5769] usb 1-1: USB disconnect, device number 6 [ 2556.025450][T13607] Bluetooth: hci1: command tx timeout [ 2556.704720][ T5769] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 2556.793919][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2556.838997][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2557.077208][ T57] bond0 (unregistering): Released all slaves [ 2557.395968][ T5769] usb 1-1: device descriptor read/all, error -71 [ 2558.252856][T24500] kAFS: unable to lookup cell '' [ 2558.430098][T13607] Bluetooth: hci1: command tx timeout [ 2560.584710][T13607] Bluetooth: hci1: command tx timeout [ 2563.114555][T13607] Bluetooth: hci1: command tx timeout [ 2563.123166][T24515] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2563.130647][T24515] overlayfs: failed to set xattr on upper [ 2563.137140][T24515] overlayfs: ...falling back to redirect_dir=nofollow. [ 2563.144573][T24515] overlayfs: ...falling back to index=off. [ 2563.150790][T24515] overlayfs: ...falling back to uuid=null. [ 2563.512198][T24519] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2566.666077][T24538] loop0: detected capacity change from 0 to 8 [ 2568.268340][T24555] loop0: detected capacity change from 0 to 512 [ 2568.278468][T24443] lo speed is unknown, defaulting to 1000 [ 2568.297402][T24555] EXT4-fs: Ignoring removed orlov option [ 2568.410358][T24555] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2568.445026][T24555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2568.471173][T24555] EXT4-fs (loop0): 1 truncate cleaned up [ 2568.485585][T24555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2570.458072][T24443] virt_wifi0 speed is unknown, defaulting to 1000 [ 2570.498827][T23753] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2570.942392][T24595] ================================================================== [ 2570.950515][T24595] BUG: KFENCE: use-after-free read in dvb_device_open+0xee/0x3b0 [ 2570.950515][T24595] [ 2570.960446][T24595] Use-after-free read at 0xffff88823be54f18 (in kfence-#41): [ 2570.967839][T24595] dvb_device_open+0xee/0x3b0 [ 2570.972549][T24595] chrdev_open+0x234/0x6a0 [ 2570.976989][T24595] do_dentry_open+0x6d8/0x1660 [ 2570.981799][T24595] vfs_open+0x82/0x3f0 [ 2570.985905][T24595] path_openat+0x208c/0x31a0 [ 2570.990519][T24595] do_file_open+0x20e/0x430 [ 2570.995053][T24595] do_sys_openat2+0x10d/0x1e0 [ 2570.999770][T24595] __x64_sys_openat+0x12d/0x210 [ 2571.004661][T24595] do_syscall_64+0x10b/0xf80 [ 2571.009304][T24595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2571.015223][T24595] [ 2571.017552][T24595] kfence-#41: 0xffff88823be54000-0xffff88823be540ef, size=240, cache=skbuff_head_cache [ 2571.017552][T24595] [ 2571.029376][T24595] allocated by task 16316 on cpu 1 at 2553.488603s (17.540770s ago): [ 2571.037521][T24595] __alloc_skb+0x140/0x710 [ 2571.041973][T24595] nsim_dev_trap_report_work+0x2af/0xd20 [ 2571.047672][T24595] process_one_work+0xa0e/0x1980 [ 2571.052653][T24595] worker_thread+0x5ef/0xe50 [ 2571.057281][T24595] kthread+0x370/0x450 [ 2571.061386][T24595] ret_from_fork+0x72b/0xd50 [ 2571.066018][T24595] ret_from_fork_asm+0x1a/0x30 [ 2571.070844][T24595] [ 2571.073181][T24595] freed by task 16316 on cpu 1 at 2553.488672s (17.584507s ago): [ 2571.080972][T24595] kfree_skbmem+0x19a/0x210 [ 2571.085525][T24595] consume_skb+0xd1/0x110 [ 