last executing test programs: 45m21.445361338s ago: executing program 32 (id=104): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 45m13.412836216s ago: executing program 33 (id=131): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48000) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) socket$inet(0x2, 0x3, 0x33) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 45m6.867185454s ago: executing program 34 (id=162): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x20000, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 45m6.251921114s ago: executing program 35 (id=165): sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x14, r1, 0x183, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 45m1.295585004s ago: executing program 36 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) 44m45.282976697s ago: executing program 8 (id=262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r1, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x909, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1fff, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="201835000000350317ba2ecbb3ac4fcca68b0d4dc23b1ef06861ea55f4de6dd17ea18265cc3288651c16a4887bbf7d2b44b03a1b6c9be06bd2951b98091f3e9afa20b396d4fa"], 0x0, 0x0, 0x0, 0x0}, 0x0) 44m43.299916728s ago: executing program 8 (id=269): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x4004000, &(0x7f0000000140)={[{@qnoenforce}, {@nodiscard}, {@nouuid}, {@usrquota}, {@inode32}, {@gquota}, {@lazytime}, {@usrquota}, {@gqnoenforce}, {}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 44m41.913900139s ago: executing program 8 (id=270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0xfffffd85}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 44m40.516651463s ago: executing program 8 (id=275): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) 44m40.191279399s ago: executing program 37 (id=275): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000010003c3bfa300000000000007030000f0ffffff7a0af0fff8ffffff71a4f0ff0000000065030200000000ff2d400500000000004400000001ede4ff6b03000000000000cc440000000000007a0a00fe00ffffffc303000001000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8cde6aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75cafd2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeeaaed7b35e3460bd571e09196ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb0613684e128cb06ded90b9a341304c2890cda1f96b95add69279063eaa76c336adad0b80b4be2511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999a556b3df4dd146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa83a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d0f9dd53478dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d78d6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ba0d48fceb72b30bbee0ab3e6b12ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c5"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) 44m19.074822704s ago: executing program 38 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 44m9.678085743s ago: executing program 39 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000140)='./file0/file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) 43m58.733534137s ago: executing program 40 (id=434): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e8, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH71p0k0/qj1EPFgQEyaNNYKIuYiInqyRw/G/Kilm0aSFWwIqCjeevPqQfHg3+BJwf9AEE+epRAkLehxZXZn4prspt1u1sHs5wNT3ps3y3sz333zmjfzNoC+NRkRn0TEcESsRsRovj/Jt3i1sWXH3d3dXsq2JGq1t/9I6uV3dreXoukzmdPZP2nEVBqRfh5xvkW9mze3ri9WKisbeX6muvbBzObNreevrS1eXbm6cmPu4ouz85fmLs2+cGTneuv85Zeenn/j11uvfbP0y5Xv3svaeyYvaz6PozKZXbW0ddmFo66sZGfKbgAPJPt6DkTEYL3/j8ZAPdUwGh+/U2rjAICeqNVqA/vyAMCxlxjzAaDPFH/339ndXiq2UiYiKMXOQkScaMS/eL7bKBncexI01MPne5MR8X76/US2RY+ewwIAAAD0sx8WIuJyq/m/NJ5qOu5sRDyUrw8Yi4jxiHg4Ih7psv7JffmD8z/p7S6r4BA7CxEvN63tuNsU/9zYQJ47W4/9ULJ6rbJyIf8+TMXQSJafPaSOP7euf9GurHn+L9uy+ou5wLwdtwdH/v2Z5cXqYjfnzD92Po14crBV/JO9+d8kIia6qOPH8bWv2pXdO/70Uu3riGdb9v9k75jk8PVZM/X7wUxxVzjorZ8+e7dd/eJfrqz/nzo8/mNJ83q9zc7rePzcbxvtyh70/j+cXKk3cDjf99FitboxGzGcvHlw/1znbT6uiutRXK8s/lPPtB7/iyBkF/TRiHgsi2VEPBER5zqo89vxv062K9P/y5XFf7mj/t954pWJ139uV//99f/5emOm8j3+/3dv9xugstsJAAAAAAAAwNFI62u7k3R6L52m09ON3/CeiFNpZX2z+tzq+oc3lhtrwMdiKC3e9Bpteh90Nn8vuMjP7ctfzN8Z/nLkZD0/vbReWS775AGgT51uM/5nfh8pu3UAQM+cKLsBAMB/zvgPAP3H+A8A/cf4DwD9x/gPAP3H+A8AfaWb3/WXkJA4romy70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/b38HAAD//78JzGY=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) 43m30.327289351s ago: executing program 41 (id=511): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) 43m17.960377739s ago: executing program 42 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000002340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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") 42m41.92552217s ago: executing program 43 (id=661): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0xcb}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x45, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0xfffffff7, 0x6, 0x7, 0x4c, 0x1, 0x80, 0x8, 0xa, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x9, 0x1, 0x6, 0x5, 0x1, 0x4], [0x10, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x6, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xefa, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x801, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x8, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x5, 0x2, 0x3, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0xe32, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 42m31.332441565s ago: executing program 7 (id=766): pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fsopen(0x0, 0x0) 42m30.688630997s ago: executing program 8 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 42m29.769504431s ago: executing program 8 (id=777): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) dup3(r1, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x4, 0x8, 0x4, 0x344}, 0x0, 0x0) 42m29.298695139s ago: executing program 44 (id=780): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000000c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents64(r0, 0x0, 0x0) 42m28.787047091s ago: executing program 7 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="66b9800000c00f326635008200000f3066b98804000066b89d6800006a17580000000000300fc76c000f224466b9800000c00f3266350100000066b85100000066ba0000000f3066b82d006600d3d3ba000000000f30f0281dba4000b006ee67dad5660f3880360400", 0x69}], 0x1, 0x40, 0x0, 0x14) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xd, 0x800000008, 0x8000000000000001, 0x2, 0x20000000009f99, 0xb, 0xfffffffffffffffd, 0x200005, 0x1, 0x2, 0x1000000000006, 0x7fffffffffffffff, 0x80000100962, 0x8, 0x8, 0x8], 0x100000, 0x132c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 42m28.558167529s ago: executing program 7 (id=784): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 42m28.093077356s ago: executing program 7 (id=789): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4421, &(0x7f0000004500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) 42m27.136291504s ago: executing program 7 (id=792): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xd], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42m24.819554861s ago: executing program 7 (id=800): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000ac0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x200001, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3b}, @fd}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 42m24.540509923s ago: executing program 45 (id=800): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000ac0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x200001, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3b}, @fd}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 42m14.741461605s ago: executing program 46 (id=777): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) dup3(r1, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x4, 0x8, 0x4, 0x344}, 0x0, 0x0) 41m32.95093762s ago: executing program 2 (id=1025): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x4004050) pread64(r0, &(0x7f00000000c0)=""/127, 0x7f, 0x5) 41m32.453007599s ago: executing program 2 (id=1027): socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 41m32.08447811s ago: executing program 2 (id=1028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) 41m31.987116637s ago: executing program 2 (id=1029): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1380443, 0x0, 0x3, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737fe0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf75592f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) getdents(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 41m31.538141563s ago: executing program 2 (id=1033): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) 41m30.991086778s ago: executing program 2 (id=1035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r2, 0x80) r3 = accept$netrom(r2, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0xffdd) accept4(r3, 0x0, 0x0, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) close(0x3) 41m30.505274217s ago: executing program 47 (id=1035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r2, 0x80) r3 = accept$netrom(r2, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0xffdd) accept4(r3, 0x0, 0x0, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) close(0x3) 33m1.681822016s ago: executing program 1 (id=2583): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff00", 0x5}]) 33m1.114937591s ago: executing program 1 (id=2586): unshare(0x2040400) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x2, 0x0, 0x0) 33m0.278943899s ago: executing program 1 (id=2590): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000002, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 33m0.226799333s ago: executing program 1 (id=2591): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 33m0.084682465s ago: executing program 1 (id=2593): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x35, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r0, 0x7, 0x0, 0x3, {{0x2}, {@val={0x8, 0x2, 0x5f}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 32m59.883035971s ago: executing program 1 (id=2597): sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000004900)=""/4068, 0xfe4}], 0x1) 32m59.738095262s ago: executing program 48 (id=2597): sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000004900)=""/4068, 0xfe4}], 0x1) 31m31.72709217s ago: executing program 3 (id=3216): syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000280)) socket$inet6(0xa, 0x80003, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23, 0xfffffffc}, 0x18}}, 0x20008050) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 31m30.47885398s ago: executing program 3 (id=3224): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) 31m30.1151888s ago: executing program 3 (id=3227): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x40}}, 0x44) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000100088fb452400"], 0x0) 31m29.825380583s ago: executing program 3 (id=3230): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 31m29.055097875s ago: executing program 3 (id=3234): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 31m28.965712303s ago: executing program 3 (id=3238): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, 0x0, 0x80000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 31m13.914294618s ago: executing program 49 (id=3238): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, 0x0, 0x80000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 6m40.631134757s ago: executing program 6 (id=7581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff0500140002000000050005000200000005000100"], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x3c20, &(0x7f0000000400)={0x0, 0x2050, 0x3380, 0x8003, 0xd2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r9}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 6m40.315152163s ago: executing program 6 (id=7584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x20000001, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xfff2, 0xf}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) gettid() 6m39.005085728s ago: executing program 6 (id=7588): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m37.923040615s ago: executing program 6 (id=7591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x20000001, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xfff2, 0xf}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) gettid() 6m36.773630057s ago: executing program 6 (id=7593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m36.569805864s ago: executing program 6 (id=7595): socket$kcm(0xf, 0x3, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 6m21.57540884s ago: executing program 50 (id=7595): socket$kcm(0xf, 0x3, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 10.246091646s ago: executing program 5 (id=8822): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffffff, 0x0, 0x6e480, 0xe6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000340)) 7.774209134s ago: executing program 0 (id=8829): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, 0x0, 0x400, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@unlock_all, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 6.599034779s ago: executing program 0 (id=8832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) 6.549906983s ago: executing program 4 (id=8833): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2) 5.670873934s ago: executing program 4 (id=8835): r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='(\b \x00', @ANYRES16=r3, @ANYBLOB="0b0d28bd7000fcdbdf250200000014000180060005004e2000000500020001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000ba0424c800", @ANYRES16=r3, @ANYBLOB="000127bd7000fedbdf250200000008000400000000000800040000020000080004000200000008000300000000000500050001000000050005008a000000080004000600000008000400010400000500050007000000"], 0x5c}, 0x1, 0x0, 0x0, 0xd1}, 0x804) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) keyctl$revoke(0x3, r8) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc491"], 0x1c}}, 0x48011) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0x0, @multicast}) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.519748645s ago: executing program 0 (id=8836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) readlink(&(0x7f0000001840)='./file0\x00', 0x0, 0x2f) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0xd}, @void, @eth={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x11, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @remote, @loopback}, {{0x6e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x800, 0x0, 0x8}}}}}}}, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r2 = syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) recvmmsg(r4, &(0x7f0000002c00), 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x3, 0x2a28, 0x0, "f759ca14860e00", '\x00', "03000500", "fc599184", ["8bada940ed86af0a00", "c2a4a110cfc1bac26ef76ef7", '\x00', "00113a071fa0fcd9c500"]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000540)=0x7b1) 4.675706534s ago: executing program 4 (id=8837): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 4.553888103s ago: executing program 4 (id=8838): syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xfc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) 4.47063757s ago: executing program 9 (id=8839): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.041886934s ago: executing program 0 (id=8840): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r2, 0x0, 0x400, 0x0) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f00000000c0)=@unlock_all, 0xb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 3.940709263s ago: executing program 5 (id=8841): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) gettid() socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x20040011) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "3ad019a29ba70539", "a169b9bf49aa2b664fa0c8c0da28e95a189d30f0cd3fd898f9ce494cfda03c6e", "d77a24b9", "7a3f3d975ef43ae5"}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r6, 0x5) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000406010100000000000000000700000a0500010007000000050001000700000005"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 3.821416552s ago: executing program 4 (id=8842): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000300)='./file0\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x5, 0xff81, 0x0, 0x7c, 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x9, @loopback, 0x3e}]}, &(0x7f0000000280)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x60, r6, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x2}, 0x0) 3.426638654s ago: executing program 9 (id=8843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_fadd={0x58, 0x114, 0x8, {{0x3, 0xffff9b0c}, &(0x7f0000000140)=0x94aa, &(0x7f0000000200)=0x2, 0xcf, 0xd3, 0x7, 0x3, 0x8, 0x3}}], 0x58, 0x4040000}, 0x0) 3.140580427s ago: executing program 5 (id=8844): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vcsu(0x0, 0x2, 0x610083) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) socket(0x848000000015, 0x805, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="09339b69dc5d746fb0e121fe1baac5ed9fe36c44e9e8e1685431ca09df1c6068b5171a36db8e9b0516cc1eb502c017d650bfc8960344cd282f76e04d685ac4ea6fa2432a89399d401865047ead4428287646a5145718721a640de5028e3231fec9476849c561fd3a", 0x68, 0x800, &(0x7f0000000680)={0x11, 0x11, r3, 0x1, 0x8d}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 2.23167762s ago: executing program 9 (id=8845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 1.975219031s ago: executing program 9 (id=8846): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48005, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x3, 