2571.089893][T24595] nsim_dev_trap_report_work+0x8de/0xd20 [ 2571.095594][T24595] process_one_work+0xa0e/0x1980 [ 2571.100569][T24595] worker_thread+0x5ef/0xe50 [ 2571.105277][T24595] kthread+0x370/0x450 [ 2571.109370][T24595] ret_from_fork+0x72b/0xd50 [ 2571.113989][T24595] ret_from_fork_asm+0x1a/0x30 [ 2571.118790][T24595] [ 2571.121133][T24595] CPU: 1 UID: 0 PID: 24595 Comm: syz.0.2758 Tainted: G L syzkaller #0 PREEMPT(full) [ 2571.132106][T24595] Tainted: [L]=SOFTLOCKUP [ 2571.136442][T24595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2571.146783][T24595] RIP: 0010:dvb_device_open+0xee/0x3b0 [ 2571.152301][T24595] Code: 0f 84 3f 02 00 00 e8 a1 e8 17 fa 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4c 02 00 00 <4c> 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 70 e8 17 fa 4c 89 ea 48 [ 2571.171956][T24595] RSP: 0018:ffffc90003f8f8d0 EFLAGS: 00010246 [ 2571.178231][T24595] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007512000 [ 2571.186229][T24595] RDX: 1ffff110477ca9e3 RSI: ffffffff87f0a53f RDI: ffff88823be54f18 [ 2571.194229][T24595] RBP: ffff88823be54f00 R08: 0000000000000001 R09: fffffbfff1fdcdb1 [ 2571.202224][T24595] R10: ffffffff8fee6d8f R11: 0000000000000000 R12: ffff88803825ea80 [ 2571.210215][T24595] R13: ffffffff87f0a470 R14: ffff88802d639358 R15: ffff88803825eac8 [ 2571.218318][T24595] FS: 00007f442a1a46c0(0000) GS:ffff88812446e000(0000) knlGS:0000000000000000 [ 2571.227363][T24595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2571.233987][T24595] CR2: ffff88823be54f18 CR3: 00000000672b7000 CR4: 0000000000350ef0 [ 2571.241993][T24595] Call Trace: [ 2571.245286][T24595] [ 2571.248227][T24595] ? __pfx_dvb_device_open+0x10/0x10 [ 2571.253555][T24595] chrdev_open+0x234/0x6a0 [ 2571.258003][T24595] ? __pfx_apparmor_file_open+0x10/0x10 [ 2571.263607][T24595] ? __pfx_chrdev_open+0x10/0x10 [ 2571.268575][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.274249][T24595] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2571.280631][T24595] do_dentry_open+0x6d8/0x1660 [ 2571.285454][T24595] ? __pfx_chrdev_open+0x10/0x10 [ 2571.290440][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.296141][T24595] vfs_open+0x82/0x3f0 [ 2571.300258][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.305952][T24595] path_openat+0x208c/0x31a0 [ 2571.310595][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.316283][T24595] ? __schedule+0x12a7/0x67a0 [ 2571.321025][T24595] ? __pfx_path_openat+0x10/0x10 [ 2571.326012][T24595] do_file_open+0x20e/0x430 [ 2571.330548][T24595] ? __pfx_do_file_open+0x10/0x10 [ 2571.335628][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.341353][T24595] ? alloc_fd+0x476/0x790 [ 2571.345729][T24595] do_sys_openat2+0x10d/0x1e0 [ 2571.350621][T24595] ? __pfx_do_sys_openat2+0x10/0x10 [ 2571.355865][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.361531][T24595] ? do_raw_spin_lock+0x128/0x260 [ 2571.366598][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.372265][T24595] ? find_held_lock+0x2b/0x80 [ 2571.376997][T24595] __x64_sys_openat+0x12d/0x210 [ 2571.381888][T24595] ? __pfx___x64_sys_openat+0x10/0x10 [ 2571.387302][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.392965][T24595] ? rcu_is_watching+0x12/0xc0 [ 2571.397778][T24595] do_syscall_64+0x10b/0xf80 [ 2571.402419][T24595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2571.408335][T24595] RIP: 