0x3, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8054}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4004040) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 1.301990685s ago: executing program 0 (id=8847): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000180)=0x7fffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x2, &(0x7f0000000680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x800, r0, &(0x7f0000000000)="abceeda37f347dd8fd31fdee379656b32b9e1448f834241f1d93d6a9dc836d21f0fc44da7b3603dda72e60799355db41350a9e713b8cb31bbf7e6ff6223d90b5d0e0440cc1480f7aaafac87b3712c2ab286f7f80df494c65eb75a6939ba2866296626dcfb23c60841f277c2f116e68f74b86cea166b106", 0x77, 0x0, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x59, 0xffffffffffffffff, &(0x7f00000006c0)="4c5597c7f6fb8247a8155321e11a3e3535fd0cafd1314c90eb7b3a0e379eef0fd431a69a87be8f10932cfa4823165210b9a8761e4231a519826746f15b0eafef999ab9583d0bc09ee2ac3a2f2eab8726463eb4fd6d0f380aa4cda2798e24633341cd1c490578e3cd89831f6cabaebc4a340f5dab14eeb539bba3ad4167ad8cd736b039aa23e8beb5e3861f0ff57911854cbf1ac115bd4700ab3f93bd", 0x9c, 0x3, 0x0, 0x0, r2}]) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.297090885s ago: executing program 5 (id=8848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) readlink(&(0x7f0000001840)='./file0\x00', 0x0, 0x2f) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0xd}, @void, @eth={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x11, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @remote, @loopback}, {{0x6e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x800, 0x0, 0x8}}}}}}}, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r2 = syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) recvmmsg(r4, &(0x7f0000002c00), 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x3, 0x2a28, 0x0, "f759ca14860e00", '\x00', "03000500", "fc599184", ["8bada940ed86af0a00", "c2a4a110cfc1bac26ef76ef7", '\x00', "00113a071fa0fcd9c500"]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000540)=0x7b1) 1.133806998s ago: executing program 0 (id=8849): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffffff, 0x0, 0x6e480, 0xe6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, 0x0) 1.074599003s ago: executing program 5 (id=8850): syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xfc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) 1.042364526s ago: executing program 9 (id=8851): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x6}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000000), 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 957.687002ms ago: executing program 4 (id=8852): syz_emit_ethernet(0x56, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604dc58c00200600fe80000000000000000000000000001afe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffd90780067162400ff000000705f5dffed"], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x200}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000705, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000780)="000000000000000000000000000000003e9b6b014840244ad20bdf0c481953085c7148735672aa8304be48894df17222785b40ed406bee0ee578ce30e30834fed6daec61f53517c3934ec32954dd384f73514b8c2c6307e917a0d12f6cdbe836d3de6884833e163d352ba1d483c9bd32e34ac377599a869aab6ee02d8e595b98b96e0050317efe079afda65afea53ee9bdbb4260fbbca3104ac0d3bc1ba62088489339f9cf04e26dac97c1faee23577612f5d1477a7f725cdb769e730bfb91722d2929ef496edf38fc62de2f8297763e98eed1eaad1abd5c380fd17d0ce5123732f2b6d285f3ddd27b02589176435a53690af6affb3fc614c47cbb9e6ea4c961cd0dcc65d6880c7bb21539e0134743d555ae6a6b96aa193714ea7676b7476eabe16abeb64dc481beeb3d8d0d32505f58c3bfcd9bb0589ecb202d1cee7833a859b7b0bffd93e249d234c9bc538ef9fa4cf2be92fe315c4e02021cb21c624cdf98d2eeeec7cb6bc777a0ffcc452edca3df64bc5ae48764b23735f65dc59ffe0f172d876bb862b0e64236f1e9aefc077a75cab138a81a7c4b647dbea844af00f9578070849ee70d1875a57f28aa0f5ab3c14cbd2edbaf93aad3cf941ba5baa3ba33f4cbc9342cdbdc253d69a3594c81fdc53b23351dd6179c1d5fd60c32f33412021079a40124bb6411a1b5cceb1fc972696ce14a36e90a6750372b9f4008b4c688897bbd1365384100a301", 0x20a) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1100000004e6ff0004000000027cc2a107edc5a1b8702e7bfe15bdccbdacb8c35f93f206f8bd9c0c"], 0x48) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 516.807208ms ago: executing program 9 (id=8853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="62a70000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x8, 0xfffffffe, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 5 (id=8854): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x8000000010, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 9pnet_virtio: no channels available for device syz [ 1579.111256][ T9483] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1580.298664][ T9483] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.315668][ T9483] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1580.325820][ T9483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.404195][ T9483] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1580.598032][ T9483] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1581.498584][T23976] 9pnet_virtio: no channels available for device syz [ 1581.569340][ T5942] usb 1-1: USB disconnect, device number 26 [ 1581.581419][T23977] delete_channel: no stack [ 1587.286170][T24026] 9pnet_virtio: no channels available for device syz [ 1588.249918][T24034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5152'. [ 1589.089016][T24037] loop0: detected capacity change from 0 to 128 [ 1589.111006][T24037] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1589.129754][T24037] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 1589.430222][T24042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1589.439579][T24042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1589.448675][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1590.032786][T24041] delete_channel: no stack [ 1590.080013][T24046] loop0: detected capacity change from 0 to 128 [ 1590.087335][T24046] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1590.111410][T24046] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 1590.429647][T24050] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5156'. [ 1597.366611][T24105] delete_channel: no stack [ 1597.571949][T24108] 9pnet_virtio: no channels available for device syz [ 1598.702804][T24115] 9pnet_virtio: no channels available for device syz [ 1600.991125][ T786] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1601.375843][ T786] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.399369][ T786] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1601.533998][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.154180][ T786] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1602.753574][ T786] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1603.005802][ T786] usb 1-1: USB disconnect, device number 27 [ 1603.251250][T24134] delete_channel: no stack [ 1607.119895][T24174] 9pnet_virtio: no channels available for device syz [ 1607.487846][T24179] /dev/nullb0: Can't lookup blockdev [ 1607.506148][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.517219][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.541783][T24188] 9pnet_virtio: no channels available for device syz [ 1611.947870][T24211] delete_channel: no stack [ 1618.060445][T24260] /dev/nullb0: Can't lookup blockdev [ 1618.205023][ C0] hrtimer: interrupt took 64729 ns [ 1622.005981][T24297] gfs2: not a GFS2 filesystem [ 1626.891522][T24332] 9pnet_virtio: no channels available for device syz [ 1631.694594][T24377] 9pnet_virtio: no channels available for device syz [ 1636.821972][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5251'. [ 1636.851111][T24416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5251'. [ 1640.522135][T24446] 9pnet_virtio: no channels available for device syz [ 1642.019225][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1642.037317][T24461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1643.164888][T24470] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1643.232213][T24468] loop0: detected capacity change from 0 to 128 [ 1643.321901][T24468] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1643.446136][T24468] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 1643.551294][T24479] /dev/nullb0: Can't lookup blockdev [ 1646.466450][T24501] netlink: 176 bytes leftover after parsing attributes in process `syz.9.5268'. [ 1648.384556][T24512] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1649.461651][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1649.482031][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1649.612878][T24534] 9pnet_virtio: no channels available for device syz [ 1649.654211][T24528] ceph: No mds server is up or the cluster is laggy [ 1654.140486][T24565] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1656.588989][T24592] gfs2: not a GFS2 filesystem [ 1657.154983][T24593] 9pnet_virtio: no channels available for device syz [ 1657.170623][T24594] delete_channel: no stack [ 1659.093866][T24603] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1662.020189][T24620] ceph: No mds server is up or the cluster is laggy [ 1663.072005][T24630] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5298'. [ 1663.161446][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5298'. [ 1663.188353][T24632] ceph: No mds server is up or the cluster is laggy [ 1663.688743][T24644] delete_channel: no stack [ 1665.059309][T24661] 9pnet_virtio: no channels available for device syz [ 1667.590940][T24673] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1668.815218][T24683] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1668.951568][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.971489][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.308159][T24696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5308'. [ 1671.678763][T24719] 9pnet_virtio: no channels available for device syz [ 1671.986852][T24721] delete_channel: no stack [ 1673.276317][T24730] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1674.320046][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1674.664436][ T8] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.681120][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1674.702427][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.740397][T24752] ceph: No mds server is up or the cluster is laggy [ 1678.617243][T24767] 9pnet_virtio: no channels available for device syz [ 1678.664771][T24735] delete_channel: no stack [ 1678.669705][ T8] usb 1-1: can't set config #27, error -71 [ 1678.685678][ T8] usb 1-1: USB disconnect, device number 28 [ 1679.431218][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1679.438968][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1679.599132][T24771] ceph: No mds server is up or the cluster is laggy [ 1681.772769][T24784] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1684.781195][T24798] ceph: No mds server is up or the cluster is laggy [ 1685.075539][T24804] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1685.668359][T24815] tmpfs: Bad value for 'mpol' [ 1686.816575][T24829] tmpfs: Bad value for 'mpol' [ 1688.585022][T24839] ceph: No mds server is up or the cluster is laggy [ 1690.384191][T24854] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1692.270773][T24863] ceph: No mds server is up or the cluster is laggy [ 1692.292129][T24866] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1693.487222][T24881] ceph: No mds server is up or the cluster is laggy [ 1696.005535][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1696.012370][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1696.073233][T24904] ceph: No mds server is up or the cluster is laggy [ 1696.565737][T24914] tmpfs: Bad value for 'mpol' [ 1696.809732][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1696.816377][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1697.178180][T24918] loop0: detected capacity change from 0 to 128 [ 1697.308428][T24918] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1697.326577][T24918] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 1701.319665][T24948] tmpfs: Unknown parameter 'mp' [ 1702.241368][T24951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5366'. [ 1702.461461][T24959] tmpfs: Bad value for 'mpol' [ 1704.393538][T24976] tmpfs: Unknown parameter 'mp' [ 1706.431079][T24970] ceph: No mds server is up or the cluster is laggy [ 1706.499325][T24978] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1709.623294][T25002] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1712.384191][T25031] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1713.821732][T25043] ceph: No mds server is up or the cluster is laggy [ 1715.558728][T25062] 9pnet_virtio: no channels available for device syz [ 1717.415571][T25078] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1718.927935][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5395'. [ 1724.435583][ T9483] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1724.644631][ T9483] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.356373][ T9483] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1725.365673][ T9483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.418032][T25156] 9pnet_virtio: no channels available for device syz [ 1725.484011][ T9483] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1725.669190][ T9483] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1727.815870][T25170] ceph: No mds server is up or the cluster is laggy [ 1728.086639][T25175] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1728.277785][T25145] delete_channel: no stack [ 1728.412080][T23403] usb 1-1: USB disconnect, device number 29 [ 1730.398760][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.792990][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.088616][T25225] loop0: detected capacity change from 0 to 128 [ 1734.113683][T25225] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1734.145457][T25225] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 1734.523551][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1734.599964][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1734.805723][T25227] ceph: No mds server is up or the cluster is laggy [ 1736.123377][T25243] ceph: No mds server is up or the cluster is laggy [ 1737.422642][T25254] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1738.465730][T25267] delete_channel: no stack [ 1738.819763][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1738.825951][T25271] ceph: No mds server is up or the cluster is laggy [ 1738.833467][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1741.101428][T25302] loop0: detected capacity change from 0 to 128 [ 1741.122223][T25302] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1741.147090][T25295] delete_channel: no stack [ 1741.187299][T25302] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 1748.460006][T25348] ceph: No mds server is up or the cluster is laggy [ 1748.745856][T25361] delete_channel: no stack [ 1751.940821][T25370] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1752.042569][T25372] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1752.994676][T25385] loop0: detected capacity change from 0 to 128 [ 1753.047297][T25385] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1753.131848][T25385] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 1753.341060][T25390] tmpfs: Bad value for 'mpol' [ 1756.254120][T25412] tmpfs: Unknown parameter 'mp' [ 1757.100515][T25421] tmpfs: Bad value for 'mpol' [ 1757.195075][T25413] ceph: No mds server is up or the cluster is laggy [ 1758.973442][T25437] delete_channel: no stack [ 1761.745543][T25456] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1763.524275][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1763.548856][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1763.671832][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 1763.716919][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 1763.846451][T23403] libceph: connect (1)[c::]:6789 error -101 [ 1763.869221][T23403] libceph: mon0 (1)[c::]:6789 connect error [ 1764.044491][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 1764.063409][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 1764.183349][T25478] ceph: No mds server is up or the cluster is laggy [ 1764.391328][T23403] libceph: connect (1)[c::]:6789 error -101 [ 1764.403766][T23403] libceph: mon0 (1)[c::]:6789 connect error [ 1764.444209][T25483] delete_channel: no stack [ 1764.574119][T25480] ceph: No mds server is up or the cluster is laggy [ 1766.294374][T25497] 9pnet_virtio: no channels available for device syz [ 1766.694140][T25467] delete_channel: no stack [ 1768.614174][T25513] ceph: No mds server is up or the cluster is laggy [ 1768.672268][T25510] delete_channel: no stack [ 1770.626372][T25537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5495'. [ 1771.436856][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 1771.644076][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 1771.871177][T25543] ceph: No mds server is up or the cluster is laggy [ 1772.109155][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1773.290601][T25551] ceph: No mds server is up or the cluster is laggy [ 1773.307875][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1775.314999][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1775.337432][T25572] ceph: No mds server is up or the cluster is laggy [ 1775.370624][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1776.883974][T25584] delete_channel: no stack [ 1778.028961][T25598] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1778.901448][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1779.076340][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1779.118048][T25609] ceph: No mds server is up or the cluster is laggy [ 1780.180777][T25624] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1780.362632][T25616] ceph: No mds server is up or the cluster is laggy [ 1783.918606][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1784.600576][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1784.901730][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1784.921179][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1785.489125][ T9483] libceph: connect (1)[c::]:6789 error -101 [ 1785.545611][ T9483] libceph: mon0 (1)[c::]:6789 connect error [ 1785.735804][T25659] ceph: No mds server is up or the cluster is laggy [ 1787.124844][T25679] ceph: No mds server is up or the cluster is laggy [ 1789.242727][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1789.248814][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1789.451940][T25702] ceph: No mds server is up or the cluster is laggy [ 1790.689558][T25718] ceph: No mds server is up or the cluster is laggy [ 1791.499531][ T23] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 1791.691811][T25725] ceph: No mds server is up or the cluster is laggy [ 1791.912518][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.918965][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.359496][ C0] vkms_vblank_simulate: vblank timer overrun [ 1793.584911][T25739] ceph: No mds server is up or the cluster is laggy [ 1795.527948][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 1795.536341][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 1795.806687][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 1796.204985][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 1796.748122][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1796.774678][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1796.849059][T25764] ceph: No mds server is up or the cluster is laggy [ 1797.266909][T25785] gfs2: not a GFS2 filesystem [ 1798.405593][T25792] ceph: No mds server is up or the cluster is laggy [ 1798.575959][T25804] 9pnet_virtio: no channels available for device syz [ 1798.688314][T25806] delete_channel: no stack [ 1801.811052][ T786] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1803.101895][ T786] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.112423][ T786] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1803.122565][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.140585][ T786] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1803.154710][ T786] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1803.280324][T25850] 9pnet_virtio: no channels available for device syz [ 1803.691520][T25854] /dev/nullb0: Can't lookup blockdev [ 1803.974217][ T5830] usb 1-1: USB disconnect, device number 30 [ 1803.983439][T25858] delete_channel: no stack [ 1807.961931][T25878] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1809.996403][T25902] /dev/nullb0: Can't lookup blockdev [ 1816.374347][T25939] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1816.706478][T25943] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1818.476086][T25979] 9pnet_virtio: no channels available for device syz [ 1823.081238][T25966] delete_channel: no stack [ 1823.191521][T25972] delete_channel: no stack [ 1825.599166][T26032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5629'. [ 1826.818810][T26044] 9pnet_virtio: no channels available for device syz [ 1830.307289][T26070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5642'. [ 1830.434537][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1830.450728][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1830.731407][ T786] libceph: connect (1)[c::]:6789 error -101 [ 1830.737465][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 1831.505438][T26088] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1831.514535][ T9483] libceph: connect (1)[c::]:6789 error -101 [ 1831.530549][ T9483] libceph: mon0 (1)[c::]:6789 connect error [ 1831.539521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1832.461266][T26074] ceph: No mds server is up or the cluster is laggy [ 1832.594825][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5652'. [ 1835.000843][T26126] 9pnet_virtio: no channels available for device syz [ 1835.009984][T25786] libceph: connect (1)[c::]:6789 error -101 [ 1835.029731][T25786] libceph: mon0 (1)[c::]:6789 connect error [ 1835.291459][T25786] libceph: connect (1)[c::]:6789 error -101 [ 1835.673577][T26125] ceph: No mds server is up or the cluster is laggy [ 1836.187299][T25786] libceph: mon0 (1)[c::]:6789 connect error [ 1836.461234][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5662'. [ 1842.425974][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5674'. [ 1842.447361][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1842.453540][T26184] ceph: No mds server is up or the cluster is laggy [ 1842.454212][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1845.110831][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1845.117283][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1845.417307][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1845.423827][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1845.965679][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1846.119363][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1846.378725][T26218] ceph: No mds server is up or the cluster is laggy [ 1847.413336][T26249] ceph: No mds server is up or the cluster is laggy [ 1847.561273][T26236] ceph: No mds server is up or the cluster is laggy [ 1853.565293][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.574216][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.082212][T26333] ceph: No mds server is up or the cluster is laggy [ 1858.178515][T26345] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1860.413667][T26361] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1863.870642][T26399] ceph: No mds server is up or the cluster is laggy [ 1867.180989][T26415] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1867.280978][T26418] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1867.486180][T26417] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1869.828723][T26464] delete_channel: no stack [ 1869.890199][T26466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5762'. [ 1873.705716][T26492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5771'. [ 1878.270363][T26530] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5782'. [ 1878.282383][T26530] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5782'. [ 1879.230164][T26531] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1881.385241][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1881.401678][T26550] ceph: No mds server is up or the cluster is laggy [ 1881.427670][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1882.838491][T26563] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1883.237653][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5794'. [ 1883.424704][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5794'. [ 1885.357717][T26596] ceph: No mds server is up or the cluster is laggy [ 1886.838010][T26614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5807'. [ 1886.874849][T26614] macvtap4: entered promiscuous mode [ 1886.880561][T26614] macvtap4: entered allmulticast mode [ 1886.886013][T26614] erspan0: entered allmulticast mode [ 1886.893831][T26615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5807'. [ 1886.918624][T26615] erspan0: left allmulticast mode [ 1888.229994][T26627] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1892.014588][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1892.034855][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1892.222187][T26658] ceph: No mds server is up or the cluster is laggy [ 1894.399574][T26676] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1897.983304][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1898.027260][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1898.782580][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1898.788676][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1898.818555][T26712] ceph: No mds server is up or the cluster is laggy [ 1899.443271][T26726] /dev/nullb0: Can't lookup blockdev [ 1900.601406][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1900.826695][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1900.832806][T26727] ceph: No mds server is up or the cluster is laggy [ 1905.287760][T26762] ceph: No mds server is up or the cluster is laggy [ 1906.228923][T26782] ceph: No mds server is up or the cluster is laggy [ 1906.363062][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1906.369116][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1906.665775][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 1906.672463][T26784] ceph: No mds server is up or the cluster is laggy [ 1906.679460][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 1907.347152][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1907.353303][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1907.405618][T26796] ceph: No mds server is up or the cluster is laggy [ 1910.109208][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1910.228353][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1910.363538][T26817] ceph: No mds server is up or the cluster is laggy [ 1913.052755][T26836] ceph: No mds server is up or the cluster is laggy [ 1915.614934][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.621802][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.146533][T26851] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1916.152102][T26853] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1917.858245][T26876] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1919.644181][T26892] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1920.960564][T26908] No such timeout policy "syz1" [ 1922.672791][T26921] No such timeout policy "syz1" [ 1925.518298][T26945] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1926.520771][T26953] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1927.706472][T26956] ceph: No mds server is up or the cluster is laggy [ 1927.752664][ T9483] libceph: connect (1)[c::]:6789 error -101 [ 1927.758813][ T9483] libceph: mon0 (1)[c::]:6789 connect error [ 1928.303247][T26972] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1928.901947][ T9483] libceph: connect (1)[c::]:6789 error -101 [ 1928.908003][ T9483] libceph: mon0 (1)[c::]:6789 connect error [ 1929.023808][T26961] ceph: No mds server is up or the cluster is laggy [ 1929.727006][T26987] 9pnet_virtio: no channels available for device syz [ 1932.559934][T26994] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1937.484827][T23403] libceph: connect (1)[c::]:6789 error -101 [ 1938.062189][T23403] libceph: mon0 (1)[c::]:6789 connect error [ 1938.327271][T23403] libceph: connect (1)[c::]:6789 error -101 [ 1938.341685][T23403] libceph: mon0 (1)[c::]:6789 connect error [ 1938.873107][ T9483] libceph: connect (1)[c::]:6789 error -101 [ 1939.313252][ T9483] libceph: mon0 (1)[c::]:6789 connect error [ 1939.331207][T27034] ceph: No mds server is up or the cluster is laggy [ 1939.440437][T27046] 9pnet_virtio: no channels available for device syz [ 1942.207255][T27073] 9pnet_virtio: no channels available for device syz [ 1943.981154][T27083] No such timeout policy "syz1" [ 1944.928557][T27086] ceph: No mds server is up or the cluster is laggy [ 1945.481564][T27098] No such timeout policy "syz1" [ 1946.110390][T27104] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1947.182114][T27102] ceph: No mds server is up or the cluster is laggy [ 1949.171904][T27126] No such timeout policy "syz1" [ 1949.224100][T27130] No such timeout policy "syz1" [ 1949.248487][T27134] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1950.228285][T27139] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1951.021846][T27152] No such timeout policy "syz1" [ 1951.032833][T27151] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1952.777118][T27171] No such timeout policy "syz1" [ 1952.976232][T27172] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1953.607143][T27185] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1954.798194][T27200] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1956.100947][T27208] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1957.225966][T27210] ceph: No mds server is up or the cluster is laggy [ 1957.847559][T27225] No such timeout policy "syz1" [ 1957.998887][T27227] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1959.026816][T27239] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1959.338601][T27240] No such timeout policy "syz1" [ 1960.386549][T27243] No such timeout policy "syz1" [ 1960.689759][T27252] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1960.968616][T27254] No such timeout policy "syz1" [ 1961.729637][T27261] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1963.160050][T27280] No such timeout policy "syz1" [ 1963.238081][T27273] No such timeout policy "syz1" [ 1964.510183][T27295] No such timeout policy "syz1" [ 1964.957251][T27297] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1965.893327][T27309] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1968.124613][T27330] No such timeout policy "syz1" [ 1968.616884][T27335] No such timeout policy "syz1" [ 1971.345472][T27346] ceph: No mds server is up or the cluster is laggy [ 1972.355629][T27365] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1972.401394][T27366] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1974.041642][T27376] 9pnet_virtio: no channels available for device syz [ 1976.155670][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.162302][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.201456][T27408] No such timeout policy "syz1" [ 1981.996675][T27434] 9pnet_virtio: no channels available for device syz [ 1982.747437][T27440] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1985.265314][T27460] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1986.318412][T23403] libceph: connect (1)[c::]:6789 error -101 [ 1986.357173][T23403] libceph: mon0 (1)[c::]:6789 connect error [ 1986.641328][T23403] libceph: connect (1)[c::]:6789 error -101 [ 1986.651164][T23403] libceph: mon0 (1)[c::]:6789 connect error [ 1986.881058][T27475] ceph: No mds server is up or the cluster is laggy [ 1986.913324][T27486] 9pnet_virtio: no channels available for device syz [ 1987.426532][T27497] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1994.016641][T27564] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 1997.203810][T27599] No such timeout policy "syz1" [ 2000.489978][T27631] No such timeout policy "syz1" [ 2000.552300][T27636] 9pnet_virtio: no channels available for device syz [ 2001.179111][T27639] No such timeout policy "syz1" [ 2001.934111][T27645] No such timeout policy "syz1" [ 2005.746053][ T8] libceph: connect (1)[c::]:6789 error -101 [ 2005.757506][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 2006.076238][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 2006.101101][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 2006.285972][T27696] 9pnet_virtio: no channels available for device syz [ 2006.748350][T27682] ceph: No mds server is up or the cluster is laggy [ 2006.781388][ T8] libceph: connect (1)[c::]:6789 error -101 [ 2006.891193][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 2010.439409][T27726] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2010.730743][T27730] No such timeout policy "syz1" [ 2013.301746][T27750] 9pnet_virtio: no channels available for device syz [ 2023.577298][T27840] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6147'. [ 2025.488703][T27842] ceph: No mds server is up or the cluster is laggy [ 2025.513402][T27857] No such timeout policy "syz1" [ 2027.544911][T27875] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6158'. [ 2028.745531][T27883] No such timeout policy "syz1" [ 2030.069536][T27894] No such timeout policy "syz1" [ 2030.249445][T27893] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2034.122294][T27923] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2035.964277][T27941] 9pnet_virtio: no channels available for device syz [ 2037.594604][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.601139][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.301606][T27970] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2042.385114][T27995] 9pnet_virtio: no channels available for device syz [ 2042.777437][T28002] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2044.805923][T28014] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6201'. [ 2044.815628][T28014] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6201'. [ 2044.824955][T28014] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6201'. [ 2045.813932][T28020] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2046.228707][T28026] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2048.415325][T28046] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2050.685138][T28059] No such timeout policy "syz1" [ 2051.609905][T28062] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2051.702643][T28067] No such timeout policy "syz1" [ 2052.634780][T28079] No such timeout policy "syz1" [ 2053.756988][T28093] No such timeout policy "syz1" [ 2054.035010][T28095] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2054.266432][T28098] 9pnet_virtio: no channels available for device syz [ 2054.757765][T28106] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2057.878245][T28129] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6234'. [ 2057.889034][T28129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6234'. [ 2057.898074][T28129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6234'. [ 2058.673589][T28126] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2060.225540][T28167] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2060.379611][T28169] No such timeout policy "syz1" [ 2061.664818][T28176] No such timeout policy "syz1" [ 