0033:0x7f442935d68e [ 2571.412766][T24595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2571.432403][T24595] RSP: 002b:00007f442a1a3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2571.440850][T24595] RAX: ffffffffffffffda RBX: 00007f442a1a46c0 RCX: 00007f442935d68e [ 2571.448934][T24595] RDX: 0000000000000002 RSI: 00007f442a1a3c00 RDI: ffffffffffffff9c [ 2571.456926][T24595] RBP: 00007f442a1a3c00 R08: 0000000000000000 R09: 0000000000000000 [ 2571.464924][T24595] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2571.473010][T24595] R13: 00007f4429616128 R14: 00007f4429616090 R15: 00007ffff867dc68 [ 2571.481115][T24595] [ 2571.484144][T24595] ================================================================== [ 2571.492211][T24595] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 2571.500728][T24595] CPU: 1 UID: 0 PID: 24595 Comm: syz.0.2758 Tainted: G L syzkaller #0 PREEMPT(full) [ 2571.511729][T24595] Tainted: [L]=SOFTLOCKUP [ 2571.516087][T24595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2571.526173][T24595] Call Trace: [ 2571.529476][T24595] [ 2571.532422][T24595] dump_stack_lvl+0x100/0x190 [ 2571.537146][T24595] vpanic+0x552/0x970 [ 2571.541163][T24595] ? __pfx_vpanic+0x10/0x10 [ 2571.545697][T24595] ? __pfx_vprintk_emit+0x10/0x10 [ 2571.550783][T24595] panic+0xd1/0xe0 [ 2571.554537][T24595] ? __pfx_panic+0x10/0x10 [ 2571.559013][T24595] check_panic_on_warn.cold+0x19/0x34 [ 2571.564431][T24595] kfence_report_error.cold+0x308/0xad0 [ 2571.570049][T24595] ? __pfx_kfence_report_error+0x10/0x10 [ 2571.575752][T24595] ? dvb_device_open+0xee/0x3b0 [ 2571.580633][T24595] ? chrdev_open+0x234/0x6a0 [ 2571.585252][T24595] ? do_dentry_open+0x6d8/0x1660 [ 2571.590678][T24595] ? vfs_open+0x82/0x3f0 [ 2571.594963][T24595] ? path_openat+0x208c/0x31a0 [ 2571.599764][T24595] ? do_file_open+0x20e/0x430 [ 2571.604475][T24595] ? do_sys_openat2+0x10d/0x1e0 [ 2571.609392][T24595] ? __x64_sys_openat+0x12d/0x210 [ 2571.614470][T24595] ? do_syscall_64+0x10b/0xf80 [ 2571.619294][T24595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2571.625482][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.631179][T24595] ? trace_sched_exit_tp+0x11c/0x160 [ 2571.636532][T24595] kfence_handle_page_fault+0x238/0x5a0 [ 2571.642159][T24595] page_fault_oops+0x167/0x790 [ 2571.649076][T24595] ? __pfx_page_fault_oops+0x10/0x10 [ 2571.654424][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.660101][T24595] ? find_held_lock+0x2b/0x80 [ 2571.664842][T24595] ? search_bpf_extables+0x145/0x290 [ 2571.670163][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.675842][T24595] ? is_prefetch.isra.0+0x9f/0x530 [ 2571.680999][T24595] ? dvb_device_open+0xee/0x3b0 [ 2571.685887][T24595] ? __pfx_is_prefetch.isra.0+0x10/0x10 [ 2571.691490][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.699063][T24595] ? fixup_exception+0x119/0xff0 [ 2571.704148][T24595] kernelmode_fixup_or_oops.isra.0+0xbd/0xf0 [ 2571.710184][T24595] __bad_area_nosemaphore+0x35b/0x3f0 [ 2571.715608][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.721329][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.727008][T24595] ? spurious_kernel_fault+0x3fc/0x4b0 [ 2571.732505][T24595] do_kern_addr_fault+0x5b/0x80 [ 2571.737437][T24595] exc_page_fault+0xc3/0xd0 [ 2571.741995][T24595] asm_exc_page_fault+0x26/0x30 [ 2571.746861][T24595] RIP: 