2061.664818][T28177] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6246'. [ 2061.664843][T28177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6246'. [ 2061.687765][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6246'. [ 2062.689506][T28195] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2063.682344][T28207] No such timeout policy "syz1" [ 2064.967618][T28228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6257'. [ 2064.976930][T28228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6257'. [ 2064.986132][T28228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6257'. [ 2066.158441][T28231] No such timeout policy "syz1" [ 2066.406843][T28232] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2066.944334][T28240] No such timeout policy "syz1" [ 2068.425675][T28266] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2069.885884][T28279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6267'. [ 2069.894979][T28279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6267'. [ 2071.620465][T28301] loop0: detected capacity change from 0 to 128 [ 2071.637726][T28301] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2071.664057][T28301] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 2072.792824][T28318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6279'. [ 2072.802320][T28318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6279'. [ 2077.779636][T28398] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2081.489008][T28443] No such timeout policy "syz1" [ 2084.624686][T28489] loop0: detected capacity change from 0 to 256 [ 2088.714310][T28531] loop0: detected capacity change from 0 to 256 [ 2090.624882][T28551] delete_channel: no stack [ 2094.616327][T28604] loop0: detected capacity change from 0 to 256 [ 2097.533826][T28616] loop0: detected capacity change from 0 to 256 [ 2099.027872][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.034450][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.063481][T28662] delete_channel: no stack [ 2101.461757][T28669] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2108.898260][T28788] loop0: detected capacity change from 0 to 128 [ 2108.935935][T28788] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2108.972185][T28788] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 2111.251303][T28818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6422'. [ 2111.678651][T28823] loop0: detected capacity change from 0 to 256 [ 2115.189675][T28847] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6430'. [ 2116.444063][T28860] loop0: detected capacity change from 0 to 256 [ 2117.075635][T28871] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6438'. [ 2118.139703][T28880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6441'. [ 2119.964698][T28895] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6445'. [ 2121.126922][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6455'. [ 2121.403189][T28919] loop0: detected capacity change from 0 to 256 [ 2125.915708][T28979] loop0: detected capacity change from 0 to 256 [ 2127.188488][T28996] 9pnet_virtio: no channels available for device syz [ 2129.442324][T29044] loop0: detected capacity change from 0 to 256 [ 2129.839671][T29058] 9pnet_virtio: no channels available for device syz [ 2131.432590][T29078] loop0: detected capacity change from 0 to 256 [ 2132.375986][T29087] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6507'. [ 2134.733792][T29128] 9pnet_virtio: no channels available for device syz [ 2135.381480][T29140] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6521'. [ 2136.391745][T29152] delete_channel: no stack [ 2137.675750][T29165] loop0: detected capacity change from 0 to 256 [ 2139.942560][T29173] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6533'. [ 2140.766829][T29176] loop0: detected capacity change from 0 to 256 [ 2141.914047][T29193] 9pnet_virtio: no channels available for device syz [ 2143.470275][T29238] loop0: detected capacity change from 0 to 256 [ 2144.312662][T29246] loop0: detected capacity change from 0 to 128 [ 2144.329557][T29246] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2144.374708][T29246] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 2144.678970][T29256] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6558'. [ 2145.658418][T29270] loop0: detected capacity change from 0 to 256 [ 2148.808160][T29294] 9pnet_virtio: no channels available for device syz [ 2149.245134][T29301] loop0: detected capacity change from 0 to 256 [ 2150.722093][T29313] loop0: detected capacity change from 0 to 256 [ 2152.556960][T29345] loop0: detected capacity change from 0 to 256 [ 2153.594067][T29359] 9pnet_virtio: no channels available for device syz [ 2153.834372][T29361] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2154.661513][T29374] loop0: detected capacity change from 0 to 256 [ 2155.825013][T29388] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6606'. [ 2157.946127][T29418] 9pnet_virtio: no channels available for device syz [ 2159.635523][T29466] loop0: detected capacity change from 0 to 128 [ 2159.657998][T29466] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2159.721580][T29466] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 2160.019017][T29475] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6636'. [ 2160.471748][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.478072][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.916125][T29482] loop0: detected capacity change from 0 to 256 [ 2163.481504][T29500] 9pnet_virtio: no channels available for device syz [ 2165.169770][T29515] loop0: detected capacity change from 0 to 256 [ 2169.171819][T29547] loop0: detected capacity change from 0 to 256 [ 2170.427957][T29569] 9pnet_virtio: no channels available for device syz [ 2170.548921][T29568] loop0: detected capacity change from 0 to 256 [ 2171.742616][T29578] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 2172.041194][T29573] loop0: detected capacity change from 0 to 256 [ 2175.458465][T29617] loop0: detected capacity change from 0 to 256 [ 2178.324100][T29688] 9pnet_virtio: no channels available for device syz [ 2181.514295][T29760] 9pnet_virtio: no channels available for device syz [ 2186.359660][T29847] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6736'. [ 2186.373772][T29843] 9pnet_virtio: no channels available for device syz [ 2187.100035][T29858] delete_channel: no stack [ 2189.792659][T29908] 9pnet_virtio: no channels available for device syz [ 2191.449798][T29945] delete_channel: no stack [ 2192.440982][T29973] 9pnet_virtio: no channels available for device syz [ 2195.512777][T30024] 9pnet_virtio: no channels available for device syz [ 2197.059888][T30061] delete_channel: no stack [ 2198.147234][T30083] 9pnet_virtio: no channels available for device syz [ 2200.026559][T30094] loop0: detected capacity change from 0 to 256 [ 2201.143287][T30104] loop0: detected capacity change from 0 to 256 [ 2203.378682][T30119] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6817'. [ 2203.659270][T30122] loop0: detected capacity change from 0 to 256 [ 2205.815491][T30159] loop0: detected capacity change from 0 to 256 [ 2208.108191][T30181] loop0: detected capacity change from 0 to 256 [ 2209.571804][T30192] loop0: detected capacity change from 0 to 256 [ 2210.550360][T30203] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6844'. [ 2211.603417][T30227] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6851'. [ 2212.038896][T30241] loop0: detected capacity change from 0 to 256 [ 2218.301166][T30329] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6879'. [ 2218.657102][T30336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6882'. [ 2220.288398][T30360] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6889'. [ 2220.502563][T30365] loop0: detected capacity change from 0 to 256 [ 2220.919057][T30385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6898'. [ 2221.084646][T30386] loop0: detected capacity change from 0 to 256 [ 2222.018230][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.025356][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.450534][T30450] loop0: detected capacity change from 0 to 256 [ 2227.399448][T30477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6924'. [ 2234.145760][T30611] loop0: detected capacity change from 0 to 256 [ 2236.358724][T30646] loop0: detected capacity change from 0 to 256 [ 2243.281804][T30699] 9pnet_virtio: no channels available for device syz [ 2245.089798][T30730] loop0: detected capacity change from 0 to 256 [ 2250.412589][T30804] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7020'. [ 2250.727503][T30805] loop0: detected capacity change from 0 to 256 [ 2252.486935][T30826] delete_channel: no stack [ 2254.128144][T30866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7040'. [ 2254.152699][T30868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7039'. [ 2254.344536][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7041'. [ 2257.025838][T30894] loop0: detected capacity change from 0 to 256 [ 2260.568175][T30939] loop0: detected capacity change from 0 to 256 [ 2264.363865][T30984] 9pnet_virtio: no channels available for device syz [ 2268.039639][T31040] 9pnet_virtio: no channels available for device syz [ 2270.536135][T31078] loop0: detected capacity change from 0 to 256 [ 2272.434654][T31103] 9pnet_virtio: no channels available for device syz [ 2276.072643][T31153] loop0: detected capacity change from 0 to 256 [ 2277.144543][T31166] loop0: detected capacity change from 0 to 256 [ 2278.726158][T31183] 9pnet_virtio: no channels available for device syz [ 2281.609425][T31228] loop0: detected capacity change from 0 to 256 [ 2283.348722][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.355416][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.937868][T31242] loop0: detected capacity change from 0 to 256 [ 2284.660947][T31243] delete_channel: no stack [ 2286.556290][T31259] loop0: detected capacity change from 0 to 256 [ 2287.411967][T31264] 9pnet_virtio: no channels available for device syz [ 2288.973507][T31283] loop0: detected capacity change from 0 to 256 [ 2290.577285][T31295] loop0: detected capacity change from 0 to 256 [ 2296.154667][T31359] loop0: detected capacity change from 0 to 256 [ 2298.450010][T31372] loop0: detected capacity change from 0 to 256 [ 2300.421938][T31381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7183'. [ 2300.425147][T31380] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7184'. [ 2300.859239][T31388] loop0: detected capacity change from 0 to 256 [ 2308.881057][T31547] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7234'. [ 2309.794301][T31572] 9pnet_virtio: no channels available for device syz [ 2310.394726][T31579] loop0: detected capacity change from 0 to 256 [ 2312.969731][T31606] loop0: detected capacity change from 0 to 256 [ 2315.444087][T31627] loop0: detected capacity change from 0 to 256 [ 2316.688263][T31642] loop0: detected capacity change from 0 to 256 [ 2319.145978][T31659] loop0: detected capacity change from 0 to 256 [ 2320.212452][T31667] loop0: detected capacity change from 0 to 256 [ 2323.243194][T31724] loop0: detected capacity change from 0 to 256 [ 2328.442912][T31792] loop0: detected capacity change from 0 to 2048 [ 2328.515409][T31792] NILFS (loop0): invalid segment: Inconsistency found [ 2328.525618][T31792] NILFS (loop0): trying rollback from an earlier position [ 2328.592391][T31792] NILFS (loop0): recovery complete [ 2328.611736][T31802] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2331.023134][T31820] delete_channel: no stack [ 2344.786745][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.793367][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.719383][T32036] loop0: detected capacity change from 0 to 256 [ 2363.645711][T32245] loop0: detected capacity change from 0 to 2048 [ 2363.775635][T32245] NILFS (loop0): invalid segment: Inconsistency found [ 2363.790936][T32245] NILFS (loop0): trying rollback from an earlier position [ 2363.829825][T32245] NILFS (loop0): recovery complete [ 2363.874481][T32251] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2374.235681][T32357] overlayfs: failed to clone upperpath [ 2376.448915][T32364] overlayfs: failed to clone upperpath [ 2386.856071][T32477] loop0: detected capacity change from 0 to 2048 [ 2386.998913][T32477] NILFS (loop0): invalid segment: Inconsistency found [ 2387.006298][T32477] NILFS (loop0): trying rollback from an earlier position [ 2387.176486][T32477] NILFS (loop0): recovery complete [ 2387.694213][T32498] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2392.803653][T32542] loop0: detected capacity change from 0 to 256 [ 2393.436062][T32556] delete_channel: no stack [ 2394.474849][T32562] overlayfs: failed to clone upperpath [ 2398.344312][T32593] overlayfs: failed to clone upperpath [ 2402.210739][T32627] overlayfs: failed to clone upperpath [ 2404.187435][T32644] overlayfs: failed to clone upperpath [ 2404.433227][T32647] overlayfs: failed to clone upperpath [ 2404.782177][T19393] syz_tun (unregistering): left allmulticast mode [ 2404.935397][T15029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2404.951940][T15029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2404.960893][T15029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2404.982638][T15029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2404.991264][T15029] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2404.998491][T15029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2405.289941][T32660] overlayfs: failed to clone upperpath [ 2405.861802][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.134828][T32650] wg1 speed is unknown, defaulting to 1000 [ 2406.312029][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.318586][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.926918][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.068565][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.100949][T15029] Bluetooth: hci2: command tx timeout [ 2407.834152][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.222410][T32650] chnl_net:caif_netlink_parms(): no params data found [ 2408.490568][ T42] tipc: Left network mode [ 2408.505519][T32650] bridge0: port 1(bridge_slave_0) entered blocking state [ 2408.520571][T32650] bridge0: port 1(bridge_slave_0) entered disabled state [ 2408.533215][T32650] bridge_slave_0: entered allmulticast mode [ 2408.545607][T32650] bridge_slave_0: entered promiscuous mode [ 2408.554574][T32650] bridge0: port 2(bridge_slave_1) entered blocking state [ 2408.570000][T32650] bridge0: port 2(bridge_slave_1) entered disabled state [ 2408.590864][T32650] bridge_slave_1: entered allmulticast mode [ 2408.613324][T32650] bridge_slave_1: entered promiscuous mode [ 2409.291125][T15029] Bluetooth: hci2: command tx timeout [ 2409.406523][T32650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2409.419289][T32650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2409.677754][T32650] team0: Port device team_slave_0 added [ 2409.691104][T32650] team0: Port device team_slave_1 added [ 2409.858156][T32650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2409.865172][T32650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2409.891105][T32650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2410.682957][T32650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2410.689947][T32650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2410.754352][T32650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2411.362885][T15029] Bluetooth: hci2: command tx timeout [ 2412.754477][T32650] hsr_slave_0: entered promiscuous mode [ 2412.897271][T32650] hsr_slave_1: entered promiscuous mode [ 2413.487933][T18225] Bluetooth: hci2: command tx timeout [ 2416.189593][ T324] overlayfs: failed to clone upperpath [ 2416.974152][ T42] hsr_slave_0: left promiscuous mode [ 2416.991129][ T42] hsr_slave_1: left promiscuous mode [ 2416.997440][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2417.019104][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2417.039722][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2417.060883][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2417.088639][ T42] bridge_slave_1: left allmulticast mode [ 2417.114521][ T42] bridge_slave_1: left promiscuous mode [ 2417.121178][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.137457][ T42] bridge_slave_0: left allmulticast mode [ 2417.144525][ T42] bridge_slave_0: left promiscuous mode [ 2417.150483][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2417.618142][ T42] team0: left allmulticast mode [ 2417.623613][ T42] team_slave_0: left allmulticast mode [ 2417.629658][ T42] team_slave_1: left allmulticast mode [ 2417.638676][ T42] team0: left promiscuous mode [ 2417.645088][ T42] team_slave_0: left promiscuous mode [ 2417.650999][ T42] team_slave_1: left promiscuous mode [ 2417.657229][ T42] bridge0: left promiscuous mode [ 2417.669048][ T42] veth1_macvtap: left promiscuous mode [ 2417.674934][ T42] veth0_macvtap: left promiscuous mode [ 2417.680905][ T42] veth1_vlan: left promiscuous mode [ 2418.792849][ T42] bond29 (unregistering): Released all slaves [ 2418.996883][ T354] overlayfs: failed to clone upperpath [ 2419.328825][ T42] bond28 (unregistering): Released all slaves [ 2420.911275][ T42] bond27 (unregistering): Released all slaves [ 2421.211288][ T42] bond26 (unregistering): Released all slaves [ 2421.513415][ T42] bond25 (unregistering): Released all slaves [ 2421.785486][ T378] overlayfs: failed to clone upperpath [ 2422.208999][ T42] bond24 (unregistering): Released all slaves [ 2422.581383][ T42] bond23 (unregistering): Released all slaves [ 2422.858259][ T42] bond22 (unregistering): Released all slaves [ 2423.607973][ T42] bond21 (unregistering): Released all slaves [ 2423.934584][ T42] bond20 (unregistering): Released all slaves [ 2424.550385][ T42] bond19 (unregistering): Released all slaves [ 2424.911002][ T42] bond18 (unregistering): Released all slaves [ 2425.814548][ T42] bond17 (unregistering): Released all slaves [ 2426.247168][ T42] bond16 (unregistering): Released all slaves [ 2426.940344][ T42] bond15 (unregistering): Released all slaves [ 2427.657344][ T42] bond14 (unregistering): Released all slaves [ 2427.945244][ T42] bond13 (unregistering): Released all slaves [ 2428.166394][ T42] bond12 (unregistering): Released all slaves [ 2428.384968][ T42] bond11 (unregistering): Released all slaves [ 2428.603090][ T42] bond10 (unregistering): Released all slaves [ 2428.825497][ T42] bond9 (unregistering): Released all slaves [ 2429.030199][ T42] bond8 (unregistering): Released all slaves [ 2429.242313][ T42] bond7 (unregistering): Released all slaves [ 2429.453359][ T42] bond6 (unregistering): Released all slaves [ 2429.661790][ T42] bond5 (unregistering): Released all slaves [ 2429.880478][ T42] bond4 (unregistering): Released all slaves [ 2430.095230][ T42] bond3 (unregistering): Released all slaves [ 2430.304023][ T42] bond2 (unregistering): Released all slaves [ 2430.510512][ T42] bond1 (unregistering): Released all slaves [ 2431.110544][ T42] team0 (unregistering): Port device team_slave_1 removed [ 2431.176429][ T42] team0 (unregistering): Port device team_slave_0 removed [ 2431.245386][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2431.296239][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2432.235368][ T42] bond0 (unregistering): Released all slaves [ 2432.270582][T15029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2432.288518][T15029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2432.298396][T15029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2432.309038][T15029] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2432.317183][T15029] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2432.324545][T15029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2432.366056][ T340] tipc: Enabling of bearer rejected, already enabled [ 2432.406852][ T407] wg1 speed is unknown, defaulting to 1000 [ 2432.675142][ T412] tipc: Enabling of bearer rejected, already enabled [ 2433.801798][T32650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2433.845401][ T407] chnl_net:caif_netlink_parms(): no params data found [ 2433.859215][T32650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2433.889871][T32650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2433.915324][T32650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2434.393141][T15029] Bluetooth: hci3: command tx timeout [ 2434.842936][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 2434.850137][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 2434.859474][ T407] bridge_slave_0: entered allmulticast mode [ 2434.866949][ T407] bridge_slave_0: entered promiscuous mode [ 2434.971693][T32650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2435.035499][T32650] 8021q: adding VLAN 0 to HW filter on device team0 [ 2435.085605][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 2435.096680][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 2435.103928][ T407] bridge_slave_1: entered allmulticast mode [ 2435.111206][ T407] bridge_slave_1: entered promiscuous mode [ 2435.137598][T29786] bridge0: port 1(bridge_slave_0) entered blocking state [ 2435.144781][T29786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2435.172559][T29786] bridge0: port 2(bridge_slave_1) entered blocking state [ 2435.179726][T29786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2436.301612][ T407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2436.354198][ T42] IPVS: stop unused estimator thread 0... [ 2436.578732][ T407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2436.596700][T15029] Bluetooth: hci3: command tx timeout [ 2437.224213][ T407] team0: Port device team_slave_0 added [ 2437.235763][ T407] team0: Port device team_slave_1 added [ 2437.380799][ T407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2437.387772][ T407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2437.438437][ T407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2437.544541][ T456] tipc: Enabling of bearer rejected, already enabled [ 2437.556542][ T407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2437.583326][ T407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2437.637948][ T407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2437.688366][ T407] hsr_slave_0: entered promiscuous mode [ 2437.701075][ T407] hsr_slave_1: entered promiscuous mode [ 2437.708422][ T407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2437.720267][ T407] Cannot create hsr debugfs directory [ 2438.335770][T32650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2438.653932][T15029] Bluetooth: hci3: command tx timeout [ 2439.636746][ T473] tipc: Enabling of bearer rejected, already enabled [ 2439.660533][ T475] tipc: Enabling of bearer rejected, already enabled [ 2439.723772][T32650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2439.904388][T32650] veth0_vlan: entered promiscuous mode [ 2439.934600][T32650] veth1_vlan: entered promiscuous mode [ 2440.017245][T32650] veth0_macvtap: entered promiscuous mode [ 2440.182774][T22965] tipc: Disabling bearer [ 2440.191524][T22965] tipc: Disabling bearer [ 2440.207135][T32650] veth1_macvtap: entered promiscuous mode [ 2440.215365][T22965] tipc: Left network mode [ 2440.701409][T15029] Bluetooth: hci3: command tx timeout [ 2440.952843][T22965] ip6gretap0 (unregistering): left allmulticast mode [ 2441.073886][T32650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.090475][T32650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.108110][T32650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.118911][T32650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.138777][T32650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2441.204391][ T487] tipc: Enabling of bearer rejected, already enabled [ 2441.285518][T32650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.341483][T32650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.458346][T32650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.563782][T32650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.742819][T32650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2441.885760][ T407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2442.025784][T32650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.040764][T32650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.049530][T32650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.064332][T32650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.076280][ T407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2442.136234][ T407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2442.191722][ T407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2444.007377][ T407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2444.042945][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2444.071397][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2444.127717][ T407] 8021q: adding VLAN 0 to HW filter on device team0 [ 2444.166756][T22245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2444.175125][T22245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2444.207990][ T522] tipc: Enabling of bearer rejected, already enabled [ 2444.246937][T30682] bridge0: port 1(bridge_slave_0) entered blocking state [ 2444.254099][T30682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2444.292824][T30682] bridge0: port 2(bridge_slave_1) entered blocking state [ 2444.299982][T30682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2445.640020][T22965] hsr_slave_0: left promiscuous mode [ 2445.650121][T22965] hsr_slave_1: left promiscuous mode [ 2445.660004][T22965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2445.740372][T22965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2445.851854][T22965] team0: left allmulticast mode [ 2445.951777][T22965] team_slave_0: left allmulticast mode [ 2446.060070][T22965] team_slave_1: left allmulticast mode [ 2446.172461][T22965] bond0: left allmulticast mode [ 2446.237376][T22965] bond_slave_0: left allmulticast mode [ 2446.242908][T22965] bond_slave_1: left allmulticast mode [ 2446.248883][T22965] bridge0: port 3(team0) entered disabled state [ 2446.405499][T22965] bridge_slave_1: left allmulticast mode [ 2446.426487][T22965] bridge_slave_1: left promiscuous mode [ 2446.435002][T22965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.449684][T22965] bridge_slave_0: left allmulticast mode [ 2446.458192][T22965] bridge_slave_0: left promiscuous mode [ 2446.469375][T22965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.866721][T22965] bond41 (unregistering): Released all slaves [ 2447.354203][T22965] bond40 (unregistering): Released all slaves [ 2447.620119][T22965] bond39 (unregistering): Released all slaves [ 2447.839761][T22965] bond38 (unregistering): Released all slaves [ 2448.068875][T22965] bond37 (unregistering): Released all slaves [ 2448.287858][T22965] bond36 (unregistering): Released all slaves [ 2448.497007][T22965] bond35 (unregistering): Released all slaves [ 2448.711537][T22965] bond34 (unregistering): Released all slaves [ 2448.919633][T22965] bond33 (unregistering): Released all slaves [ 2449.125823][T22965] bond32 (unregistering): Released all slaves [ 2449.335717][T22965] bond31 (unregistering): Released all slaves [ 2449.551789][T22965] bond30 (unregistering): Released all slaves [ 2449.757788][T22965] bond29 (unregistering): Released all slaves [ 2449.965234][T22965] bond28 (unregistering): Released all slaves [ 2450.170176][T22965] bond27 (unregistering): Released all slaves [ 2450.378759][T22965] bond26 (unregistering): Released all slaves [ 2450.597189][T22965] bond25 (unregistering): Released all slaves [ 2450.807829][T22965] bond24 (unregistering): Released all slaves [ 2451.015540][T22965] bond23 (unregistering): Released all slaves [ 2451.219338][T22965] bond22 (unregistering): Released all slaves [ 2451.426832][T22965] bond21 (unregistering): Released all slaves [ 2451.642365][T22965] bond20 (unregistering): Released all slaves [ 2451.848998][T22965] bond19 (unregistering): Released all slaves [ 2452.052172][T22965] bond18 (unregistering): Released all slaves [ 2452.252736][T22965] bond17 (unregistering): Released all slaves [ 2452.454378][T22965] bond16 (unregistering): Released all slaves [ 2452.664443][T22965] bond15 (unregistering): Released all slaves [ 2452.876406][T22965] bond14 (unregistering): Released all slaves [ 2453.078447][T22965] bond13 (unregistering): Released all slaves [ 2453.283482][T22965] bond12 (unregistering): Released all slaves [ 2453.489441][T22965] bond11 (unregistering): Released all slaves [ 2453.696377][T22965] bond10 (unregistering): Released all slaves [ 2453.905866][T22965] bond9 (unregistering): Released all slaves [ 2454.111004][T22965] bond8 (unregistering): Released all slaves [ 2454.318114][T22965] bond7 (unregistering): Released all slaves [ 2454.525753][T22965] bond6 (unregistering): Released all slaves [ 2454.734738][T22965] bond5 (unregistering): Released all slaves [ 2454.942102][T22965] bond4 (unregistering): Released all slaves [ 2455.144279][T22965] bond3 (unregistering): Released all slaves [ 2455.340538][T22965] bond2 (unregistering): Released all slaves [ 2455.550867][T22965] bond1 (unregistering): Released all slaves [ 2455.917958][T22965] team_slave_1 (unregistering): left promiscuous mode [ 2455.932812][T22965] team0 (unregistering): Port device team_slave_1 removed [ 2455.995562][T22965] team_slave_0 (unregistering): left promiscuous mode [ 2456.004205][T22965] team0 (unregistering): Port device team_slave_0 removed [ 2456.065778][T22965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2456.074829][T22965] bond_slave_1 (unregistering): left promiscuous mode [ 2456.138645][T22965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2456.148581][T22965] bond_slave_0 (unregistering): left promiscuous mode [ 2456.668635][T22965] bond0 (unregistering): left promiscuous mode [ 2456.676545][T22965] team0 (unregistering): Port device bond0 removed [ 2456.899218][T22965] bond0 (unregistering): Released all slaves [ 2456.977901][ T544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7644'. [ 2456.987812][ T544] tipc: Started in network mode [ 2456.993854][ T544] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2457.003053][ T544] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 2457.032296][ T544] tipc: Enabled bearer , priority 10 [ 2457.293006][ T407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2457.423922][ T562] tipc: Enabling of bearer rejected, already enabled [ 2458.154750][ T5830] tipc: Node number set to 1 [ 2458.239819][ T568] tipc: Enabling of bearer rejected, already enabled [ 2458.754226][ T579] tipc: Enabling of bearer rejected, already enabled [ 2458.998068][ T584] overlayfs: failed to clone upperpath [ 2459.650372][ T407] veth0_vlan: entered promiscuous mode [ 2459.675224][ T407] veth1_vlan: entered promiscuous mode [ 2459.879830][ T407] veth0_macvtap: entered promiscuous mode [ 2459.928027][ T407] veth1_macvtap: entered promiscuous mode [ 2460.327234][ T407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2460.511477][ T407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.550240][ T407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2460.561041][ T407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.571185][ T407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2460.581912][ T407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.593592][ T407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2460.603410][T22965] IPVS: stop unused estimator thread 0... [ 2460.724390][ T407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2460.738563][ T407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.748605][ T407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2460.759901][ T407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.769769][ T407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2460.780321][ T407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.812644][ T407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2460.878562][ T592] tipc: Enabling of bearer rejected, already enabled [ 2460.896960][ T407] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.909592][ T407] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.918738][ T407] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.927994][ T407] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2461.171967][ T599] overlayfs: failed to resolve './file0': -2 [ 2461.782423][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2461.790270][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2461.928664][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2462.732758][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2464.217069][ T618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7614'. [ 2464.236375][ T618] tipc: Started in network mode [ 2464.241693][ T618] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2464.329613][ T618] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 2464.361631][ T618] tipc: Enabled bearer , priority 10 [ 2464.485795][ T624] loop0: detected capacity change from 0 to 2048 [ 2464.525552][ T624] NILFS (loop0): invalid segment: Inconsistency found [ 2464.541361][ T624] NILFS (loop0): trying rollback from an earlier position [ 2464.571169][ T624] NILFS (loop0): recovery complete [ 2464.578053][ T626] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2465.077911][T18225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2466.203144][T18225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2466.215193][T18225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2466.225558][T18225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2466.234327][T18225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2466.241731][T18225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2466.290960][ T5830] tipc: Node number set to 1 [ 2467.665550][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.701116][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.135068][ T633] chnl_net:caif_netlink_parms(): no params data found [ 2468.306652][T18225] Bluetooth: hci4: command tx timeout [ 2468.722977][ T665] overlayfs: failed to resolve './file0': -2 [ 2470.307800][T14946] bond0: (slave syz_tun): Releasing backup interface [ 2470.382844][T18225] Bluetooth: hci4: command tx timeout [ 2470.404383][ T633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2470.414741][ T633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2470.425358][ T633] bridge_slave_0: entered allmulticast mode [ 2470.436764][ T633] bridge_slave_0: entered promiscuous mode [ 2470.448510][ T633] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.466102][ T633] bridge0: port 2(bridge_slave_1) entered disabled state [ 2470.477033][ T633] bridge_slave_1: entered allmulticast mode [ 2470.489498][ T633] bridge_slave_1: entered promiscuous mode [ 2470.837997][T22965] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2470.946678][ T633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2471.028971][ T633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2471.072314][T22965] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.210155][ T633] team0: Port device team_slave_0 added [ 2471.279397][T22965] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.299223][ T633] team0: Port device team_slave_1 added [ 2471.681996][ T693] overlayfs: failed to resolve './file1': -2 [ 2471.718941][ T689] tipc: Enabling of bearer rejected, already enabled [ 2471.788316][T22965] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.821168][ T633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2471.828261][ T633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2471.860208][ T633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2471.946381][ T633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2471.953416][ T633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2471.980038][ T633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2472.461393][T18225] Bluetooth: hci4: command tx timeout [ 2474.540946][T18225] Bluetooth: hci4: command tx timeout [ 2474.793813][ T633] hsr_slave_0: entered promiscuous mode [ 2474.822666][ T633] hsr_slave_1: entered promiscuous mode [ 2475.017388][ T720] overlayfs: failed to resolve './file1': -2 [ 2475.970750][ T633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2475.978351][ T633] Cannot create hsr debugfs directory [ 2477.269229][ T734] tipc: Enabling of bearer rejected, already enabled [ 2477.457129][T22965] tipc: Disabling bearer [ 2477.466343][T22965] tipc: Disabling bearer [ 2477.503978][T22965] tipc: Left network mode [ 2478.030012][ T745] overlayfs: failed to clone upperpath [ 2479.359569][ T753] overlayfs: failed to resolve './file0': -2 [ 2479.810545][ T757] tipc: Enabling of bearer rejected, already enabled [ 2481.391746][T22965] bridge0: port 3(erspan0) entered disabled state [ 2481.489694][T22965] erspan0 (unregistering): left allmulticast mode [ 2481.496213][T22965] erspan0 (unregistering): left promiscuous mode [ 2481.811637][T22965] bridge0: port 3(erspan0) entered disabled state [ 2481.933169][ T633] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2481.947451][ T633] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2481.966446][ T633] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2482.026548][ T633] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2482.184683][ T789] overlayfs: failed to clone upperpath [ 2483.361218][T22965] bond0: (slave wlan1): Releasing backup interface [ 2483.685351][ T633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2483.875340][ T633] 8021q: adding VLAN 0 to HW filter on device team0 [ 2484.424108][T30682] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.431284][T30682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2484.714576][T30682] bridge0: port 2(bridge_slave_1) entered blocking state [ 2484.721759][T30682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2485.129802][T22965] hsr_slave_0: left promiscuous mode [ 2485.148238][T22965] hsr_slave_1: left promiscuous mode [ 2485.154638][T22965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2485.164305][T22965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2485.177321][T22965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2485.186245][T22965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2485.203115][T22965] bridge_slave_1: left allmulticast mode [ 2485.208922][T22965] bridge_slave_1: left promiscuous mode [ 2485.230976][T22965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2485.241010][T22965] bridge_slave_0: left allmulticast mode [ 2485.246733][T22965] bridge_slave_0: left promiscuous mode [ 2485.253522][T22965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2485.483319][T22965] veth1_macvtap: left promiscuous mode [ 2485.488879][T22965] veth0_macvtap: left promiscuous mode [ 2485.498924][T22965] veth1_vlan: left promiscuous mode [ 2486.897548][T22965] bond36 (unregistering): Released all slaves [ 2488.256325][T22965] bond35 (unregistering): Released all slaves [ 2489.286821][T22965] bond34 (unregistering): Released all slaves [ 2489.469530][ T853] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7715'. [ 2489.651679][T22965] bond33 (unregistering): Released all slaves [ 2489.963450][T22965] bond32 (unregistering): Released all slaves [ 2490.703785][T22965] bond31 (unregistering): Released all slaves [ 2490.956389][T22965] bond30 (unregistering): Released all slaves [ 2491.233712][T22965] bond29 (unregistering): Released all slaves [ 2491.319343][ T873] overlayfs: failed to clone upperpath [ 2491.542081][T22965] bond28 (unregistering): Released all slaves [ 2491.700567][ T882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2491.776610][T22965] bond27 (unregistering): Released all slaves [ 2491.783104][ T883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2491.998906][T22965] bond26 (unregistering): Released all slaves [ 2492.205465][T22965] bond25 (unregistering): Released all slaves [ 2492.410226][T22965] bond24 (unregistering): Released all slaves [ 2492.614272][T22965] bond23 (unregistering): Released all slaves [ 2492.825217][T22965] bond22 (unregistering): Released all slaves [ 2493.031805][T22965] bond21 (unregistering): Released all slaves [ 2493.240000][T22965] bond20 (unregistering): Released all slaves [ 2493.448269][T22965] bond19 (unregistering): Released all slaves [ 2493.653977][T22965] bond18 (unregistering): Released all slaves [ 2493.870425][T22965] bond17 (unregistering): Released all slaves [ 2494.090601][T22965] bond16 (unregistering): Released all slaves [ 2494.288783][T22965] bond15 (unregistering): Released all slaves [ 2494.496036][T22965] bond14 (unregistering): Released all slaves [ 2494.707089][T22965] bond13 (unregistering): Released all slaves [ 2494.916940][T22965] bond12 (unregistering): Released all slaves [ 2495.114046][T22965] bond11 (unregistering): Released all slaves [ 2495.323197][T22965] bond10 (unregistering): Released all slaves [ 2495.525368][T22965] bond9 (unregistering): Released all slaves [ 2495.730343][T22965] bond8 (unregistering): Released all slaves [ 2495.943023][T22965] bond7 (unregistering): Released all slaves [ 2496.147448][T22965] bond6 (unregistering): Released all slaves [ 2496.349570][T22965] bond5 (unregistering): Released all slaves [ 2496.551260][T22965] bond4 (unregistering): Released all slaves [ 2496.760455][T22965] bond3 (unregistering): Released all slaves [ 2496.960218][T22965] bond2 (unregistering): Released all slaves [ 2497.159497][T22965] bond1 (unregistering): Released all slaves [ 2497.786526][T22965] team0 (unregistering): Port device team_slave_1 removed [ 2497.858348][T22965] team0 (unregistering): Port device team_slave_0 removed [ 2497.919422][T22965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2497.971149][T22965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2498.496980][T22965] team0 (unregistering): Port device bond0 removed [ 2498.716116][T22965] bond0 (unregistering): Released all slaves [ 2500.745530][ T633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2501.943333][T22965] IPVS: stop unused estimator thread 0... [ 2503.013110][ T633] veth0_vlan: entered promiscuous mode [ 2503.083604][ T633] veth1_vlan: entered promiscuous mode [ 2503.253207][ T923] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2504.093552][ T633] veth0_macvtap: entered promiscuous mode [ 2504.137391][ T633] veth1_macvtap: entered promiscuous mode [ 2504.185041][ T633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2504.237138][ T633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2504.259993][ T633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2504.408198][ T633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2504.423126][ T633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2504.438321][ T633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2506.072671][ T633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2506.167528][ T633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2506.182949][ T633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2506.208972][ T633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2506.224884][ T633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2506.246054][ T633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2506.264223][ T633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2506.302763][ T633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2506.378044][ T633] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2506.440686][ T633] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2506.449411][ T633] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2506.490974][ T633] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2506.774401][T27160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2506.788011][T27160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2507.365282][T27160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2507.391768][T27160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2508.348838][ T984] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7663'. [ 2508.367779][ T984] tipc: Started in network mode [ 2508.384805][ T984] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2508.418684][ T984] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 2508.444769][ T984] tipc: Enabled bearer , priority 10 [ 2508.651016][ T995] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2509.789226][ T8] tipc: Node number set to 1 [ 2509.867686][T15029] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2509.881275][T15029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2509.893885][T15029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2509.998552][T15029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2510.009516][T15029] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2510.027703][T15029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2510.098327][T15896] syz_tun (unregistering): left allmulticast mode [ 2511.907018][ T1044] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7761'. [ 2512.072990][T15029] Bluetooth: hci0: command tx timeout [ 2512.413672][T30271] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2512.424857][T30271] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2513.033174][T30271] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2513.051769][T30271] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2513.317831][ T1053] kvm: kvm [1052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfc [ 2513.575453][ T1053] kvm_intel: kvm [1052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffff [ 2513.611812][ T1053] kvm: kvm [1052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffff [ 2513.620968][ T1053] kvm: kvm [1052]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2513.637163][T30271] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2513.772258][T30271] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2514.140823][T15029] Bluetooth: hci0: command tx timeout [ 2514.243177][T30271] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2514.262126][T30271] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2515.437579][ T1007] chnl_net:caif_netlink_parms(): no params data found [ 2516.541053][T15029] Bluetooth: hci0: command tx timeout [ 2516.638571][T30271] tipc: Disabling bearer [ 2516.768583][T30271] tipc: Left network mode [ 2517.079349][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2517.086631][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2517.094393][ T1007] bridge_slave_0: entered allmulticast mode [ 2517.102602][ T1007] bridge_slave_0: entered promiscuous mode [ 2517.123551][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2517.130715][ T1101] binder_alloc: 1099: binder_alloc_buf, no vma [ 2517.137091][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2517.161762][ T1007] bridge_slave_1: entered allmulticast mode [ 2517.169464][ T1007] bridge_slave_1: entered promiscuous mode [ 2517.284673][T30271] ip6gretap0 (unregistering): left allmulticast mode [ 2517.513593][T30271] bond1: (slave ip6gretap2): Releasing active interface [ 2517.693424][ T1007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2517.705548][ T1007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2517.812632][ T1007] team0: Port device team_slave_0 added [ 2517.870463][ T1007] team0: Port device team_slave_1 added [ 2517.936744][ T1007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2517.944793][ T1007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2517.971262][ T1007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2518.045840][ T1007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2518.053248][ T1007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2518.080408][ T1007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2519.013095][T15029] Bluetooth: hci0: command tx timeout [ 2519.051949][ T1007] hsr_slave_0: entered promiscuous mode [ 2519.089343][ T1007] hsr_slave_1: entered promiscuous mode [ 2519.098614][ T1007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2519.108107][ T1007] Cannot create hsr debugfs directory [ 2519.158246][T30271] bridge0: port 3(erspan0) entered disabled state [ 2519.211854][T30271] erspan0 (unregistering): left allmulticast mode [ 2519.218326][T30271] erspan0 (unregistering): left promiscuous mode [ 2519.233284][T30271] bridge0: port 3(erspan0) entered disabled state [ 2519.379057][ T1150] loop2: detected capacity change from 0 to 7 [ 2519.412832][ T1150] Dev loop2: unable to read RDB block 7 [ 2519.428655][ T1150] loop2: AHDI p1 p2 p3 [ 2519.438756][ T1150] loop2: partition table partially beyond EOD, truncated [ 2519.459039][ T1150] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2519.470124][ T1150] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2520.111298][ T1159] atomic_op ffff88805abe8998 conn xmit_atomic 0000000000000000 [ 2520.747844][T30271] bond0: (slave wlan1): Releasing backup interface [ 2520.773212][T15029] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 2520.783706][T15029] CPU: 1 PID: 15029 Comm: kworker/u5:1 Not tainted 6.6.101-syzkaller #0 [ 2520.792054][T15029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2520.802115][T15029] Workqueue: hci4 hci_rx_work [ 2520.806821][T15029] Call Trace: [ 2520.810113][T15029] [ 2520.813055][T15029] dump_stack_lvl+0x16c/0x230 [ 2520.817756][T15029] ? show_regs_print_info+0x20/0x20 [ 2520.822974][T15029] ? load_image+0x3b0/0x3b0 [ 2520.827520][T15029] sysfs_create_dir_ns+0x256/0x280 [ 2520.832662][T15029] ? hci_rx_work+0x43a/0xd80 [ 2520.837267][T15029] ? sysfs_warn_dup+0xa0/0xa0 [ 2520.841980][T15029] ? do_raw_spin_unlock+0x121/0x230 [ 2520.847207][T15029] kobject_add_internal+0x6b8/0xc70 [ 2520.852441][T15029] kobject_add+0x156/0x220 [ 2520.856887][T15029] ? __rwlock_init+0x150/0x150 [ 2520.861682][T15029] ? kobject_init+0x1e0/0x1e0 [ 2520.866386][T15029] ? _raw_spin_unlock+0x28/0x40 [ 2520.871281][T15029] ? get_device_parent+0x366/0x390 [ 2520.876419][T15029] device_add+0x408/0xc20 [ 2520.880775][T15029] hci_conn_add_sysfs+0xd5/0x1e0 [ 2520.885739][T15029] le_conn_complete_evt+0xc37/0x1220 [ 2520.891047][T15029] ? hci_event_packet+0x4a7/0x1210 [ 2520.896192][T15029] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 2520.900102][ T1168] ubi31: detaching mtd0 [ 2520.902432][T15029] ? __copy_skb_header+0xa7/0x550 [ 2520.902520][T15029] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 2520.902550][T15029] ? skb_pull_data+0xfb/0x200 [ 2520.902582][T15029] hci_le_conn_complete_evt+0x187/0x440 [ 2520.902616][T15029] ? hci_remote_host_features_evt+0x160/0x160 [ 2520.902654][T15029] hci_event_packet+0x795/0x1210 [ 2520.902691][T15029] ? bis_list+0x290/0x290 [ 2520.902721][T15029] ? lockdep_hardirqs_on+0x98/0x150 [ 2520.902750][T15029] ? hci_send_to_monitor+0xd7/0x4f0 [ 2520.902777][T15029] hci_rx_work+0x43a/0xd80 [ 2520.902810][T15029] ? process_scheduled_works+0x957/0x15b0 [ 2520.902834][T15029] process_scheduled_works+0xa45/0x15b0 [ 2520.902888][T15029] ? assign_work+0x400/0x400 [ 2520.973703][T15029] ? assign_work+0x39e/0x400 [ 2520.978296][T15029] worker_thread+0xa55/0xfc0 [ 2520.982903][T15029] kthread+0x2fa/0x390 [ 2520.986962][T15029] ? pr_cont_work+0x560/0x560 [ 2520.991634][T15029] ? kthread_blkcg+0xd0/0xd0 [ 2520.996227][T15029] ret_from_fork+0x48/0x80 [ 2521.000654][T15029] ? kthread_blkcg+0xd0/0xd0 [ 2521.005241][T15029] ret_from_fork_asm+0x11/0x20 [ 2521.010011][T15029] [ 2521.019374][T15029] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2521.033657][T15029] Bluetooth: hci4: failed to register connection device [ 2521.037981][ T1168] ubi31: mtd0 is detached [ 2521.555065][T30271] hsr_slave_0: left promiscuous mode [ 2521.608657][T30271] hsr_slave_1: left promiscuous mode [ 2521.631198][T30271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2521.638645][T30271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2521.671857][T30271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2521.679591][T30271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2521.712482][T30271] batman_adv: batadv0: Interface deactivated: vlan1 [ 2521.719113][T30271] batman_adv: batadv0: Removing interface: vlan1 [ 2521.858667][T30271] bridge_slave_1: left allmulticast mode [ 2521.875916][T30271] bridge_slave_1: left promiscuous mode [ 2522.029318][T30271] bridge0: port 2(bridge_slave_1) entered disabled state [ 2522.212475][T30271] bridge_slave_0: left allmulticast mode [ 2522.312005][T30271] bridge_slave_0: left promiscuous mode [ 2522.417016][T30271] bridge0: port 1(bridge_slave_0) entered disabled state [ 2522.661713][T30271] veth1_macvtap: left promiscuous mode [ 2522.677455][T30271] veth0_macvtap: left promiscuous mode [ 2522.697783][T30271] veth1_vlan: left promiscuous mode [ 2524.122787][T30271] bond38 (unregistering): Released all slaves [ 2525.281733][T30271] bond37 (unregistering): Released all slaves [ 2526.712530][T30271] bond36 (unregistering): Released all slaves [ 2527.495136][T18225] Bluetooth: hci4: command 0x0406 tx timeout [ 2527.753659][ T1235] block device autoloading is deprecated and will be removed. [ 2529.472267][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.478785][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.995291][T30271] bond35 (unregistering): Released all slaves [ 2530.673410][T30271] bond34 (unregistering): Released all slaves [ 2530.982663][T30271] bond33 (unregistering): Released all slaves [ 2531.515843][T18225] Bluetooth: hci2: command 0x0406 tx timeout [ 2532.013337][T30271] bond32 (unregistering): Released all slaves [ 2532.958793][T30271] bond31 (unregistering): Released all slaves [ 2533.582385][T15029] Bluetooth: hci4: command 0x0406 