0010:dvb_device_open+0xee/0x3b0 [ 2571.752333][T24595] Code: 0f 84 3f 02 00 00 e8 a1 e8 17 fa 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4c 02 00 00 <4c> 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 70 e8 17 fa 4c 89 ea 48 [ 2571.771987][T24595] RSP: 0018:ffffc90003f8f8d0 EFLAGS: 00010246 [ 2571.778063][T24595] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007512000 [ 2571.786046][T24595] RDX: 1ffff110477ca9e3 RSI: ffffffff87f0a53f RDI: ffff88823be54f18 [ 2571.794027][T24595] RBP: ffff88823be54f00 R08: 0000000000000001 R09: fffffbfff1fdcdb1 [ 2571.802000][T24595] R10: ffffffff8fee6d8f R11: 0000000000000000 R12: ffff88803825ea80 [ 2571.810008][T24595] R13: ffffffff87f0a470 R14: ffff88802d639358 R15: ffff88803825eac8 [ 2571.818009][T24595] ? __pfx_dvb_device_open+0x10/0x10 [ 2571.823321][T24595] ? dvb_device_open+0xcf/0x3b0 [ 2571.828192][T24595] ? __pfx_dvb_device_open+0x10/0x10 [ 2571.833515][T24595] chrdev_open+0x234/0x6a0 [ 2571.837962][T24595] ? __pfx_apparmor_file_open+0x10/0x10 [ 2571.843629][T24595] ? __pfx_chrdev_open+0x10/0x10 [ 2571.848592][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.854861][T24595] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2571.861213][T24595] do_dentry_open+0x6d8/0x1660 [ 2571.866028][T24595] ? __pfx_chrdev_open+0x10/0x10 [ 2571.871095][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.876745][T24595] vfs_open+0x82/0x3f0 [ 2571.880828][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.886513][T24595] path_openat+0x208c/0x31a0 [ 2571.891155][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.896838][T24595] ? __schedule+0x12a7/0x67a0 [ 2571.901632][T24595] ? __pfx_path_openat+0x10/0x10 [ 2571.906629][T24595] do_file_open+0x20e/0x430 [ 2571.911180][T24595] ? __pfx_do_file_open+0x10/0x10 [ 2571.916275][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.921958][T24595] ? alloc_fd+0x476/0x790 [ 2571.926341][T24595] do_sys_openat2+0x10d/0x1e0 [ 2571.931041][T24595] ? __pfx_do_sys_openat2+0x10/0x10 [ 2571.936263][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.941913][T24595] ? do_raw_spin_lock+0x128/0x260 [ 2571.946962][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.952608][T24595] ? find_held_lock+0x2b/0x80 [ 2571.957341][T24595] __x64_sys_openat+0x12d/0x210 [ 2571.962219][T24595] ? __pfx___x64_sys_openat+0x10/0x10 [ 2571.967677][T24595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2571.973333][T24595] ? rcu_is_watching+0x12/0xc0 [ 2571.978130][T24595] do_syscall_64+0x10b/0xf80 [ 2571.982789][T24595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2571.988706][T24595] RIP: 0033:0x7f442935d68e [ 2571.993125][T24595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2572.012840][T24595] RSP: 002b:00007f442a1a3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2572.021462][T24595] RAX: ffffffffffffffda RBX: 00007f442a1a46c0 RCX: 00007f442935d68e [ 2572.029437][T24595] RDX: 0000000000000002 RSI: 00007f442a1a3c00 RDI: ffffffffffffff9c [ 2572.037408][T24595] RBP: 00007f442a1a3c00 R08: 0000000000000000 R09: 0000000000000000 [ 2572.045467][T24595] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2572.053443][T24595] R13: 00007f4429616128 R14: 00007f4429616090 R15: 00007ffff867dc68 [ 2572.061441][T24595] [ 2572.064870][T24595] Kernel Offset: disabled [ 2572.070371][T24595] Rebooting in 86400 seconds..