tx timeout [ 2533.702819][T30271] bond30 (unregistering): Released all slaves [ 2534.373460][T30271] bond29 (unregistering): Released all slaves [ 2534.659359][ T1292] autofs4:pid:1292:autofs_fill_super: called with bogus options [ 2534.909044][T30271] bond28 (unregistering): Released all slaves [ 2535.672131][T30271] bond27 (unregistering): Released all slaves [ 2535.882167][T30271] bond26 (unregistering): Released all slaves [ 2536.090759][T30271] bond25 (unregistering): Released all slaves [ 2536.292849][T30271] bond24 (unregistering): Released all slaves [ 2536.488153][T30271] bond23 (unregistering): Released all slaves [ 2536.692771][T30271] bond22 (unregistering): Released all slaves [ 2536.894861][T30271] bond21 (unregistering): Released all slaves [ 2537.098505][T30271] bond20 (unregistering): Released all slaves [ 2537.297888][T30271] bond19 (unregistering): Released all slaves [ 2537.502402][T30271] bond18 (unregistering): Released all slaves [ 2537.710241][T30271] bond17 (unregistering): Released all slaves [ 2537.915323][T30271] bond16 (unregistering): Released all slaves [ 2538.117905][T30271] bond15 (unregistering): Released all slaves [ 2538.334054][T30271] bond14 (unregistering): Released all slaves [ 2538.538654][T30271] bond13 (unregistering): Released all slaves [ 2538.747354][T30271] bond12 (unregistering): Released all slaves [ 2538.962164][T30271] bond11 (unregistering): Released all slaves [ 2539.168889][T30271] bond10 (unregistering): Released all slaves [ 2539.367226][T30271] bond9 (unregistering): Released all slaves [ 2539.565214][T30271] bond8 (unregistering): Released all slaves [ 2539.771417][T30271] bond7 (unregistering): Released all slaves [ 2539.979359][T30271] bond6 (unregistering): Released all slaves [ 2540.192735][T30271] bond5 (unregistering): Released all slaves [ 2540.392380][T30271] bond4 (unregistering): Released all slaves [ 2540.589347][T30271] bond3 (unregistering): Released all slaves [ 2540.624657][T30271] bond2 (unregistering): (slave veth3): Releasing backup interface [ 2540.828734][T30271] bond2 (unregistering): Released all slaves [ 2540.851861][T30271] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2540.865802][T30271] bond1 (unregistering): Released all slaves [ 2541.458608][T30271] team0 (unregistering): Port device team_slave_1 removed [ 2541.519195][T30271] team0 (unregistering): Port device team_slave_0 removed [ 2541.577647][T30271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2541.629237][T30271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2541.638056][ T5942] infiniband srz1: ib_query_port failed (-19) [ 2542.125055][ T5942] infiniband srz1: ib_query_port failed (-19) [ 2542.131432][T30271] team0 (unregistering): Port device bond0 removed [ 2542.342058][T30271] bond0 (unregistering): Released all slaves [ 2542.584495][ T1296] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2543.594395][ T1007] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2543.691929][ T1007] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2543.882162][ T1007] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2544.106205][ T1007] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2544.208621][T30271] IPVS: stop unused estimator thread 0... [ 2545.373379][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 2545.373410][ T27] audit: type=1326 audit(2000001735.545:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1332 comm="syz.9.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf198ebe9 code=0x7ffc0000 [ 2545.527481][ T1007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2545.586256][ T27] audit: type=1326 audit(2000001735.545:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1332 comm="syz.9.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf198ebe9 code=0x7ffc0000 [ 2545.609829][ T27] audit: type=1326 audit(2000001735.555:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1332 comm="syz.9.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f0cf198ebe9 code=0x7ffc0000 [ 2545.672660][ T27] audit: type=1326 audit(2000001735.555:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1332 comm="syz.9.7846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf198ebe9 code=0x7ffc0000 [ 2545.913052][ T1007] 8021q: adding VLAN 0 to HW filter on device team0 [ 2545.950299][T22245] bridge0: port 1(bridge_slave_0) entered blocking state [ 2545.957599][T22245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2546.099812][T22245] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.107024][T22245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2546.609726][ T1342] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2546.794276][ T1007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2549.259748][ T1371] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2549.397938][ T1007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2550.046385][ T1385] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2551.085449][ T1007] veth0_vlan: entered promiscuous mode [ 2551.133959][ T1406] fuse: Bad value for 'fd' [ 2551.309181][ T1007] veth1_vlan: entered promiscuous mode [ 2551.415819][ T1007] veth0_macvtap: entered promiscuous mode [ 2551.431329][ T1007] veth1_macvtap: entered promiscuous mode [ 2551.463251][ T1007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2551.486240][ T1007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2551.506208][ T1007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2551.516839][ T1007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2551.532129][ T1007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2551.544643][ T1007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2551.563100][ T1007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2551.606038][ T1414] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2551.710022][ T1007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2551.817876][ T1007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2551.907337][ T1007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2552.005942][ T1007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.096981][ T1007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2552.195824][ T1007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.325998][ T1007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2552.451858][ T1007] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.460592][ T1007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.525072][ T1007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.549540][ T1007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.759860][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2552.776938][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2553.574300][ T9508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2553.663977][ T9508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2554.138081][ T1438] xt_bpf: check failed: parse error [ 2554.779585][ T1446] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2555.449965][ T1451] fuse: Bad value for 'fd' [ 2556.755904][ T1467] tty tty30: ldisc open failed (-12), clearing slot 29 [ 2556.780786][T15029] Bluetooth: hci3: command 0x0406 tx timeout [ 2558.403453][T18225] Bluetooth: hci0: command tx timeout [ 2559.712780][ T1501] tipc: Started in network mode [ 2559.759436][ T1501] tipc: Node identity 5e9ccd551bdc, cluster identity 4711 [ 2559.850208][ T1501] tipc: Enabled bearer , priority 0 [ 2559.905657][ T1502] syzkaller0: entered promiscuous mode [ 2560.046309][ T1502] syzkaller0: entered allmulticast mode [ 2560.473816][T18225] Bluetooth: hci0: command tx timeout [ 2560.843900][ T1504] tipc: Resetting bearer [ 2560.852126][T31318] tipc: Node number set to 1161874773 [ 2560.859259][ T1499] tipc: Resetting bearer [ 2560.911753][ T1499] tipc: Disabling bearer [ 2561.761006][ T27] audit: type=1326 audit(2000001751.945:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.5.7908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558ebe9 code=0x7ffc0000 [ 2561.783250][ C1] vkms_vblank_simulate: vblank timer overrun [ 2561.921244][ T27] audit: type=1326 audit(2000001751.945:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.5.7908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558ebe9 code=0x7ffc0000 [ 2561.956785][ T27] audit: type=1326 audit(2000001751.945:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.5.7908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff11558ebe9 code=0x7ffc0000 [ 2562.003172][ T27] audit: type=1326 audit(2000001751.945:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.5.7908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558ebe9 code=0x7ffc0000 [ 2562.032208][ T27] audit: type=1326 audit(2000001751.945:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.5.7908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558ebe9 code=0x7ffc0000 [ 2562.162566][ T27] audit: type=1326 audit(2000001751.945:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.5.7908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7ff11558ebe9 code=0x7ffc0000 [ 2562.382452][T18225] Bluetooth: hci2: command 0x0406 tx timeout [ 2562.449604][ T27] audit: type=1326 audit(2000001751.945:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.5.7908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558ebe9 code=0x7ffc0000 [ 2562.656048][ T27] audit: type=1326 audit(2000001751.945:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.5.7908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558ebe9 code=0x7ffc0000 [ 2564.141053][T18225] Bluetooth: hci4: command 0x0406 tx timeout [ 2564.433978][ T1555] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7914'. [ 2569.110939][T18225] Bluetooth: hci4: command 0x0406 tx timeout [ 2569.314257][ T1581] Bluetooth: MGMT ver 1.22 [ 2569.418521][ T1587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7927'. [ 2569.454322][ T1587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2569.472977][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2569.489246][ T1587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2569.535788][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2571.642352][ T1015] Bluetooth: hci4: command 0x0406 tx timeout [ 2571.648966][ T1015] Bluetooth: hci3: command 0x0406 tx timeout [ 2578.602100][ T1668] overlayfs: failed to resolve './file0': -2 [ 2578.615434][ T1668] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7953'. [ 2579.901112][T18225] Bluetooth: hci2: command 0x0406 tx timeout [ 2580.616419][ T1705] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2583.853697][ T1739] loop2: detected capacity change from 0 to 7 [ 2583.861032][ T1739] Dev loop2: unable to read RDB block 7 [ 2583.866733][ T1739] loop2: AHDI p2 [ 2583.870515][ T1739] loop2: partition table partially beyond EOD, truncated [ 2584.780756][T18225] Bluetooth: hci4: command 0x0406 tx timeout [ 2587.322514][ T1771] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7982'. [ 2591.458102][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.471059][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.592967][ T1822] atomic_op ffff88801ef33998 conn xmit_atomic 0000000000000000 [ 2593.010138][ T1836] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2593.742914][T18225] Bluetooth: hci4: command 0x0406 tx timeout [ 2593.872134][ T1851] loop2: detected capacity change from 0 to 7 [ 2593.879012][ T1851] Dev loop2: unable to read RDB block 7 [ 2593.888328][ T1851] loop2: AHDI p2 [ 2593.892069][ T1851] loop2: partition table partially beyond EOD, truncated [ 2595.528050][ T1864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8011'. [ 2596.463332][ T1878] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2598.023541][ T1890] xt_bpf: check failed: parse error [ 2598.530735][ T1895] loop2: detected capacity change from 0 to 7 [ 2598.551183][ T1895] Dev loop2: unable to read RDB block 7 [ 2598.556765][ T1895] loop2: AHDI p2 [ 2598.569493][ T1895] loop2: partition table partially beyond EOD, truncated [ 2599.292102][ T1906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8027'. [ 2600.316869][ T1921] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2601.506942][ T1931] xt_bpf: check failed: parse error [ 2606.122119][ T1942] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8039'. [ 2606.380703][T18225] Bluetooth: hci4: command 0x0406 tx timeout [ 2606.900005][ T1978] xt_bpf: check failed: parse error [ 2609.900751][T18225] Bluetooth: hci4: command 0x0406 tx timeout [ 2610.373438][ T2023] atomic_op ffff88807e750998 conn xmit_atomic 0000000000000000 [ 2614.709374][T18225] Bluetooth: hci3: command 0x0406 tx timeout [ 2614.825294][ T2066] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8077'. [ 2619.601650][ T2105] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8085'. [ 2620.311664][ T2114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8089'. [ 2620.383808][T18225] Bluetooth: hci3: command 0x0406 tx timeout [ 2620.483994][ T2120] xt_bpf: check failed: parse error [ 2623.287153][ T2145] loop2: detected capacity change from 0 to 7 [ 2623.300252][ T2145] Dev loop2: unable to read RDB block 7 [ 2623.328891][ T2145] loop2: AHDI p1 p2 p3 [ 2623.333177][ T2145] loop2: partition table partially beyond EOD, truncated [ 2623.340293][ T2145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2623.351011][ T2145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2623.587545][ T2156] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8102'. [ 2627.064452][ T2189] loop2: detected capacity change from 0 to 7 [ 2627.089988][ T2189] Dev loop2: unable to read RDB block 7 [ 2627.170415][ T2189] loop2: AHDI p1 p2 p3 [ 2627.204447][ T2189] loop2: partition table partially beyond EOD, truncated [ 2627.232892][ T2196] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8114'. [ 2627.305279][ T2189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2627.380151][ T2189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2628.033090][ T2198] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8116'. [ 2629.394225][ T2223] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2630.225577][ T2230] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8128'. [ 2630.702294][T18225] Bluetooth: hci3: command 0x0406 tx timeout [ 2630.798537][ T2243] atomic_op ffff888031f0b198 conn xmit_atomic 0000000000000000 [ 2631.698909][ T2254] binder: 2253:2254 ioctl 4018620d 0 returned -22 [ 2632.271813][ T2259] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8135'. [ 2634.767623][ T2287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8146'. [ 2634.773354][ T2289] binder: 2288:2289 ioctl 4018620d 0 returned -22 [ 2634.882124][ T2293] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2635.388794][ T2301] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8150'. [ 2638.414163][ T2325] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8159'. [ 2638.839930][ T2330] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2640.310333][ T2352] atomic_op ffff888018a8a998 conn xmit_atomic 0000000000000000 [ 2640.830527][ T2358] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8171'. [ 2640.899855][ T2360] loop2: detected capacity change from 0 to 7 [ 2641.035766][ T2360] Dev loop2: unable to read RDB block 7 [ 2641.043869][ T2360] loop2: AHDI p2 [ 2641.047596][ T2360] loop2: partition table partially beyond EOD, truncated [ 2641.188153][ T2374] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2642.192507][ T2392] atomic_op ffff88805a2ac198 conn xmit_atomic 0000000000000000 [ 2642.884972][ T2394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8182'. [ 2643.206699][ T2403] loop2: detected capacity change from 0 to 7 [ 2643.226874][ T2403] Dev loop2: unable to read RDB block 7 [ 2643.249328][ T2403] loop2: AHDI p2 [ 2643.253952][ T2403] loop2: partition table partially beyond EOD, truncated [ 2644.836013][ T2433] atomic_op ffff888043234998 conn xmit_atomic 0000000000000000 [ 2646.014533][ T2458] xt_bpf: check failed: parse error [ 2647.010090][ T2475] atomic_op ffff888020adb998 conn xmit_atomic 0000000000000000 [ 2647.139627][ T2479] loop2: detected capacity change from 0 to 7 [ 2647.146777][ T2479] Dev loop2: unable to read RDB block 7 [ 2647.156193][ T2479] loop2: AHDI p2 [ 2647.159973][ T2479] loop2: partition table partially beyond EOD, truncated [ 2647.480542][ T2485] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2650.830276][ T2536] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2651.033765][ T2540] atomic_op ffff88802c2c2198 conn xmit_atomic 0000000000000000 [ 2651.986681][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.998453][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.243207][ T2556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8228'. [ 2655.058157][ T2589] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2656.698032][ T2612] GUP no longer grows the stack in syz.9.8240 (2612): 200000004000-20000000a000 (200000002000) [ 2656.709806][ T2612] CPU: 1 PID: 2612 Comm: syz.9.8240 Not tainted 6.6.101-syzkaller #0 [ 2656.717914][ T2612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2656.727980][ T2612] Call Trace: [ 2656.731270][ T2612] [ 2656.734217][ T2612] dump_stack_lvl+0x16c/0x230 [ 2656.738917][ T2612] ? show_regs_print_info+0x20/0x20 [ 2656.744127][ T2612] ? load_image+0x3b0/0x3b0 [ 2656.748646][ T2612] ? find_vma+0x12e/0x1b0 [ 2656.753000][ T2612] __get_user_pages+0xfb9/0x1470 [ 2656.757974][ T2612] ? populate_vma_page_range+0x370/0x370 [ 2656.763643][ T2612] get_user_pages_remote+0x3de/0xc10 [ 2656.768964][ T2612] ? get_dump_page+0x200/0x200 [ 2656.773754][ T2612] __access_remote_vm+0x1ff/0x570 [ 2656.778800][ T2612] ? generic_access_phys+0x650/0x650 [ 2656.784096][ T2612] ? alloc_pages+0x4dc/0x740 [ 2656.788707][ T2612] ? do_raw_spin_unlock+0x121/0x230 [ 2656.793926][ T2612] proc_pid_cmdline_read+0x551/0x830 [ 2656.799226][ T2612] ? schedule+0xc7/0x170 [ 2656.803493][ T2612] ? comm_show+0x150/0x150 [ 2656.807925][ T2612] ? common_file_perm+0x190/0x1f0 [ 2656.812965][ T2612] ? fsnotify_perm+0x271/0x5e0 [ 2656.817753][ T2612] do_iter_read+0x506/0xc80 [ 2656.822282][ T2612] ? comm_show+0x150/0x150 [ 2656.826711][ T2612] ? vfs_iter_read+0xa0/0xa0 [ 2656.831311][ T2612] ? __import_iovec+0x5f2/0x860 [ 2656.836177][ T2612] ? import_iovec+0x73/0xa0 [ 2656.840694][ T2612] do_preadv+0x1fa/0x330 [ 2656.844935][ T2612] ? security_bpf+0x7e/0xa0 [ 2656.849430][ T2612] ? do_writev+0x410/0x410 [ 2656.853853][ T2612] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2656.859826][ T2612] ? lock_chain_count+0x20/0x20 [ 2656.864673][ T2612] ? lockdep_hardirqs_on+0x98/0x150 [ 2656.869866][ T2612] do_syscall_64+0x55/0xb0 [ 2656.874276][ T2612] ? clear_bhb_loop+0x40/0x90 [ 2656.878938][ T2612] ? clear_bhb_loop+0x40/0x90 [ 2656.883604][ T2612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2656.889495][ T2612] RIP: 0033:0x7f0cf198ebe9 [ 2656.893913][ T2612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2656.913523][ T2612] RSP: 002b:00007f0cf28af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2656.921939][ T2612] RAX: ffffffffffffffda RBX: 00007f0cf1bb6090 RCX: 00007f0cf198ebe9 [ 2656.929903][ T2612] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 000000000000000a [ 2656.937866][ T2612] RBP: 00007f0cf1a11e19 R08: 0000000021000008 R09: 0000000000000000 [ 2656.945834][ T2612] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 2656.953799][ T2612] R13: 00007f0cf1bb6128 R14: 00007f0cf1bb6090 R15: 00007ffea334b3f8 [ 2656.961784][ T2612] [ 2656.964844][ C1] vkms_vblank_simulate: vblank timer overrun [ 2658.415654][ T2637] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2658.981697][ T2644] xt_bpf: check failed: parse error [ 2661.684141][ T2701] netlink: 'syz.5.8268': attribute type 10 has an invalid length. [ 2661.706091][ T2701] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2661.725391][ T2702] loop2: detected capacity change from 0 to 7 [ 2661.737618][ T2702] Dev loop2: unable to read RDB block 7 [ 2661.737982][ T2701] netlink: 'syz.5.8268': attribute type 10 has an invalid length. [ 2661.749676][ T2702] loop2: AHDI p2 [ 2661.757092][ T2702] loop2: partition table partially beyond EOD, truncated [ 2662.119684][T18225] Bluetooth: hci2: command 0x0406 tx timeout [ 2668.465138][ T2817] atomic_op ffff888068b65198 conn xmit_atomic 0000000000000000 [ 2670.923371][ T2849] fuse: Unknown parameter 'grou00000000000000000000' [ 2671.580775][T18225] Bluetooth: hci4: command 0x0406 tx timeout [ 2673.095283][ T2867] atomic_op ffff88807bc3a998 conn xmit_atomic 0000000000000000 [ 2674.878788][ T2878] fuse: Unknown parameter 'grou00000000000000000000' [ 2675.783673][ T2893] atomic_op ffff888064d74998 conn xmit_atomic 0000000000000000 [ 2676.104161][ T2906] fuse: Unknown parameter 'grou00000000000000000000' [ 2677.835112][ T2934] xt_bpf: check failed: parse error [ 2678.339063][ T2942] binder: 2941:2942 ioctl 4018620d 0 returned -22 [ 2680.010112][ T2963] loop2: detected capacity change from 0 to 7 [ 2680.020510][ T2963] Dev loop2: unable to read RDB block 7 [ 2680.028987][ T2963] loop2: AHDI p2 [ 2680.043018][ T2963] loop2: partition table partially beyond EOD, truncated [ 2680.101281][ T2965] xt_bpf: check failed: parse error [ 2685.304213][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2685.501290][ T1015] Bluetooth: hci3: command 0x0406 tx timeout [ 2686.950653][ T3054] overlayfs: failed to resolve './file0': -2 [ 2686.994456][ T3053] atomic_op ffff88807bf83998 conn xmit_atomic 0000000000000000 [ 2687.371417][ T1015] Bluetooth: hci4: command 0x0406 tx timeout [ 2688.781042][ T3088] overlayfs: failed to resolve './file0': -2 [ 2693.001877][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2695.101756][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2696.033170][ T3178] loop2: detected capacity change from 0 to 7 [ 2696.040154][ T3178] Dev loop2: unable to read RDB block 7 [ 2696.049014][ T3178] loop2: AHDI p2 [ 2696.054417][ T3178] loop2: partition table partially beyond EOD, truncated [ 2696.260705][ T3182] fuse: Bad value for 'user_id' [ 2698.635903][ T3210] fuse: Bad value for 'user_id' [ 2702.439708][ T3249] fuse: Bad value for 'fd' [ 2710.010205][ T3354] overlay: ./file0 is not a directory [ 2712.288947][ T3389] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2712.460228][ T3393] overlayfs: failed to resolve './file0': -2 [ 2713.437525][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.444201][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.154189][ T1015] Bluetooth: hci4: command 0x0406 tx timeout [ 2720.808060][ T3501] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8529'. [ 2722.786949][ T3527] loop2: detected capacity change from 0 to 7 [ 2722.873468][ T3527] Dev loop2: unable to read RDB block 7 [ 2722.923189][ T3527] loop2: AHDI p2 [ 2722.958552][ T3527] loop2: partition table partially beyond EOD, truncated [ 2724.357999][ T3546] xt_bpf: check failed: parse error [ 2725.214060][ T3562] overlay: ./file0 is not a directory [ 2725.674070][ T3568] loop2: detected capacity change from 0 to 7 [ 2725.834877][ T3568] Dev loop2: unable to read RDB block 7 [ 2725.846460][ T3568] loop2: AHDI p2 [ 2725.860221][ T3568] loop2: partition table partially beyond EOD, truncated [ 2726.650365][ T3573] overlay: ./file0 is not a directory [ 2727.645983][ T3584] fuse: Invalid rootmode [ 2729.110776][ T1015] Bluetooth: hci3: command 0x0406 tx timeout [ 2729.135170][ T3601] loop2: detected capacity change from 0 to 7 [ 2729.162522][ T3601] Dev loop2: unable to read RDB block 7 [ 2729.168120][ T3601] loop2: AHDI p2 [ 2729.203092][ T3601] loop2: partition table partially beyond EOD, truncated [ 2729.714072][ T3609] fuse: Bad value for 'rootmode' [ 2730.719960][ T3633] overlay: ./file0 is not a directory [ 2731.858605][ T3646] fuse: Bad value for 'rootmode' [ 2732.749940][ T3658] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8582'. [ 2734.070687][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2735.228984][ T3689] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8593'. [ 2737.814577][ T3706] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2740.302126][ T1015] Bluetooth: hci3: command 0x0406 tx timeout [ 2741.769146][ T3759] overlay: ./file0 is not a directory [ 2742.682288][ T3771] overlay: filesystem on ./bus not supported as upperdir [ 2743.820711][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2744.523045][ T3792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8626'. [ 2744.933174][ T3797] overlay: ./file0 is not a directory [ 2746.300729][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2747.092273][ T3823] loop2: detected capacity change from 0 to 7 [ 2747.166588][ T3823] Dev loop2: unable to read RDB block 7 [ 2747.221991][ T3823] loop2: AHDI p2 [ 2747.250188][ T3823] loop2: partition table partially beyond EOD, truncated [ 2748.366362][ T3839] fuse: Unknown parameter 'user_i00000000000000000000' [ 2748.379421][ T3840] overlay: ./file0 is not a directory [ 2749.046300][ T3854] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8646'. [ 2752.485401][ T3881] fuse: Unknown parameter 'user_i00000000000000000000' [ 2758.116827][ T3938] loop2: detected capacity change from 0 to 7 [ 2758.134734][ T3938] Dev loop2: unable to read RDB block 7 [ 2758.140407][ T3938] loop2: AHDI p2 [ 2758.153482][ T3938] loop2: partition table partially beyond EOD, truncated [ 2760.016815][ T3959] binder: 3958:3959 ioctl c0306201 0 returned -14 [ 2760.774786][ T3967] loop2: detected capacity change from 0 to 7 [ 2760.784791][ T3967] Dev loop2: unable to read RDB block 7 [ 2760.790376][ T3967] loop2: AHDI p2 [ 2760.796754][ T3967] loop2: partition table partially beyond EOD, truncated [ 2762.132982][ T3984] program syz.0.8687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2762.610907][ T3983] program syz.9.8688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2762.663232][ T3985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8688'. [ 2763.129251][ T1015] Bluetooth: hci4: command 0x0406 tx timeout [ 2765.003557][ T4021] loop2: detected capacity change from 0 to 7 [ 2765.014964][ T4021] Dev loop2: unable to read RDB block 7 [ 2765.023634][ T4021] loop2: AHDI p2 [ 2765.027341][ T4021] loop2: partition table partially beyond EOD, truncated [ 2765.761978][ T4033] fuse: Bad value for 'fd' [ 2766.446137][ T4045] loop2: detected capacity change from 0 to 7 [ 2766.463502][ T4045] Dev loop2: unable to read RDB block 7 [ 2766.480391][ T4045] loop2: AHDI p2 [ 2766.486426][ T4045] loop2: partition table partially beyond EOD, truncated [ 2768.657522][ T4071] overlay: ./file0 is not a directory [ 2769.049253][ T4074] loop2: detected capacity change from 0 to 7 [ 2769.064663][ T4074] Dev loop2: unable to read RDB block 7 [ 2769.071178][ T4074] loop2: AHDI p2 [ 2769.075157][ T4074] loop2: partition table partially beyond EOD, truncated [ 2771.821370][ T4107] atomic_op ffff8880781de198 conn xmit_atomic 0000000000000000 [ 2773.691532][ T4131] overlay: ./file0 is not a directory [ 2774.780147][ T1015] Bluetooth: hci4: command 0x0406 tx timeout [ 2774.883421][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.892752][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.560077][ T4158] atomic_op ffff88807cf16198 conn xmit_atomic 0000000000000000 [ 2777.161136][ T1015] Bluetooth: hci4: command 0x0406 tx timeout [ 2778.747144][ T4181] nfs: Unknown parameter 'smackfstransmute' [ 2781.050573][ T4200] overlay: ./file0 is not a directory [ 2782.405761][ T4215] xt_bpf: check failed: parse error [ 2784.953712][ T4244] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8770'. [ 2785.663825][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2788.078426][ T4268] program syz.0.8777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2788.093919][ T4268] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2789.756256][ T4281] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2790.044088][ T4283] overlay: ./file0 is not a directory [ 2792.109857][ T4302] fuse: Unknown parameter 'fd0x0000000000000004' [ 2794.122693][ T4324] atomic_op ffff88807c430998 conn xmit_atomic 0000000000000000 [ 2796.414780][ T4340] fuse: Unknown parameter 'fd0x0000000000000004' [ 2797.061699][ T4348] overlay: ./file0 is not a directory [ 2798.680022][ T4366] fuse: Unknown parameter 'fd0x0000000000000004' [ 2799.538044][ T4375] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2799.820790][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2799.913888][ T4379] atomic_op ffff888079c41998 conn xmit_atomic 0000000000000000 [ 2801.571062][ T4390] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8815'. [ 2802.112157][ T4394] loop2: detected capacity change from 0 to 7 [ 2802.131815][ T4394] Dev loop2: unable to read RDB block 7 [ 2802.137413][ T4394] loop2: AHDI p2 [ 2802.150902][ T4394] loop2: partition table partially beyond EOD, truncated [ 2803.649097][ T4411] ptrace attach of "./syz-executor exec"[633] was attempted by ""[4411] [ 2803.941437][ T4422] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8824'. [ 2804.300734][ T1015] Bluetooth: hci4: command 0x0406 tx timeout [ 2804.835522][ T4421] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2805.590183][ T4431] loop2: detected capacity change from 0 to 7 [ 2805.597440][ T4431] Dev loop2: unable to read RDB block 7 [ 2805.606318][ T4431] loop2: AHDI p2 [ 2805.610124][ T4431] loop2: partition table partially beyond EOD, truncated [ 2805.885793][ T4440] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 2805.893499][ T4440] PKCS7: Only support pkcs7_signedData type [ 2807.264229][ T4451] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2808.700688][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2808.796402][ T4464] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2809.930120][ T4480] program syz.5.8841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2809.961086][ T4480] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2810.065787][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8841'. [ 2811.264060][ T4490] xt_bpf: check failed: parse error [ 2811.511639][ T4498] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 2812.179548][ T4503] loop2: detected capacity change from 0 to 7 [ 2812.194479][ T4502] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2812.202544][ T4503] Dev loop2: unable to read RDB block 7 [ 2812.208142][ T4503] loop2: AHDI p1 p2 p3 [ 2812.215077][ T4503] loop2: partition table partially beyond EOD, truncated [ 2812.221134][ T1015] Bluetooth: hci2: command 0x0406 tx timeout [ 2812.230653][ T4503] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2812.237524][ T4503] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2813.007509][ T4516] overlay: ./file0 is not a directory [ 2814.439786][T22965] ------------[ cut here ]------------ [ 2814.446010][T22965] WARNING: CPU: 0 PID: 22965 at io_uring/io_uring.c:3213 io_ring_exit_work+0x39e/0x7e0 [ 2814.455676][T22965] Modules linked in: [ 2814.459578][T22965] CPU: 0 PID: 22965 Comm: kworker/u4:7 Not tainted 6.6.101-syzkaller #0 [ 2814.468280][T22965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2814.478348][T22965] Workqueue: iou_exit io_ring_exit_work [ 2814.483945][T22965] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 2814.489653][T22965] Code: e8 97 de 20 f7 48 89 df 48 c7 c6 10 aa 64 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 2c 9f b5 f9 e9 64 ff ff ff e8 72 de 20 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 2814.509431][T22965] RSP: 0000:ffffc900056b7a40 EFLAGS: 00010293 [ 2814.515682][T22965] RAX: ffffffff8a64b71e RBX: 000000010003d575 RCX: ffff88802e220000 [ 2814.523703][T22965] RDX: 0000000000000000 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 2814.531826][T22965] RBP: ffffc900056b7bb0 R08: ffffc900056b79c7 R09: 1ffff92000ad6f38 [ 2814.539813][T22965] R10: dffffc0000000000 R11: fffff52000ad6f39 R12: 000000010003d56c [ 2814.547813][T22965] R13: ffff88805c60a288 R14: ffff88805c60a510 R15: dffffc0000000000 [ 2814.555803][T22965] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2814.564929][T22965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2814.571526][T22965] CR2: 000000110c437aaf CR3: 0000000040559000 CR4: 00000000003506f0 [ 2814.579517][T22965] Call Trace: [ 2814.582838][T22965] [ 2814.585757][T22965] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 2814.591606][T22965] ? _raw_spin_unlock_irq+0x23/0x50 [ 2814.596789][T22965] ? process_scheduled_works+0x957/0x15b0 [ 2814.602522][T22965] ? process_scheduled_works+0x957/0x15b0 [ 2814.608224][T22965] process_scheduled_works+0xa45/0x15b0 [ 2814.613824][T22965] ? assign_work+0x400/0x400 [ 2814.618425][T22965] ? assign_work+0x39e/0x400 [ 2814.623108][T22965] worker_thread+0xa55/0xfc0 [ 2814.627699][T22965] kthread+0x2fa/0x390 [ 2814.631793][T22965] ? pr_cont_work+0x560/0x560 [ 2814.636514][T22965] ? kthread_blkcg+0xd0/0xd0 [ 2814.641149][T22965] ret_from_fork+0x48/0x80 [ 2814.645566][T22965] ? kthread_blkcg+0xd0/0xd0 [ 2814.650138][T22965] ret_from_fork_asm+0x11/0x20 [ 2814.654952][T22965] [ 2814.657957][T22965] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2814.665214][T22965] CPU: 0 PID: 22965 Comm: kworker/u4:7 Not tainted 6.6.101-syzkaller #0 [ 2814.673518][T22965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2814.683551][T22965] Workqueue: iou_exit io_ring_exit_work [ 2814.689093][T22965] Call Trace: [ 2814.692358][T22965] [ 2814.695271][T22965] dump_stack_lvl+0x16c/0x230 [ 2814.699931][T22965] ? show_regs_print_info+0x20/0x20 [ 2814.705110][T22965] ? load_image+0x3b0/0x3b0 [ 2814.709606][T22965] panic+0x2c0/0x710 [ 2814.713491][T22965] ? bpf_jit_dump+0xd0/0xd0 [ 2814.717993][T22965] ? ret_from_fork_asm+0x11/0x20 [ 2814.722925][T22965] __warn+0x2e0/0x470 [ 2814.726893][T22965] ? io_ring_exit_work+0x39e/0x7e0 [ 2814.731994][T22965] ? io_ring_exit_work+0x39e/0x7e0 [ 2814.737093][T22965] report_bug+0x2be/0x4f0 [ 2814.741415][T22965] ? io_ring_exit_work+0x39e/0x7e0 [ 2814.746519][T22965] ? io_ring_exit_work+0x39e/0x7e0 [ 2814.751617][T22965] ? io_ring_exit_work+0x3a0/0x7e0 [ 2814.756713][T22965] handle_bug+0xcf/0x120 [ 2814.760950][T22965] exc_invalid_op+0x1a/0x50 [ 2814.765451][T22965] asm_exc_invalid_op+0x1a/0x20 [ 2814.770293][T22965] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 2814.776001][T22965] Code: e8 97 de 20 f7 48 89 df 48 c7 c6 10 aa 64 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 2c 9f b5 f9 e9 64 ff ff ff e8 72 de 20 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 2814.795591][T22965] RSP: 0000:ffffc900056b7a40 EFLAGS: 00010293 [ 2814.801643][T22965] RAX: ffffffff8a64b71e RBX: 000000010003d575 RCX: ffff88802e220000 [ 2814.809600][T22965] RDX: 0000000000000000 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 2814.817555][T22965] RBP: ffffc900056b7bb0 R08: ffffc900056b79c7 R09: 1ffff92000ad6f38 [ 2814.825528][T22965] R10: dffffc0000000000 R11: fffff52000ad6f39 R12: 000000010003d56c [ 2814.833497][T22965] R13: ffff88805c60a288 R14: ffff88805c60a510 R15: dffffc0000000000 [ 2814.841468][T22965] ? io_ring_exit_work+0x39e/0x7e0 [ 2814.846592][T22965] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 2814.852394][T22965] ? _raw_spin_unlock_irq+0x23/0x50 [ 2814.857581][T22965] ? process_scheduled_works+0x957/0x15b0 [ 2814.863288][T22965] ? process_scheduled_works+0x957/0x15b0 [ 2814.868997][T22965] process_scheduled_works+0xa45/0x15b0 [ 2814.874547][T22965] ? assign_work+0x400/0x400 [ 2814.879132][T22965] ? assign_work+0x39e/0x400 [ 2814.883712][T22965] worker_thread+0xa55/0xfc0 [ 2814.888356][T22965] kthread+0x2fa/0x390 [ 2814.892419][T22965] ? pr_cont_work+0x560/0x560 [ 2814.897091][T22965] ? kthread_blkcg+0xd0/0xd0 [ 2814.901673][T22965] ret_from_fork+0x48/0x80 [ 2814.906074][T22965] ? kthread_blkcg+0xd0/0xd0 [ 2814.910649][T22965] ret_from_fork_asm+0x11/0x20 [ 2814.915409][T22965] [ 2814.918663][T22965] Kernel Offset: disabled [ 2814.923092][T22965] Rebooting in 86400 seconds..